Eric Ashdown

The California Privacy Protection Agency has opened up a new position -- a Research Technologist to help facilitate audits of businesses covered under the CCPA. https://lnkd.in/gsBE-Ses

55

2 Comments

Unpacking SGTech's Powerhouse Event on AI, Cyber & Collaboration 🔥 Last week’s #MembersMonday was a standout! 🚀 A huge thank you to Manik Bhandari (AICDC Co-Chair) and Dr. Genie Sugene Gan 간 수진 (CSC Chair) for kickstarting the session. Genie’s words truly resonated with all of us, highlighting how our executive committee provides pro-bono leadership to drive the tech community forward, both in Singapore and overseas. This is the spirit we champion! 🙌 We were thrilled to welcome amazing new SGTech members: • Singsys Pte Ltd - Web/App development experts. • Kailasam Vadivelu Singapore from Toss-EX S Pte Ltd - Digital transformation consultancy. • Prakaash Govindasamy from Viegreen Trading Pte. Ltd. - HealthTech distribution. The insights shared were nothing short of stellar: 🔹 Sutowo Wong from Temus outlined their role as a digital services champion, contributing to Singapore’s Smart Nation 2.0 strategic backbone. 🔹 Dr. SUN DING delivered a crucial guide on cyber resilience in the age of GenAI for SMEs. He highlighted looming 2026 challenges like “Shadow AI” and “God-mode” access, echoing the updated CSA Cyber Essentials mark. A must-read whitepaper! 🔹 Ryan Kwok from the Cyber Security Agency of Singapore (CSA) introduced the Safe App Portal (launched at SICW 2025). This FREE 6-month pilot is a game-changer for mobile app developers to check vulnerabilities and learn mitigation, incredible value! 🔹 Ng Sue-Ean from IMDA shared about the Enterprise Compute Initiative (ECI) – a $150M boost for Singapore-based companies on their AI transformation journey, with direct support from Google, Amazon Web Services (AWS), Microsoft, and Oracle. It’s not just about cloud access, but also critical training and engineering support. The event wrapped up with dynamic networking among business leaders, many of whom I've collaborated with for over 20 years. The energy was palpable! 💫 My Key Takeaway: The value here is tangible. From free cybersecurity tools for developers to substantial grants and partnered support for AI adoption, the opportunities for Singapore businesses are real and actionable. As we gear up for more insightful events in 2026, I strongly encourage all business leaders to get involved with SGTech. Discover what can propel your business forward. I'm already acting on these insights, let’s connect and explore how we can collaborate! #SGTech #AI #Cybersecurity #DigitalTransformation #SmartNation #SingaporeTech #BusinessGrants #ECI Genie Sugene Gan | Roy Toh, PBM | Teik Guan Tan | Dennis Chung | Ken Soh | David Ong | Chee Leng Loy | Eugene Lam | Breyvan Tan | Divyan Munirathnam Konidala | Sun Ding | Victor Lim | Johnny Kho | Jeremy Lee | Stanley Wong | Dennis Chan | Felicia Ng | Wendy Lim | Soon Tein Lim Nicholas L. | Shih Hor Lau | Dutch Ng | Alex Ng | Sharon Teo | Jamie Tan | Yean Cheong 张苑青 | Manoj Sitaram | Leon Hoi | Siti Nurdzafirah Zainal | Jacqueline Khoo | Rhonda Yap | Rui Yin Low

64

Last April, CISA issued an 11-month extension for its CVE program with MITRE, rescuing the program from an almost certain death. Since then, CISA and MITRE have negotiated a new deal that puts the CVE program on firmer footing. In a statement, Nick Andersen, acting director of CISA, told CSO, “Under CISA’s leadership and sponsorship, the CVE program is fully funded and has continually evolved and modernized to support the global vulnerability ecosystem.” My exclusive for CSO. (link in the comments)

11

Is security enough for data protection ? Or do we need a little more ? ISMS, or information security management systems are designed to protect information, confidentiality, integrity, availability. Now, when using SFTP, the files are perfectly secure from a transfer standpoint, but, what about governance ? Audit capability ? Access control ? That's where the gap is. And yes, having an authentication bringing audit capability is also a factor in data governance. 👉 https://gag.gl/2ZxYDE #cybersecurity Kiteworks #governance #SSH #SFTP

17

5 Comments

The latest OCR enforcement actions—highlighted in Shook, Hardy & Bacon L.L.P.’s March 2025 update—offer a clear and urgent reminder: Risk analysis isn’t optional. It’s foundational. Whether you’re a covered entity or a business associate, failure to conduct an enterprise-wide, accurate, and thorough risk analysis remains one of the most common and costly compliance gaps cited by OCR. And yet, in 2025, too many organizations still treat it as a one-time checkbox or an IT-centric task. In fact, according to OCR enforcement data, only 10% of organizations have taken this essential step in enterprise cyber risk management (ECRM). This is precisely why the Leadership in Healthcare Cyber Risk Management program at UT Austin places risk analysis at the center of its curriculum. In my course, Healthcare Enterprise Cyber Risk Management, we emphasize not just how to perform an OCR-Quality risk analysis—but why it matters strategically, operationally, financially, and legally. 💡 Risk analysis is where cyber risk management begins. 📉 OCR penalties are often where failure to act ends. The next cohort for my course begins June 30, 2025. Register here: https://lnkd.in/e26qgbry https://lnkd.in/eFV2ET2M #ECRM #CyberRiskManagement #HIPAACompliance #RiskAnalysis #HealthcareCybersecurity #OCR #UTAustin #LeadershipInAction

5

In case you missed this exciting update: ‼️Tidal Cyber now maps your defensive stack to NIST CSF, MITRE D3FEND giving GRC teams the visibility to simplify audits, align with mandates, and communicate posture clearly. GRC can’t operate in isolation. Tidal Cyber unifies compliance and security by mapping tools to key frameworks, simplifying audits, accelerating reporting, and aligns security investments with regulations. Talk to us at #BlackHat!

27

5 Comments

Thanks to Ray Panta sharing below, National Institute of Standards and Technology (NIST) Special Publication is always a good reference for Cybersecurity practitioner in CyberSecurity related area. NIST SP as a whole is free, public accessible and by created by expert for everyone. What more else one can ask for such a good deal ? 😅 💻 Cyber risk means the chance of something going wrong in digital systems 🌐 – like hackers stealing data 🕵️‍♂️, systems going offline 🚫, or software getting hacked 🐞 🔐 It includes risks to privacy 🧾, finances 💸, business operations 🏢, and even national security 🛡️ 📘 NIST SP 800-30 is a guide 📖 from the US National Institute of Standards and Technology (NIST) 🇺🇸 that helps organisations figure out and manage their cyber risks ⚠️ 🧮 It teaches how to do risk assessments 🧠 – like identifying threats 👀, figuring out how likely they are 🎯, and what damage they could cause 💥 🧩 It's a key part of the NIST Cybersecurity Framework, used worldwide 🌍 to build safer digital systems 🏛️ NIST Special Publications are official guides 📚 that offer best practices, standards, and strategies for improving cybersecurity 👋 Robin Yong #MemeLord #LobinKor 🏆 #Favikon #CyberSecurity & #LinkedIn #Malaysia 💻 #5G, #ArtificialIntelligence, #IT, #CyberSecurity, #ForeignAffairs & #Geopolitics 🤝 https://v.gd/Robin ✨ #AI-augmented content, do fact check if in doubt ℹ️ #MemeLord not liable for the info shared.

19

1 Comment

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

5

1 Comment