Joe Randall

Aerospace contractors face serious risks—but there’s a proven path to resilience. 🛡️ Falcon EDR & Identity – secure endpoints & identities 🔍 Falcon Exposure – focus on what matters 📦 Cribl Stream – audit-ready log management 🌐 Corelight + Zeek – monitor every network zone ✅ CMMC-certified ✅ Built for breach resilience ✅ Full-spectrum visibility 📘 Get the FREE step-by-step guide now to strengthen compliance and enforce Zero Trust. https://hubs.li/Q03nB55B0 Vijilan Security #CyberSecurity #CMMC #ZeroTrust #AerospaceSecurity #EDR #SIEM #MDR #SOC #FalconIdentity #CriblStream #Zeek #Corelight #ComplianceReady #ThreatDetection

13

2 Comments

For years, the Security Awareness Proficiency Assessment (SAPA) has been the gold standard for benchmarking human risk. But as security programs mature, "standard" isn't always enough. Today, KnowBe4 unveiled the new Custom SAPA Agent within the AIDA suite. We’ve taken the data from over 5 million completions and combined it with adaptive AI to create something truly environment-aware. It’s not just a test; it’s an intelligent agent that: -Understands your unique security stack and industry context. -Curates questions based on your specific internal policies. -Pinpoints high-priority risk areas with granular, per-question analytics. Helping customers move from generalized data to pinpoint accuracy is exactly what AIDA is all about. Get more details here: https://bit.ly/4biXSx4 #HumanRisk #AgenticAI #KnowBe4

2

Cyber tip: Always patch your systems. AI tip: ChatGPT won’t build your network—but showing up to happy hour might. 🤖🍻 Whether you’re defending networks or just trying to make new ones (friends, not IPs), join us on Sept 18 at Ballast Point Brewing Company (San Diego) for a FUEL Happy Hour. Smart convos, cold drinks, and zero awkward breakout rooms. RSPV: https://lnkd.in/g824-jrg

9

Overview of the 2025 SANS State of ICS/OT Security Survey The report’s clear message: Treat compliance as a baseline, not the goal. Prioritize visibility, faster remediation Key Findings (Direct from the Report) Incidents remain high and disruptive: 22% of organizations reported a cybersecurity incident in the past 12 months. – 40% caused operational disruption. – Nearly 20% took over a month to remediate (3% took over a year). – Top causes: Unauthorized external access (50%), ransomware (38%). Detection is improving, but recovery lags: – ~50% of incidents detected within 24 hours. – 60% contained within 48 hours total. – Remediation still takes days/weeks on average — a persistent weak spot. Regulation drives maturity: Regulated sites had the same incident rate as unregulated peers but experienced ~50% fewer financial losses and safety impacts. Threat intelligence pays dividends: 67% of organizations use it (mostly vendor feeds, government sources, and ISACs). Those who do are far more likely to improve monitoring, segmentation, and detection. Remote access remains a top risk: It accounted for half of all incidents, yet only 13% of organizations have fully implemented advanced controls (e.g., session recording, ICS/OT-aware access, real-time approvals). Preparedness is uneven: Only 14% feel fully prepared for emerging threats. However, organizations that include frontline technicians in exercises are 1.7× more likely to report strong readiness. Investment momentum is clear: Asset visibility, threat detection, and secure remote access dominate both 2025 deployments and 2026–2027 plans. Additional Notable Insights Incident Response (IR): 57% now have a dedicated ICS/OT IR plan (70% at regulated + threat-intel sites). Testing is increasing (25% quarterly). Those who test regularly also run more realistic drills (red/purple team, operational exercises). Visibility & Detection: Only 13% have full ICS Cyber Kill Chain visibility. 49% use some ICS/OT-specific detection, but just 26% rate it “highly effective.” Cloud monitoring is patchy (only 13% fully integrated). Future Threat Outlook: Respondents see rising risks to edge/IoT devices (60%), legacy systems (54%), and cloud-connected OT (53%). Ransomware targeting OT is the #1 scenario considered in planning (72%). Purdue Model Gaps: Detection is strongest at higher levels (Level 4/3); visibility drops sharply at Level 2, Level 1, and especially remote/field sites. Resilience & Culture: Cybersecurity is still only partially integrated into business continuity/disaster recovery plans for most organizations. Stronger culture (IT–OT–leadership alignment) is clearly linked to having an ICS-specific IR plan. Who’s Ahead? Fully prepared organizations (the top 14%) share traits: full Kill Chain visibility, advanced remote-access controls, active information sharing, and heavy involvement of field technicians/engineers in exercises. https://www.sans.org

5

MDM’s were never designed to do Security. DISA which provides global infrastructure for information sharing and communication across the US Department of Defense has now mandated MTD to be running on all Android and iOS devices. This is another testimony for need for Mobile Security for Defense forces across the globe.

12

1 Comment

💪Strengthening Your Position in the Defense Industrial Base The System Security Plan (SSP) is the core document that shows how your organization meets or plans to meet, the required security controls for a given system. It defines your system boundaries, outlines the environment in which that system operates, explains how each security requirement is implemented, and documents any connections or dependencies with other systems. For defense contractors, a well developed SSP isn’t just paperwork — it’s a foundational requirement for demonstrating compliance and maintaining competitiveness in the DoD supply chain. Need help becoming CMMC compliant or maintaining compliance with confidence? Let's connect 👉 https://hubs.ly/Q044_kwg0 Need more information and resources on CMMC compliance? Start here 👉 CMMC Level 1 and 2 https://hubs.ly/Q044_k1W0 #DefenseContractors #DoW #DoD #DiB #CMMC #NIST800171 #DFARS

5

ZTNA gets you on the track - but it won't get you across the Zero Trust finish line. 🏁 It’s built for access control. Not for visibility. Not for threat prevention. Not policy enforcement. Winning the Zero Trust race takes a platform built to see and secure everything, adapt in real time and at full speed—no blind spots, no pit stops. Read the blog to see how to go the distance: 👉https://bit.ly/45bjYyo #ZeroTrust #SASE #CISOStrategy

52

For years, the Security Awareness Proficiency Assessment (SAPA) has been the gold standard for benchmarking human risk. But as security programs mature, "standard" isn't always enough. Today, KnowBe4 unveiled the new Custom SAPA Agent within the AIDA suite. We’ve taken the data from over 5 million completions and combined it with adaptive AI to create something truly environment-aware. It’s not just a test; it’s an intelligent agent that: ✅ Understands your unique security stack and industry context. ✅ Curates questions based on your specific internal policies. ✅ Pinpoints high-priority risk areas with granular, per-question analytics. Helping customers move from generalized data to pinpoint accuracy is exactly what AIDA is all about. Get more details here: https://bit.ly/4biXSx4 #HumanRisk #AgenticAI #KnowBe4

1

Operational resilience is not only just a technical priority - it is a court business imperative. as threat landscapes evolved, the convergence of IT and OT requires a sophisticated risk based approach. Add SpearTip we go beyond the “what if” by helping our clients quantify their OT risk and understand the true financial impact of potential disruptions. By leveraging Zürich anonymized insurance and claims data, we provide our clients with a unique, data driven perspective that transformed abstract threats into actionable business insights. I look forward to connecting with many of you next week to discuss how we can strengthen your organization’s posture. Please reach out if you’d like to grab dinner or schedule a dedicated time to chat. #OTSecurity #Risk management #CyberSecurity#QuantifiableRisk #CyberRiskQualification #SpiritTip #ZürichResiliencyServices #Zürich Insurance.

1