The U.S. Department of Defense (DoD) on October 15th, 2024 published its long-anticipating first part of the final rule (the Final Rule) for the Cybersecurity Maturity Model Ceritficat (CMMC) program.

The program will require third-party verification for contractors working with controlled unclassified information (CUI) confirming that contractors are meeting existing DoD cybersecurity standards and a self-assessment by contractors that have Federal Contract Information (FCI) showing that they are in compliance with the 15 controls in Federal Acquisition Regulation (FAR) 52.204-21.

What does this?  For Contractors?  How should this change this practices and documentation procedures?

To help answer this, we have D.o.D. expert, Michael Andrewes w/ his opinion and perspective on this ruling. 

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Practically all enterprises are under some sort of IT compliance and regulations.   Holding any data that is classified as sensitive - puts the enterprise under the watchful eye of of the regulators.

But with all this compliance and regulatory guidances - comes the fatigue.   What is the genesis of this fatigue - and what can be done to alleviate the grind of regulatory compliance.

To answer these questions - YouAttest invites an authority in compliance and security matter, Stacey Cameron,  CEO of Cycam Strategies.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]      

Cyber Attacks are worldwide. Germany is not immune to these attacks.  In fact Deutsche Bank in September 2024, stated that “Cyber-attacks alone cost the German economy an enormous 148 billion euros every year.”

At the same time Germany and the rest of EU is struggling to enact the Digital Operational Resilience Act (Regulation (EU) 2022/2554) solves an important problem in the EU financial regulation. DORA mandates that enterprises augment their protection, detection, containment, recovery and repair capabilities against ICT-related incidents. 

But what does this mean for your enterprise - and what does this mean for your identity and identity governance efforts?

To answer these questions - YouAttest invites a foremost authority in EU regulations: Ralf Mennegatti, CEO of the Luxembourg-based DAQS. 

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]    

This YouAttest podcast highlights the YouAttest offering for Identity security and compliance for managed service providers (MSPs.)

Automating and simplifying user access reviews.

HR systems for many enterprises is the identity store of record (ISoR). This is where identities are created, roles are assigned, and privileges are entitled.  

But these HR systems (HRS) are NOT enforcement points – they are the container of entitlements. The enforcement of these entitlements usually falls to identity and access management (IAM) systems.   

Hence comes the identity variance between:

• What roles/entitlements are created/documented in the HR system?
• What roles/entitlements are ENFORCED by the IAM?

Contact us at YouAttest - https://youattest.com/ - we will identify the anomalies between your HR and IAM systems and create a better identity audit experience for your enterprise.

https://youattest.com/contact/

Web Page:

https://youattest.com/hr-vs-iam-identity-variance/

The U.S. Department of Defense (DoD) on October 15th, 2024 published its long-anticipating first part of the final rule (the Final Rule) for the Cybersecurity Maturity Model Ceritficat (CMMC) program.

The program will require third-party verification for contractors working with controlled unclassified information (CUI) confirming that contractors are meeting existing DoD cybersecurity standards and a self-assessment by contractors that have Federal Contract Information (FCI) showing that they are in compliance with the 15 controls in Federal Acquisition Regulation (FAR) 52.204-21.

What does this?  For Contractors?  How should this change this practices and documentation procedures?

To help answer this, we have D.o.D. expert, Michael Andrewes w/ his opinion and perspective on this ruling. 

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Change Healthcare announced Thursday, Feb 29th  that a ransomware group that had claimed responsibility for the attack was at fault

Health care providers across the country are reeling from a cyberattack on a massive U.S. health care technology company that has threatened the security of patients’ information and is delaying some prescriptions and paychecks for medical worker.

• What was the hack? 
• How will it affect Health Care Providers?
• What should be done for prevention?

That’s what will be discussed this very important #AuditTuesday w/ Greg Kutzbach,  Cyber Security and Digital Forensic Expert of Exhib A Cyber and Craig Guinasso, cyber and forensic healthcare expert.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

AWS is the premier IAAS vendor - AWS is the basis of most enterprise cloud strategy.   

To help us understand the important of AWS and AWS entitlements the video has Raj Sawhney, Managing Director, IT and Internal Audit, Cybersecurity and Business Process at CDW. 

But what roles have been created?  Who has access?   What is the identity security posture of the enterprise AWS server and services?   This is not a question easily answered.

But it needs to be.   According to  Palo Alto’s Unit 42 - their threat research group, say 99% of accounts in the cloud ar overly permissive./

YouAttest walks through how customers are using YouAttest to audit their access to AWS.  This video show how YouAttest can be utilized by the risk manager and/or security manager to execute a Access Discovery on the AWS resources.  

That is YouAttest - automating the audit of access privileges for all your resources - cloud and on-premise. Contact us and we’ll help w/ your access review problems:  https://youattest.com/contact/

Practically all enterprises are under some sort of IT compliance and regulations.   Holding any data that is classified as sensitive - puts the enterprise under the watchful eye of of the regulators.

But with all this compliance and regulatory guidance - comes the fatigue.   What is the genesis of this fatigue - and what can be done to alleviate the grind of regulatory compliance.

To answer these questions - YouAttest invites an authority in compliance and security matters, Stacey Cameron, CEO of CyCam Strategies.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Cyber Attacks are world-wide.   Germany is not immune to these attacks.  In fact Deutsche Bank in Sept 2024, stated that “Cyber-attacks alone cost the German economy an enormous 148 billion euros every year.”

At the same time Germany and the rest of EU is struggling to enact the Digital Operational Resilience Act (Regulation (EU) 2022/2554) solves an important problem in the EU financial regulation. DORA mandates that enterprises augment their protection, detection, containment, recovery and repair capabilities against ICT-related incidents. 

But what does this mean for your enterprise - and what does this mean for your identity and identity governance efforts?

To answer these questions - YouAttest invites a foremost authority in EU regulations: Ralf Mennegatti, CEO of the Luxembourg-based DAQS. 

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]