Patrick Coyle @Pjcoyle@qoto.org
Joined Oct 2022
CRS Reports – Cybersecurity – Week of 1-14-23 – CRS looks at forming a Bureau of Cyber Statistics in CISA – https://tinyurl.com/3uky947c #CRS #Cybersecurity
Review - Public ICS Disclosures – Week of 1-14-23 – 12 vendor disclosures from Campbell Scientific, Contec, HIMA, HP, Medtronic, and Wireshark (7) – 2 researcher reports for products from Mitsubishi and GE – Short version - https://tinyurl.com/mr2uawbh #icsSecurity
Public ICS Disclosures – Week of 1-14-23 – 12 vendor disclosures from Campbell Scientific, Contec, HIMA, HP, Medtronic, and Wireshark (7) – 2 researcher reports for products from Mitsubishi and GE - https://tinyurl.com/286vxm53 Subscription required #icsSecurity
CFSN Detailed Analysis - Substack Daily Update – 1-19-23 – Free Content – https://tinyurl.com/ye26peae
Waste Transfer Explosion – An explosion in Kentucky was a reaction in a waste transport vehicle between two different waste streams – https://tinyurl.com/4bcjsppf #ChemicalIncident #CSB
Short Takes – 1-19-23 – Good cholesterol – Vulnerability management – GOP players in 118th – Substation security rules - https://tinyurl.com/3c7ejvzj
Review - 1 Advisory Published – 1-19-23 – NCCIC-ICS control system security advisory for products from Hitachi Energy – Short version – https://tinyurl.com/2p9j4p7p #icsSecurity
1 Advisory Published – 1-19-23 – NCCIC-ICS control system security advisory for products from Hitachi Energy – A brief look-back at OpenSSL 3.0 – https://tinyurl.com/2a6sjxsk Subscription required #icsSecurity
CISA Updates CFATS 15th Anniversary Page – 1-18-23 – Three new videos added to the list - https://tinyurl.com/y24tpkc4 #CFATS
Review - HR 162 Introduced – Digital Reserve Corps – NDRC would be established in GSA – Identical language was offered as HR 4818 in 117th Congress – Short version - https://tinyurl.com/8ur5aerz #Legislation
HR 162 Introduced – Digital Reserve Corps – NDRC would be established in GSA – Identical language was offered as HR 4818 in 117th Congress – https://tinyurl.com/5dnjuazy #Legislation
CFSN Detailed Analysis - Substack Daily Update – 1-18-23 – Free Content – https://tinyurl.com/yc3t7627
Short Takes – 1-18-23 – Ionic cooling – New cybersecurity regulations – Jackson, MS water problems continue – https://tinyurl.com/ynuhears
Review - OCS Updates CFATS FAQ Response – 1-18-23 – FAQ response updated for inflation adjustment rule – Short version – https://tinyurl.com/44bmdhnz #CFATS
Patrick Coyle
boosted
I don't often just rant at the void much anymore, but here's one that really gets me...
The fact that you are a Big Company and Powerful will not save you from a cybersecurity incident.
The fact that you can put pressure on your cybersecurity contracting and consulting companies through $$$ does not change the fact that you might need their actual real life assistance someday.
I consistently see some very powerful, large companies contract buying contracts across the industry and using their weight and brand power to try to skip things like retainer on-boarding, critical document sharing, and preparatory exercises.
Oh. My. Sweet. And Fuzzy. Lord.
I understand that you are very busy. I understand that it is hard to get everybody on a call, and find the right documentation. I understand there are lawyers and bureaucracy that make it more difficult to share certain materials. I understand you're getting a retainer because your insurer or regulator says to.
This changes nothing. If you really need to call an incident response / digital forensics consultant (and you probably will), they're going to need that information and preparation. No amount of money in the world will be able magic away necessary prep work. No amount of money thrown at the compromise will make it go away without work - unless you intend to replace your entire domain and computer network (also a lot of work). Your insurer will not fix it. Your brand will not fix it.
The requirements your legitimate retainer company put forth exist for a reason. They are not to steal our money or retainer hours. They are to make sure that an entirely unrelated team to your operations and technology will be able to walk in during a crisis and meaningfully assist without days of ramp up time. We need context to be able to do that. Network maps. Response plans. System and facility access directions. Understanding of your organization and comms plan.
That can't be wished away with money. Anyone, absolutely anybody legitimate in DFIR on planet Earth will need that information. If we don't get it ahead of time, we will be getting it on expensive hour burn before we can actually start to put out a fire.
That's all I have to say about that.
OCS Updates CFATS FAQ Response – 1-18-23 – FAQ response updated for inflation adjustment rule – Down the Rabbit Hole look at policy changes that were not made – https://tinyurl.com/wf5hzw9t Subscription required #CFATS
CFSN Detailed Analysis - Substack Daily Update – 1-17-23 – Free Content – https://tinyurl.com/bdfwz2jd
Short Takes – 1-17-23 – Return to the Moon – Great powers – Intrinsic safety – Oxygen pipeline – S&T Research - https://tinyurl.com/y7m3r8n3
Review - CFATS Regulation Changes – COI Changes – There is every indication that CISA intends to update their CFATS regulations – A look at some potential changes – Short version – https://tinyurl.com/yfnrhehm #CFATS
CFATS Regulation Changes – COI Changes – There is every indication that CISA intends to update their CFATS regulations – A look at some potential COI changes – https://tinyurl.com/2fmvt2wv Subscription required - #CFATS
Joined Oct 2022
