10-31-2020, 03:58 AM
It’s Cybersecurity Awareness Month — there still is a lot to do
<div style="margin: 5px 5% 10px 5%;"><img src="https://www.sickgaming.net/blog/wp-content/uploads/2020/10/its-cybersecurity-awareness-month-there-still-is-a-lot-to-do.jpg" width="2560" height="1766" title="" alt="" /></div><div><div><img src="https://www.sickgaming.net/blog/wp-content/uploads/2020/10/its-cybersecurity-awareness-month-there-still-is-a-lot-to-do.jpg" class="ff-og-image-inserted"></div>
<h3>October is National Cyber Security Awareness Month (NCSAM). And there is still a lot to do!</h3>
<p>For the last 17 years, the <a href="https://www.cisa.gov/national-cyber-security-awareness-month" target="_blank" rel="noopener noreferrer">National Cybersecurity Awareness Month (NCSAM)</a> campaign, driven by the Department of Homeland Security, has raised awareness about the importance of cyber security across the Nation with the mission of ensuring that all Americans have the resources they need to be safer and more secure online.</p>
<p>In alignment with this noble mission, Microsoft Security is providing educational content and executive speakers to empower our customers, employees and families. Tune into the <a href="https://www.cyberscoop.com/events/cybertalks2020/" target="_blank" rel="noopener noreferrer">CyberTalks</a> recap to listen to the keynoted delivered by <a href="https://techcommunity.microsoft.com/t5/user/viewprofilepage/user-id/158219" target="_blank" rel="noopener noreferrer">@Ann Johnson</a>, Corporate Vice President of Security, Compliance and Identity, on how to future proof your security strategy.</p>
<h2>Cyber security podcasts</h2>
<p>In addition to the blog series that is taking over our blog in October, Microsoft Security is also sponsoring two security podcasts in CyberScoop.com we want to encourage our community to tune in and listen to both conversations.</p>
<ul>
<li><strong>Available now</strong>: <a href="https://www.cyberscoop.com/enabling-secure-remote-work-embracing-zero-trust/" target="_blank" rel="noopener noreferrer">Enabling secure remote work by embracing Zero Trust</a>—One of the greatest challenges we often hear from public and private sector CISOs, when it comes to achieving a Zero Trust IT operating environment, is the question of how to tackle such a massive undertaking—and where to begin. Tune in to listen to CTO, Steve Faehl, to learn more about Microsoft’s journey towards Zero Trust.</li>
<li><strong>Available October 19: </strong><a href="https://www.fedscoop.com/radio/cloud-ai-key-managing-risk-management-compliance/">Risk Reduction—Podcast</a> featuring GM, Alym Rayani who delivers an in-depth conversation about compliance and its connection to security.</li>
</ul>
<h2>Additional security blogs to read</h2>
<h3>Government agency audit traceability</h3>
<p>The reality today for many government agencies is there is no audit traceability to determine <em>which</em> email messages and content an attacker may have seen during a breached session into a user’s mailbox. The standard level of <a href="https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide" target="_blank" rel="noopener noreferrer">Office 365 auditing</a> includes events that a user logged into their mailbox but does not include detailed information on the activity that occurs within the mailbox<em>.</em> As a result, organizations have no choice but to assume <em>all</em> content within the mailbox is compromised whether sensitive data or PII was viewed by the adversary. To learn more about how using Advanced Audit can help improve forensic investigation capability, read this blog from Matthew Littleton, Principal Technical Specialist on this <a href="https://techcommunity.microsoft.com/t5/public-sector-blog/using-advanced-audit-to-improve-your-forensic-investigation/ba-p/1799784" target="_blank" rel="noopener noreferrer">Public Sector blog</a>.</p>
<h3>Top 5 security questions asked by US Government customers</h3>
<p>In an era of remote work, end users wanted to collaborate with outside agencies but in a way that meant their data was secure. IT Admins wanted to know which configuration options best fit their organization’s security posture. CIO’s wanted to lean in and give their workforce the best in class technology, all while following US Government accreditation standards. The common theme in most questions asked by our customers was around security. Read more about<a href="https://techcommunity.microsoft.com/t5/public-sector-blog/top-5-security-questions-asked-by-our-us-government-customers/ba-p/1751679" target="_blank" rel="noopener noreferrer"> the top 5 security questions asked by our US Government customers for Microsoft Teams.</a></p>
<p>October is my favorite time of year, between the change of season, Major League Baseball playoffs, and with football underway. It’s also <a href="https://www.cisa.gov/national-cyber-security-awareness-month" target="_blank" rel="noopener noreferrer">National Cybersecurity Awareness Month</a>, though with so many cyberattacks and incidents in the news, one month of dedicated focus hardly seems sufficient. Learn how <a href="https://techcommunity.microsoft.com/t5/public-sector-blog/microsoft-s-end-to-end-security-commitments-to-our-customers/ba-p/1784105" target="_blank" rel="noopener noreferrer">Microsoft delivers on an end-to-end security strategy to reduce risk and deliver on its commitment to customers.</a></p>
<p>To learn more about how to be #Cybersmart visit the cybersecurity <a href="https://www.microsoft.com/en-us/security/business/cybersecurity-awareness" target="_blank" rel="noopener noreferrer">website.</a> Bookmark the <a href="https://www.microsoft.com/security/blog/" target="_blank" rel="noopener noreferrer">Security blog</a> to keep up with our expert coverage on security matters. Also, follow us at <a href="https://twitter.com/@MSFTSecurity" target="_blank" rel="noopener noreferrer">@MSFTSecurity</a> for the latest news and updates on cybersecurity.</p>
</div>
