Andrew Somoza

Best one-line takeaway from Jeff Luna's speaking session FutureCon CyberSecurity Events in Baltimore last..."If it can't be defended in the boardroom, it won't be funded." With so many cyber tools already in the stack, and countless others available, boards are asking tough questions. Jeff addressed it in his session, "Beyond the Dashboard: Translating 2026 Cyber Risks into Boardroom ROI." Stay tuned, Centripetal will be hosting an encore digital event featuring this topic. 🔥 #cyberintelligence, #threatintelligence #cyberROI #CISO #SecOps #cyberBoardofDirectors

8

2 Comments

CRM supply chains are a growing vector and already weaponized. If your cybersecurity solutions don’t address integrated data risk—and lack positioning—you're overlooked. CRG makes sure you’re not just visible, but trusted and operational when it counts. ✉ contact@crgroupinc.com 📅 Capture & resilience briefing → https://lnkd.in/deYGhiMW #CRG #CyberSecurity #SupplyChain #SaaS #Software #MFA #CRM #SOQL #CMMC #CMMI #Cyber #Workiva #Phishing #SalesForce #AI #ML #RPA #SoftwareDevelopment #SDLC #DevSecOps #Engineering #3rdParty #SupplyChainRisk #SaaSBreach #SalesforceSecurity #ThirdPartyRisk #CaptureStrategy #WinTheWork

3

Building a cybersecurity channel program? Let’s talk about the right way to start (especially if you want fewer headaches and more deals…) If you’re anything like most founders or sales leaders, you’ve probably thought: “We need BIG partners to get reach! More is better!” But after building three-channel programs from zero, Konnor Andersen can tell you: "That’s the fastest way to…spin your wheels, spread yourself too thin, and burn marketing dollars you probably don’t have." Here’s Konnor's secret (and it’s refreshingly simple): - Focus on a small group of smaller partners. Think less than 40 sellers per partner. - Prioritize fit over fame: choose partners right-sized for YOUR stage who have deep connections with YOUR ideal customer. - Resist the urge to collect logos. (Paper partnerships ≠ revenue.) At the end of the day, channel success is about depth, not breadth. Go deep, not wide. Invest where you can actually matter. Build meaningful relationships. (And yes, maybe even spring for some cool swag... just don’t put your logo on the sneakers 😉) If you’re building from scratch, ignore the noise and keep it focused. Your future self and your board will thank you. Konnor talks about all of this on the latest episode of the Cyber GTM Talk podcast. Find it in your favorite podcast player or at cybergtmtalk.com

11

4 Comments

It's always encouraging to see businesses in the cybersecurity and MSP sectors properly lay out the basics. Solid principles, a clever integration philosophy, and a zero-greed scaling strategy were all excellently executed by The 20 MSP. Every point made here is consistent with the principles of disciplined growth, structure, and preparation that we espouse at Cebron Group. Too many businesses focus on volume and overlook the fact that long-term consolidation begins before a deal is completed. This article serves as an excellent reminder of what "doing it right" entails. Michael Mota J.R. Hart, CPA Brandon Keany https://lnkd.in/e_kQffUS #MergersAndAcquisitions #MSP #Cybersecurity #PrivateEquity #RollUpStrategy #BusinessGrowth

6

“In 2025, 62% of companies experienced supply-chain cybersecurity disruptions.” 👉 Your security is only as strong as the weakest link in your partner ecosystem. https://buff.ly/2DZPljF #SupplyChainRisk #ThirdPartyRisk #CyberResilience

1

Which 19 CIS Security Controls do you need to meet to achieve HB96 compliance? Look no further than this 👇 Below is a deep dive into the specific CIS Safeguards required to meet each pillar of HB 96. 1. Risk & Critical Function Identification * Safeguard 1.1: Establish and maintain a detailed, up-to-date inventory of all enterprise assets with the potential to store or process data. * Safeguard 2.1: Maintain a detailed inventory of all licensed software, including its business purpose. * Safeguard 3.1 & 3.7: Establish a data management process and a classification scheme (e.g., Sensitive, Confidential, Public) to identify and prioritize the protection of critical data. 2. Threat Detection Mechanisms * Safeguard 7.1: Establish a vulnerability management process to track and remediate known flaws in assets. * Safeguard 8.1 & 8.2: Establish an audit log management process and ensure logging is enabled across all enterprise assets to detect anomalies. * Safeguard 10.1 & 10.2: Deploy anti-malware software on all assets and configure automatic signature updates to detect new threats. 3. Incident Response Procedures * Safeguard 17.1: Designate at least one key person (and a backup) to manage the incident handling process. * Safeguard 17.3: Establish a clear process for the workforce to report potential security incidents immediately. * Safeguard 6.2: Establish a process to revoke access immediately upon termination or role change to prevent "insider threats" during a crisis. 4. Infrastructure Recovery & Maintenance * Safeguard 11.1: Establish a data recovery process that prioritizes systems based on business value. * Safeguard 11.2: Perform automated, regular backups (at least weekly) for all in-scope assets. * Safeguard 11.4: Maintain an isolated instance of recovery data (offline or cloud) to ensure backups remain uncorrupted during ransomware attacks. * Safeguard 4.1: Maintain a secure configuration process for all assets to ensure systems are repaired back to a known "secure" state rather than their vulnerable defaults. 5. Mandatory Training * Safeguard 14.1: Establish a security awareness program with training at hire and annually. * Safeguard 14.2: Train all workforce members specifically to recognize social engineering (e.g., phishing, pre-texting). * Safeguard 14.4: Train the workforce on data handling best practices, including locking screens and erasing whiteboards. There you have it. You don't need to worry about all 56 CIS-IG1 safeguards to meet HB96 compliance. Looking for even less worry? Send me a message, and let's talk about how Vinson Protect can help you meet your HB96 compliance requirements. https://lnkd.in/gtJcYtaR

4

At our summit in the beginning of the year, examiners singled out NIST CSF 2.0 as the top framework for credit unions—and for good reason. This updated standard delivers: -A proven, step-by-step blueprint for identifying, assessing, and mitigating cyber risks -Flexible implementation – equally effective for small community CUs and large institutions -Built-in regulatory alignment that satisfies examiner expectations while following industry best practices With rising cyber threats and tighter scrutiny, a robust framework isn’t just helpful—it’s essential. NIST CSF 2.0 empowers credit unions to move from reactive compliance to proactive cyber resilience. Is your CU maximizing this critical tool? https://hubs.ly/Q03nl-Qm0

6

A growing financial services firm faced IT limitations that slowed expansion. Fortium delivered a Fractional CIO to replace the MSSP, restore control, and establish scalable technology management for sustained growth. 🔗 https://lnkd.in/e6gjPWtS #CaseStudy #CIO #FinancialServices #TechnologyLeadership #FortiumPartners

1