CYBERSECURITY CYBERSECURITY SEMINAR SEMINAR STEVE RUTKOVITZ - - PowerPoint PPT Presentation

CYBERSECURITY CYBERSECURITY SEMINAR SEMINAR

PROTECTING YOU AND YOUR BUSINESS

STEVE RUTKOVITZ STEVE RUTKOVITZ

2

Management Education Risk Assessments Security and Compliance

ABOUT STEVE RUTKOVITZ ABOUT STEVE RUTKOVITZ

For over 20 years, Steve owned and operated a very successful MSP business. W ith a clear understanding of the market needs, and the ability to see things that no one else can, he developed an innovative IT and business process.

STEVE’S SUPERHERO POWERS: STEVE’S SUPERHERO POWERS:

PRESIDENT & CEO PRESIDENT & CEO

3

SMBs SMBs

Target of 61% of all security breaches

2018 2018

50% increase in Cyber Attacks

PHISHING PHISHING

Attacks reported by 76% of businesses

61% 61% 50% 76% 76% 600% 600%

IOT IOT

Attacks increased by 600%

STATE OF CYBER SECURITY STATE OF CYBER SECURITY

4

Baltimore city government computer network hit by ransomware attack

payment disrupted the city’s technology systems. “Employees are working diligently to locate the source and extent of the infection,” said Lester Davis, a spokesman for Democratic Mayor Bernard C. “Jack” Young. Davis said critical systems, including 911 and 311, were not been affected, but that the majority of city servers were shut down. The effects ranged from a City Council committee canceling a hearing on gun violence to water customers being unable to get billing questions answered. By the afternoon, Davis said, city teams had the ransomware quarantined. But the cause and scale of the problem was not clear Tuesday evening and Davis did not know when the affected systems would be back online. Dave Fitz, a spokesman for the FBI’s Baltimore office, said agents from its cyber squad were assisting the city. altimore city government computers were infected with ransomware Tuesday, the mayor’s office said, the second time in just over a year that hackers demanding

MAY 7, 2019, 6:50 PM

THE PROBLEM THE PROBLEM

5

Increased Increased Number of Number of Devices Devices Cloud Cloud Applications Applications Mobile and Mobile and Wearable Wearable Devices Devices Internet of Internet of Things Things

6

Security & Compliance Security & Compliance

Security Security

• The state of being free from

danger or threat

Compliance Compliance

• The act of obeying an order, rule
• r request

SECURITY SECURITY

• The Right Layers Of Defense
• Reactive to Proactive
• Awareness Training

7

CYBER THREATS CYBER THREATS

8

TOP CYBER TOP CYBER THREATS THREATS

1 2 3 4 5

Phishing Attacks Phishing Attacks Ransomware Ransomware Malware Malware Brute Force Attacks Brute Force Attacks Insider Threats Insider Threats

COMPLIANCE COMPLIANCE

• Structured Framework
• Policies and Procedures
• Regulatory Controls

9

COMPLIANCE COMPLIANCE

• Structured Framework
• Policies and Procedures
• Best Practices

COMMON COMMON COMPLIANCES COMPLIANCES & BEST & BEST PRACTICES PRACTICES

ISO 27001 ISO 27001 HIPAA HIPAA SEC SEC PCI DSS PCI DSS CCPA CCPA NIST NIST NYDFS NYDFS FFIEC FFIEC FINRA FINRA EU GDPR EU GDPR

10 10

11 11

SEPARATING SEPARATING PERSONAL & PERSONAL & BUSINESS BUSINESS

PERSONAL SECURITY PERSONAL SECURITY ACTION ACTION STEPS STEPS 1

Email Accounts Email Accounts Password Strength Password Strength Password Manager Password Manager Layered Approach Layered Approach Phishing Phishing

12 12

2 3 4 5

W AYS TO AVOID A

Identify the Real Sender Identify the Real Sender Check the Salutation Check the Salutation Use Your Mouse Hover Use Your Mouse Hover Review the Footer When in doubt, delete When in doubt, delete

PHISHING ATTACK

5

1 2 3 4 5

13 13

14 14

15 15

Our Assessment Process

BUSINESS SECURITY BUSINESS SECURITY

16 16

ACTION ACTION STEPS STEPS 1

Risk Assessment Risk Assessment Structured Framework Structured Framework Policies & Procedures Policies & Procedures Awareness Training Awareness Training Layered Security Layered Security

2 3 4 5

17 17

VISIBILITY VISIBILITY

• Software Vulnerabilities
• Workarounds
• Risk Exposure

18 18 18 18

TOTAL LIABILITY 2746 9,936 Credit Cards Credit Cards Social Security Social Security Numbers Numbers Dates of Birth Dates of Birth Bank Account Bank Account Numbers Numbers

PII SCAN PII SCAN RESULTS RESULTS

$10,043,391 $10,043,391 14,541 14,541 350 350 ABC COMPANY

19 19

IN THE EVENT OF IN THE EVENT OF A BREACH A BREACH

IN THE EVENT IN THE EVENT OF A BREACH OF A BREACH

ALIGNMENT ALIGNMENT

20 20

TECHNOLOGY RESOURCES TECHNOLOGY RESOURCES POLICIES & PROCEDURES POLICIES & PROCEDURES AWARENESS TRAINING AWARENESS TRAINING

STEPS STEPS

21 21

Executive Executive Summary Summary Risk Risk Assessment Assessment Framework Framework Analysis Analysis Schedule a Schedule a Meeting Meeting Contact Us Contact Us

22 22

MARYLAND MARYLAND TAX PROGRAM TAX PROGRAM

For profit company For profit company <50 Employees <50 Employees 2019 Calendar year 2019 Calendar year 50% Dollar for dollar tax credit 50% Dollar for dollar tax credit

WEBSITES WEBSITES

23 23

Roboform.com Roboform.com Lastpass Lastpass Darkweb Darkweb

24 24

Thank You Thank You for Attending! for Attending!

(410) 205 (410) 205-4980 4980 10065 Red Run Blvd, Suite 120, 10065 Red Run Blvd, Suite 120, Owings Mills, MD 21117 Owings Mills, MD 21117 info@choicecybersecurity.com info@choicecybersecurity.com

@

choicecybersecurity.com

25 25

Contact Us: Contact Us:

Securities offered through Triad Advisors, LLC., Member FINRA/SIPC. Investment advisory services offered through The Prosperity Consulting Group, LLC. The Prosperity Consulting Group, LLC is not affiliated with Triad Advisors, LLC.