Windows 10: How good is windows cyber security?

/u/Ifeeluberish · Dec 17, 2020

Is it almost guaranteed to find malicious software? I would think as long as you keep it updated it would block most things. I do once in a while use those sketchy download sites for a video game mod. They try to trick you with which link actually downloads it but I always make sure to do a quick scan of the file before opening it on my computer.

submitted by /u/Ifeeluberish
[link] [comments]

:)

btarunr · Dec 17, 2020

Leading Technology Companies Announce Creation of Cyber Security Research Alliance

Today, leading technology companies announced the creation of the Cyber Security Research Alliance (CSRA). The CSRA is a private, non-profit research consortium formed in response to the growing need for increased public-private collaboration to address complex problems in cyber security. The founding members of the CSRI are Advanced Micro Devices (AMD), Honeywell, Intel Corporation, Lockheed Martin, and RSA/EMC.

President Obama has prioritized cyber threats as one of the most serious economic and national security challenges we face as a nation and a dependency to America's economic prosperity in the 21st century.

CSRA seeks to achieve coordinated industry participation to address national cyber security research and development (R&D) imperatives and bridge the gap between government funded R&D and commercially available products and solutions in cyber security. CSRA will focus on challenges that are bigger than any one company, consortium, sector or nation and ensure that government, industry and academia collaborate on in-depth problem understanding and definition.

"The CSRA is organized to leverage expertise, from member companies and partners in government and academia," said Lee Holcomb, president of the CSRA and vice president of strategic initiatives, Lockheed Martin Information Systems & Global Solutions. "Together we hope to create viable, game changing cyber security solutions."

The CSRA is discussing with the National Institute of Standards and Technology (NIST) the arrangement for a joint cyber security research symposium in early 2013 to connect researchers and early adopters from across the private, academic, and government sectors.

"Putting into practice the exciting cyber security innovations that emerge from research requires active partnerships between government and industry and also among private sector stakeholders," said Chuck Romine, Director of NIST's Information Technology Laboratory. "The emergence of CSRA can strengthen both kinds of partnerships and we look forward to working with this new organization to promote a trustworthy cyberspace for our nation and its citizens."

Initially, CSRA will focus on building the organization and developing viable collaboration models. Activities and focus areas for the organization will include:

Prioritizing the "grand challenges" in cyber security through the collaboration of all stakeholders

Tracking cyber security R&D activities

Developing viable approaches to technology transfer

qubit · Dec 17, 2020

Corporate Security Solution

It wasn't until I told them how many millions they would lose by keeping all the art work on a USB drive with no offsite backup did they invest in a damn tape drive. Baby steps.
Click to expand...

That made me so facepalm. Some people have absolutely no clue. I hope they don't take you for granted with all this you're doing for them.

SonicWall is a good security product, so Mindweaver's suggestion sounds like a good one and should make for a rather bigger baby step. Let's hope they take it.

Brink · Dec 17, 2020

Announcing: new British Standard for cyber risk and resilience

Technology is an integral part of the fabric of everyday life. There is almost no organization that does not rely on digital services in some way in order to survive. The opportunity that technology provides also brings with it more vulnerabilities and threats as organizations and data become more connected and available. This trend results in a common gap found in the decision-making process at large organizations. Often information security and cybersecurity have been viewed as a function of IT and therefore, the information security departments have been managed outside of normal business decision-making processes. This is an approach we no longer have the luxury of indulging.

Organizations need a holistic approach to implement digital transformation projects to safeguard their security. This involves focusing on both the opportunity and the threat of any change. To do this effectively the accountability for cyber risk and resilience needs to sit firmly with executive management and the governing body. However, a skills gap exists at this level with many governing body members having started their careers before the internet era. Even when willing to adopt responsibility for building a cyber resilient organization, senior executives are often confused by the technical language that risk management and cybersecurity professionals speak. As well, they may also encourage cybersecurity professionals to speak directly to the board. Therefore, we also need to equip board members with the tools to ask the right questions and ensure the correct levels of risk to build cyber resilient organizations.