https://www.sickgaming.net/blog/2020/10/...lot-to-do/
<div style="margin: 5px 5% 10px 5%;"><img src="https://www.sickgaming.net/blog/wp-content/uploads/2020/10/its-cybersecurity-awareness-month-there-still-is-a-lot-to-do.jpg" width="2560" height="1766" title="" alt="" /></div><div><div><img src="https://www.sickgaming.net/blog/wp-content/uploads/2020/10/its-cybersecurity-awareness-month-there-still-is-a-lot-to-do.jpg" class="ff-og-image-inserted"></div>
<h3>October is National Cyber Security Awareness Month (NCSAM). And there is still a lot to do!</h3>
<p>For the last 17 years, the <a href="https://www.cisa.gov/national-cyber-security-awareness-month" target="_blank" rel="noopener noreferrer">National Cybersecurity Awareness Month (NCSAM)</a> campaign, driven by the Department of Homeland Security, has raised awareness about the importance of cyber security across the Nation with the mission of ensuring that all Americans have the resources they need to be safer and more secure online.</p>
<p>In alignment with this noble mission, Microsoft Security is providing educational content and executive speakers to empower our customers, employees and families. Tune into the <a href="https://www.cyberscoop.com/events/cybertalks2020/" target="_blank" rel="noopener noreferrer">CyberTalks</a> recap to listen to the keynoted delivered by <a href="https://techcommunity.microsoft.com/t5/user/viewprofilepage/user-id/158219" target="_blank" rel="noopener noreferrer">@Ann Johnson</a>, Corporate Vice President of Security, Compliance and Identity, on how to future proof your security strategy.</p>
<h2>Cyber security podcasts</h2>
<p>In addition to the blog series that is taking over our blog in October, Microsoft Security is also sponsoring two security podcasts in CyberScoop.com we want to encourage our community to tune in and listen to both conversations.</p>
<ul>
<li><strong>Available now</strong>: <a href="https://www.cyberscoop.com/enabling-secure-remote-work-embracing-zero-trust/" target="_blank" rel="noopener noreferrer">Enabling secure remote work by embracing Zero Trust</a>—One of the greatest challenges we often hear from public and private sector CISOs, when it comes to achieving a Zero Trust IT operating environment, is the question of how to tackle such a massive undertaking—and where to begin. Tune in to listen to CTO, Steve Faehl, to learn more about Microsoft’s journey towards Zero Trust.</li>
<li><strong>Available October 19: </strong><a href="https://www.fedscoop.com/radio/cloud-ai-key-managing-risk-management-compliance/">Risk Reduction—Podcast</a> featuring GM, Alym Rayani who delivers an in-depth conversation about compliance and its connection to security.</li>
</ul>
<h2>Additional security blogs to read</h2>
<h3>Government agency audit traceability</h3>
<p>The reality today for many government agencies is there is no audit traceability to determine <em>which</em> email messages and content an attacker may have seen during a breached session into a user’s mailbox. The standard level of <a href="https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide" target="_blank" rel="noopener noreferrer">Office 365 auditing</a> includes events that a user logged into their mailbox but does not include detailed information on the activity that occurs within the mailbox<em>.</em> As a result, organizations have no choice but to assume <em>all</em> content within the mailbox is compromised whether sensitive data or PII was viewed by the adversary. To learn more about how using Advanced Audit can help improve forensic investigation capability, read this blog from Matthew Littleton, Principal Technical Specialist on this <a href="https://techcommunity.microsoft.com/t5/public-sector-blog/using-advanced-audit-to-improve-your-forensic-investigation/ba-p/1799784" target="_blank" rel="noopener noreferrer">Public Sector blog</a>.</p>
<h3>Top 5 security questions asked by US Government customers</h3>
<p>In an era of remote work, end users wanted to collaborate with outside agencies but in a way that meant their data was secure. IT Admins wanted to know which configuration options best fit their organization’s security posture. CIO’s wanted to lean in and give their workforce the best in class technology, all while following US Government accreditation standards. The common theme in most questions asked by our customers was around security. Read more about<a href="https://techcommunity.microsoft.com/t5/public-sector-blog/top-5-security-questions-asked-by-our-us-government-customers/ba-p/1751679" target="_blank" rel="noopener noreferrer"> the top 5 security questions asked by our US Government customers for Microsoft Teams.</a></p>
<p>October is my favorite time of year, between the change of season, Major League Baseball playoffs, and with football underway. It’s also <a href="https://www.cisa.gov/national-cyber-security-awareness-month" target="_blank" rel="noopener noreferrer">National Cybersecurity Awareness Month</a>, though with so many cyberattacks and incidents in the news, one month of dedicated focus hardly seems sufficient. Learn how <a href="https://techcommunity.microsoft.com/t5/public-sector-blog/microsoft-s-end-to-end-security-commitments-to-our-customers/ba-p/1784105" target="_blank" rel="noopener noreferrer">Microsoft delivers on an end-to-end security strategy to reduce risk and deliver on its commitment to customers.</a></p>
<p>To learn more about how to be #Cybersmart visit the cybersecurity <a href="https://www.microsoft.com/en-us/security/business/cybersecurity-awareness" target="_blank" rel="noopener noreferrer">website.</a> Bookmark the <a href="https://www.microsoft.com/security/blog/" target="_blank" rel="noopener noreferrer">Security blog</a> to keep up with our expert coverage on security matters. Also, follow us at <a href="https://twitter.com/@MSFTSecurity" target="_blank" rel="noopener noreferrer">@MSFTSecurity</a> for the latest news and updates on cybersecurity.</p>
</div>
https://www.sickgaming.net/blog/2020/10/...lot-to-do/