axio - kn

I recently read a LinkedIn post discussing the usefulness or lack thereof regarding the use frameworks in developing your cybersecurity roadmap. The author discussed implementing controls that they felt were going to give the organization the best cost to benefit ratio, but the author never really discussed what they did to come up with what those missing controls nor what risks they were mitigating through implementing them. Now I certainly agree there are some controls which will give you a much bigger bang for your buck, like multifactor authentication, endpoint detection and response or additional network segmentation. All three of those controls will certainly reduce your risk more than some of the policies and procedures that any cyber framework will recommend you implement, but does that mean you shouldn’t implement these policies and procedures?

This article was written by Brian Benestelli and John Fry

A cybersecurity architecture design review (CADR) will help you fight ransomware. The TSA is now requiring these assessments for more and more critical infrastructure entities, given today’s cyber threat landscape. Our article provides a 101 on CADR assessment from ideation to execution, which has become a high demand offering from our professional services team, performed in close collaboration with our partner 1898 & Co.

The TSA is now requiring railroad owners and operators to perform cybersecurity architecture design reviews (CADR). In this blog, we discuss why this new assessment is an important initiative to improve railroad cybersecurity, and how Axio can help you fulfill this new requirement with our partner 1898 & Co.

Cyber Risk Highlights in Critical Infrastructure Series-Part 4

Welcome back to our blog series on cyber risk highlights in critical infrastructure. Last week’s blog post discussed the increased capabilities of cybercriminals and explained how cyber physical disruption is possible through IT and OT interdependencies. This week, we discuss the importance of prioritizing ransomware readiness for critical infrastructure organizations.

If you’re a cybersecurity professional, chances are that you are familiar with the National Institute for Standards and Technology Cybersecurity Framework (NIST CSF). An understanding of the NIST Cybersecurity Framework (CSF) standard is critical for any company seeking to conduct business with a US Government agency, and increasingly more private-sector entities – and organizations abroad – are leveraging the NIST CSF to build their cybersecurity programs.  

As the world recalibrates to the new normal, we’re giving back to the community by releasing our most popular assessment tools for free. Starting today, anyone can have an accurate and holistic view of what’s at risk in their organization. Cybercriminals, fraudsters, and others with malicious intent have no right to prevent you from sleeping well at night. We’ve all been through enough uncertainty in 2020. The future may be unpredictable, but it’s completely manageable when you know your worst-case cyber scenarios.

Cybersecurity frameworks help you achieve better cybersecurity by serving as a collection of best practices, standards, and guidelines. They are built by experts to help organizations reduce risk and remain resilient. A framework helps you identify the current state of an organization’s cybersecurity program and subsequently provides the necessary information to build an improvement roadmap. Because there are so many cybersecurity frameworks to choose from, we decided to narrow down the universe to the top 5 we feel are the most valuable and well-respected. This list is obviously subjective but most of the frameworks included are household names in the world of cybersecurity.

Cyber Risk Assessments, Your Guide to a Secure Enterprise

With cyber threats prevalent in almost every industry, cyber risk assessments are an essential part of securing your organization. An assessment allows you to identify and understand which assets in your organization can be affected by cyber incidents. It measures what processes and controls you currently have in place to defend against potential cyber events. Similarly, NIST defines cyber risk assessment as “The process of identifying risks to agency operations (including mission, functions, image, or reputation), agency assets, or individuals by determining the probability of occurrence, the resulting impact, and additional security controls that would mitigate this impact.”

This is a bonus piece to our series on continuous cyber improvement. We’ll be going through a case study featuring a client that utilized Axio360 to improve their cybersecurity risk management program.