Suggestions
Marc Crudgington, MBA
Information Security Executive
Marc Crudgington, MBA, is the Vice President of IT Infrastructure and Cybersecurity at Crane Worldwide Logistics. He has a robust background in information security and technology management, holding multiple certifications including Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).
In addition to his role at Crane Worldwide Logistics, Crudgington serves as the Chief Information Security Officer (CISO) and Senior Vice President of Information Security at Woodforest National Bank. He is also a member of the SecureWorld Advisory Council in Houston and has been recognized as a finalist for various awards in information security, including the T.E.N. Information Security Executive of the Year.1
Crudgington is an accomplished author, with his book "The Cyber War Is Here" achieving Amazon bestseller status. His expertise spans across cybersecurity, risk management, and data privacy, making him a prominent figure in the field.12
Highlights
Come check out this excellent Security Engineer position I am hiring for the Crane Cyber Engineering team.
If you enjoy being challenged as part of a global workforce, collaborating with Cyber and IT peers, enabling the business to success, and working with our 3rd-party partners to ensure a continuously maturing cyber-resilient program, this position would be just right for you.
Crane Worldwide Logistics offers a great benefits package, a culture that continues elevate the employee experience, and values that are the best in the industry.
Come make a difference at Crane! Check out the position and others.
https://lnkd.in/gmmdi7En
The Cybersecurity and Infrastructure Security Agency released a new periodical, "Modern Approaches to Network Security," in partnership with the Federal Bureau of Investigation (FBI), the Canadian Centre for Cyber Security, and others.
In summary, the article discusses VPN challenges, solutions such as Zero Trust, Secure Service Edge (SSE), and Secure Access Services Edge (SASE), and best practices.
Here are my key takeaways and more on each. This article is a valuable resource that is worth your time.
Key Takeaways
-
VPNs Are Not Enough: Traditional VPNs have significant limitations and vulnerabilities that necessitate more robust solutions.
-
Adopt Zero Trust Principles: Embracing Zero Trust Architecture enhances security by verifying all access requests continuously.
-
Leverage SASE and SSE: These modern frameworks offer scalable, flexible, and integrated security solutions for today's dynamic environments.
-
Implement Network Segmentation: Effective segmentation limits the impact of breaches and reduces the attack surface.
-
Proactive Vulnerability Management: Regular assessments and timely patching are essential to prevent exploitation.
Challenges with VPNs VPNs have long been the go-to solution for remote access. However, they have their flaws. Inherent risks include IP address and DNS spoofing, complexity of implementation, potential misconfigurations, and failure to enforce network segmentation, which increases the risk of lateral movement by attackers.
Embracing Zero Trust Architecture Implementing ZTA involves several key components: Micro-segmentation, Least Privilege Access, Continuous Monitoring, Strong Authentication, and Authorization, Using multifactor authentication (MFA) and strict access controls to verify identities and permissions continuously.
The Rise of SASE and SSE SASE provides several advantages over traditional approaches: Scalability, Flexibility, Improved Performance. SSE, a subset of SASE, focuses on security services, including ZTNA, SWG, and CASB.
Network Segmentation Network segmentation is a fundamental security practice that involves dividing a network into isolated segments to contain the spread of potential threats. There are several methods of network segmentation: Physical Segmentation, Logical Segmentation, Micro-Segmentation, and Unidirectional Architectures.
Proactive Vulnerability Management (the basics) Cyber programs must adopt a proactive approach to identifying and remediating vulnerabilities before they can be exploited. This is done through Automated Vulnerability Scanning, Patch Management, and Actionable Threat Intelligence.
#cybertech #cio #ciso #networksecurity #zerotrust #cyber #sase
