Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

10/1/2013
01:25 PM
Ira Winkler
Ira Winkler
Commentary
Connect Directly
Twitter
LinkedIn
RSS
E-Mail vvv
50%
50%

Make The Most Of National Cyber Security Awareness Month

NCSAM is a catalyst to get extra attention for your security programs

An awareness month can bring with it many benefits. When you think about some of the wildly successful awareness months, National Breast Cancer Awareness Month comes to mind. Associated efforts include fundraising walks and Delta Airlines repaints some of its planes pink. Events take place throughout the country and a good portion of the world. But there is nothing otherwise special about the month -- except that it serves as a rallying cry for people to take action.

Now, as the 10th anniversary of National Cyber Security Awareness Month (NCSAM) begins today, it's time to take advantage of the benefits that it similarly offers. While it might not be a standard practice to normally devote attention to information security, security awareness practitioners can now contend that extra corporate attention should be placed on your efforts.

It is a good time to let rally extra support from management to put on events, get permission to set up awareness booths, pass out literature, get space on corporate intranet sites, send out extra messages to the staff, etc. NCSAM is a catalyst to get extra attention for your programs, which is another way of saying that you get more awareness for your awareness campaign.

If you have already started planning, try to make the most of it. If you haven't yet put something together, now is the time to try to get started. If you are short on resources, we put together an NCSAM Support Packagethat provides a turnkey NCSAM program.

While it is not likely that anyone will be repainting an airplane to support our cause, there is still a lot of support to be had. Take advantage of the momentum. More important, make sure that you keep the momentum going after the month is over.

Ira Winkler is president of Secure Mentem

Ira Winkler is president of Secure Mentem and author of Advanced Persistent Security. View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Peter Fretty
50%
50%
Peter Fretty,
User Rank: Moderator
10/29/2013 | 10:58:57 PM
re: Make The Most Of National Cyber Security Awareness Month
Great idea. Awareness is so vital today as phishing and targeted attacks continue to evolve and catch information users frightfully unprepared. While people may not need to know the inner workings of the organization's tools (i.e. next gen firewalls), they should have a strong grasp of the best practices as well as the organization's overall security strategy.

Peter Fretty
COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/3/2020
Pen Testers Who Got Arrested Doing Their Jobs Tell All
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/5/2020
New 'Nanodegree' Program Provides Hands-On Cybersecurity Training
Nicole Ferraro, Contributing Writer,  8/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-12441
PUBLISHED: 2020-08-06
Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet.
CVE-2020-13793
PUBLISHED: 2020-08-06
Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key.
CVE-2020-16207
PUBLISHED: 2020-08-06
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the appli...
CVE-2020-16211
PUBLISHED: 2020-08-06
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information.
CVE-2020-16213
PUBLISHED: 2020-08-06
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, or ...