Insights

Milner Ignites is an end-to-end virtual conference with technology booths, exclusive networking opportunities, and keynote presentations on how to reignite and protect your business from the latest security threats. Breaches have become a cost of doing business; cybersecurity can no longer be an afterthought in any business sector. Whether you are a senior executive or tech-savvy director, this is the ideal setting to start your business transformation and accelerate your journey in 2021. Engage and connect with industry experts and leaders through a fully interactive virtual conference.

We believe effective data security starts with awareness, training, and risk assessment. Today's world - often referred to as the "information age"- has seen people generate, store and exchange information at an unparalleled rate of frequency and volume. In light of the rapid expansion of remote working: How has this conversation changed? Are your employees exposed to greater risks by working from anywhere. How can organizations stay vigilant? Cyber experts, Todd Larson from Sentinel Benefits and Patrick Kelley from Critical Path Security, will answer crucial questions like: What are the new risks as firms allow their employees to work remotely? What are the best practices for onboarding people securely in a virtual world? How are the "bad guys" looking to take advantage of people during the pandemic? Lisa Vassallo, People & Culture Generalist from Sentinel Benefits, will be your moderator for this lively discussion about cybersecurity in the world of COVID-19.

Credit - Joan Gamell As we continue to learn more about the recent SolarWinds Orion supply-chain attack conducted by nation-state actors, and subsequent targeting of private and government sector organizations, Critical Path Security felt it imperative to share some guidance on what we are tracking. This guidance reflects information from industry counterparts as well as recommendations derived from internal experience. At this moment, a little over 18,000 organizations around the world have downloaded network management tools that contain a backdoor built into the SolarWinds Orion product. The disclosure from Austin, Texas-based SolarWinds, came a day after the US government revealed a major breach hitting federal agencies and private companies. The US Department of Treasury, Commerce, and Homeland Security departments were among the federal agencies on the receiving end of the attacks that provided email and other sensitive information to attackers. The backdoor infected customers who installed an update from March…

The Cybersecurity Maturity Model Certification (CMMC) (Web Resource) is a program being developed to help ensure that specific types of unclassified data that exist outside of government systems remain adequately protected against cyber-attacks. The CMMC applies to Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) in non-government systems. This certification program is intended to replace the process of self-attestation to NIST SP 800-171 that many defense contractors and subcontractors performed over recent years. This program will significantly impact how a large portion of future defense contracts are awarded. The program requires external audits to be conducted by external parties such as Critical Path Security. Failure to comply and can lead to serious penalties. Therefore, many organizations in the Defense Industrial Base (DIB) are actively working to understand what the CMMC means for them. To alleviate some of the ongoing concerns, we are providing a short list of items. 15…