Information Assured Episode 103: NIST’s Cybersecurity Framework with Salvador Ortega

Published: April 15, 2020, 9 p.m.

Overview 

Fraud warnings, rapid DNA tests for arrestees, electronic facial identification, London cold case, serial child porn conviction, Russian hacking e-commerce platform takedown, and Chinese espionage highlight our law enforcement round-up followed by a conversation on the NIST Cybersecurity Framework with Salvador Ortega.

Salvador and I walk through the NIST Cybersecurity Framework’s significant functions and categories and discuss our operational perspectives emerging under each function, category, and sub-category.  “The Framework is voluntary guidance, based on existing standards, guidelines, and practices for organizations to better manage and reduce cybersecurity risk. In addition to helping organizations manage and reduce risks, it was designed to foster risk and cybersecurity management communications amongst both internal and external organizational stakeholders.”

Salvador Ortega, CISSP, Director of Cybersecurity at Vanderbilt University Medical Center, joins me to discuss the Framework in the context of his 13 years at VUMC.  I’ve had the pleasure of working with Sal for many years, and he’s demonstrated a fact-based approach to analyzing security risks and vulnerabilities. It’s a pleasure to have this experienced practitioner for our discussion.

Host: Matthew Hall, CISSP, CHFI, Security +

Apply .5 CEUs to any security, IT, project management continuing education certification maintenance.

Outline

  1. Intro
  2. Law Enforcement Round-Up:  California Attorney General March 26th Consumer Alert for Charity Fraud  
  3. Law Enforcement Round-Up:   US Secret Service March 20th, 2020, COVID Virus Phishing Advisory 
  4. Law Enforcement Round-Up:  Florida Department of Law Enforcement February 26th, 2020 FDLE, LCSO unveils nation’s first automated rapid DNA collection 
  5. What is EFIT?  
  6. Law Enforcement Round-Up: London Metropolitan Police April 2nd, 2020, Electronic Facial Identification Technique for 2005 Rape Case
  7. Law Enforcement Round-Up:   London Metropolitan Police March 5th,2020, Man convicted of making indecent images of children for the second time
  8. Law Enforcement Round-Up:   FBI March 24th, 2020, FBI Takes Down a Russian-based Hacker Platform; Arrests Suspected Russian Site Administrator
  9. Law Enforcement Round-Up:  US Department of Justice,  February 27th, 2020,  Chinese National Sentenced for Stealing Trade Secrets Worth $1 Billion
  10. What is the National Institute of Standards and Technology (NIST)?
  11. What is the NIST Cybersecurity Framework (CSF)? 
  12. NIST CSF Discussion with Vanderbilt University’s Salvador Ortega
  13. Closing Remarks

Support the show (https://www.patreon.com/utterlymental?fan_landing=true)