Farmer training by the lithuanian agricultural advisory service (d.ruzgiene)
Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT,...
Transcript of Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT,...
![Page 1: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/1.jpg)
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Investment advisory services are offered through CliftonLarsonAllen Wealth Advisors, LLC, an SEC-registered investment advisor. | ©2016 CliftonLarsonAllen LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Investment advisory services are offered through CliftonLarsonAllen Wealth Advisors, LLC, an SEC-registered investment advisor. | ©2016 CliftonLarsonAllen LLP
Trends in Cybersecurity Risk
Farmer Cooperatives Conference November 2016
![Page 2: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/2.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Raise Your Hand If…
2
![Page 3: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/3.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Everything Can Talk to Everything….
3
• My product or system can talk to yours!• How do we manage that???
![Page 4: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/4.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Organized Crime• Cybercrime for Profit: Hackers have
“monetized” their activity– Theft of… PII / PFI /Credit Card Information– Account Take Overs– Interference with operations and availability
• Cybercrime as an Industry:– Markets, Suppliers and Service providers
(“cybercrime as a service”) – Financing and Trading systems– Proliferation of business models and
Specialization
4
![Page 5: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/5.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Phishing Is One Entry Point
5
![Page 6: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/6.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
• CEO asks the CFO…• Common mistakes
1. Use of private email2. “Don’t tell anyone”
• Safeguards1. Never use email for sole method
of authorization2. Ensure recipient has VERBALLY
validated with “source” of email for financial transactions
• http://www.csoonline.com/article/2884339/malware-cybercrime/omahas-scoular-co-loses-17-million-after-spearphishing-attack.html
Persuasion Attack – CEO Impersonation
6
![Page 7: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/7.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Ransomware
http://www.engadget.com/2016/02/19/hospital-ransomware-a-chilling-wake-up-call/ 7
![Page 8: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/8.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Ransomware
8
![Page 9: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/9.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Ransomware
• Malware encrypts everything it can interact with
9
![Page 10: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/10.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Policies• SANS/CIS 20
Critical Controls
10
People Rules
`
Tools
![Page 11: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/11.jpg)
©20
16 C
lifto
nLar
sonA
llen
LLP
WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING
Defined Standards
11
• Secure Standard Builds• Disciplined Change
Management• Consistent Exception
Control and Documentation
• Documentation
![Page 12: Trends in Cybersecurity Risk - Farmer Co-ops Conference · WEALTH ADVISORY | OUTSOURCING | AUDIT, TAX, AND CONSULTING Investment advisory services are offered through CliftonLarsonAllen](https://reader034.fdocuments.net/reader034/viewer/2022050113/5f4ad25d19d0d637dc679e76/html5/thumbnails/12.jpg)
twitter.com/CLAconnectfacebook.com/cliftonlarsonallen
linkedin.com/company/cliftonlarsonallen
©20
16 C
lifto
nLar
sonA
llen
LLP
CLAconnect.com
twitter.com/CLAconnectfacebook.com/cliftonlarsonallen
linkedin.com/company/cliftonlarsonallen
©20
16 C
lifto
nLar
sonA
llen
LLP
CLAconnect.com
Randy Romes, CISSP, CRISC, MCP, PCI-QSAPrincipalInformation Security [email protected]
12