Bi-Weekly CyberSecurity Recap August 2019

August 12, 2019

Curated cybersecurity news

summary for facility management professional, building owners and IT professionals who are interested in building security and Facility IT.

NEMA, ISA announces new building systems cybersecurity program

Our digital economy depends on secure data; effective cybersecurity is critical to the functioning of governments, finance, infrastructure, business, and individuals. Thomas Glocer has been helping to fend off cyberattacks for nearly two decades, as CEO of Thomson Reuters, a member of the Morgan Stanley board, and co-founder and executive chairman of the cyber defense firm BlueVoyant. He surveys the state of cyber defense.

How Local Governments Can Address Cybersecurity Challenges

In an interview with Teri Takai, who’s the former CIO for the U.S. Department of Defense and for the states of California and Michigan, we explore how local governments can tackle the growing cyberthreat.

CABA research program “Intelligent Buildings and Cybersecurity”

The CABA Board of Directors and the CABA Intelligent & Integrated Buildings Council (IIBC) have selected the next CABA Landmark Research Study to be “Intelligent Buildings and Cybersecurity”. What steps has your organization taken to ensure that your company is safe from cybersecurity attacks?

"According to a benchmark study of 350 companies spanning 11 countries, the average consolidated total cost of a data breach is $3.8 million."

Are States Taking Cybersecurity Seriously Enough?

With a dizzying array of actions that could and should be taken, states face a quandary of where to spend the limited dollars that help governments wage the fight against cyberattacks. The key, says Harnish, is finding the intersection between what states are required to do, what they should be doing based on assessments of their own situation, and what their capabilities allow them to do.

How physical systems integrators can monetize cybersecurity

Steven Main, a cybersecurity expert experienced in combining behavioral science and computer science to identify risk and develop appropriate training, processes, and technology to eliminate that risk, asked the simple question to his audience, “Can integrators monetize cybersecurity by offering managed security services that provide long-term security for their clients and a steady revenue stream for their integration business?”

Cybersecurity assessments and audits: everything you need to know

The main component of risk management, integral to maintaining security and compliance as well as holding on to the certifications that you’ve worked so hard to achieve, is cybersecurity assessments and audits. What are they? Are they interchangeable? Are they all necessary processes? Do you want the one or the other? Can Bob in IT be left to handle it or do you require independent third-party assistance? These assurance terms are often used interchangeably but are different activities.

Share your feedback on draft NISTIR on core baseline of cybersecurity features

In June, the NIST Cybersecurity for IoT and Privacy Engineering programs published NIST Internal Report (NISTIR) 8228, Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks. The purpose of NISTIR 8228 is to help federal agencies and other organizations better understand and manage the cybersecurity and privacy risks associated with their use of IoT devices in their organization’s operations throughout the devices' lifecycles.

If you would like to provide feedback please download Draft NISTIR 8259: Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers and submit your feedback through September 30, 2019, at iotsecurity@nist.gov.