That is why, nearly two years ago, the BSI Risk Management Committee started working to develop new guidance aimed at helping executive leadership better understand and manage the technology risks to their organizations. I was asked to lead a group of government executives, regulators, professional bodies and technical experts with a goal of directly addressing the realities and challenges of managing cyber risk in a digital world. This goal led us to draft the new British Standard BS31111. The standard aims to provide guidance to enterprise organizations regarding cyber risk and resilience, and to address the gap in IT decision making.

The standard includes:

Parameters to build concrete guidelines into governing bodies

Identification of areas of focus an organization should have in order to build a cyber resilient enterprise

Assessment questions management can ask to challenge the organization regarding how it is building cyber resilience into the business

Cyber risk and resilience needs to be driven from the top of the organization to ensure that the right culture is set across all business decision making. Executive management must ensure that there is a clear risk and resilience strategy set across the organization, as well as ensuring that there is a strong management structure in place that details the responsibilities and expectations of everyone to maintain security. As Microsoft’s own CEO Satya Nadella has said, “Cybersecurity is like going to the gym. You can’t get better by watching others, you’ve got to get there every day”. Satya’s comments underline the reasoning behind this standard, emphasizing the need to build cyber resilience into day to day operations and not treat it as a standalone project or program.

Engaging with risk management and cyber resilience principles can be complicated and it is easy to get bogged down by technical jargon. To help, we created a visual (figure 1) intended to illustrate the areas required to develop cyber resilience and the key responsibilities of the board.

Source:BS3111:2018 Figure 1

Key tenets:

The responsibility of any Board of Directors is to clearly set the direction of business activity. They ultimately sign off on major decisions and investments and need to ensure that activity is sustainable for the business.

Executive management and the governing body are mostly responsible for the roof and foundation, with oversight on the activity of the pillars. Any building is only as good as its foundation and the same is true for building cyber resilience.

The importance of culture for security

Without a strong culture of security, it is easy for decisions to be made that expose an organization. Many of the major breaches witnessed in recent years can be traced back to a lack of ownership and leadership regarding the need for strong cybersecurity measures across the organization, along with ill-informed investment decisions. The executive management and members of the board need to clearly focus on the benefits of any digital investment AND the level of security outcomes required to support that investment. Hopefully, the new British Standard BS31111 will provide best practice aims and expectations for the responsibility and accountability of boards and executive leadership to drive change.

The publication of the standard is only the first step. It will be important to promote the need for every organization to safeguard their enterprise and their customers, more than we do today. Many boards and governing bodies are becoming more “cyber aware” and understanding their need to build cyber risk into their decision making. This publication aims to enable leadership teams and boards to build awareness and decision-making protocols across the organization.

In my short tenure with Microsoft, I have already witnessed a strong internal security culture, focused on building resilient and secure cloud platforms. I look forward to working with my customers to help them develop their own cyber resilient foundations and cultures, ensuring that Microsoft’s capabilities support them in that endeavor.

SIÂN JOHN,
Executive Security Advisor, Strategic Enterprise and Cybersecurity Group
Click to expand...

Source: Announcing: new British Standard for cyber risk and resilience Microsoft Secure

Windows 10: How good is windows cyber security?

How good is windows cyber security?

How good is windows cyber security?

How good is windows cyber security?

How good is windows cyber security? - Similar Threads - cyber security

Is Elite Cyber Security a legitimate Microsoft product?

Is Elite Cyber Security a legitimate Microsoft product?

I have a quick question for a cyber security expert.

I have a quick question for a cyber security expert.

What are the major cyber security threats?

What are the major cyber security threats?

Is Elite Cyber Security a Microsoft Partner.

How can I investigate fraud and cyber security hacking on my device and home internet

60 Minutes Cyber security Solarwindws