Simon Kok

New legislation proposed for public sector AI in Ontario: "The proposed legislation includes introducing a definition of an “artificial intelligence system” that is in alignment with leading jurisdictions to create consistency in how AI is defined across the public sector and to support AI-related initiatives across the government. Ontario is proposing to establish accountability and transparency requirements for the Ontario government and public sector when using AI. For example, requiring these organizations to inform the public of when they are interacting with AI, or mandating that decisions made by AI always have a channel for human review — recognizing AI’s capacity for bias. The proposed legislation includes creating regulation-making authority to ensure responsible, risk-based AI use by select public sector organizations. This includes ensuring they are following Ontario’s Trustworthy AI Framework to protect people from unintentional harms and reduce liability and reputational risks that can arise from using AI technologies. These regulations would be developed through consultations with government and public sector stakeholders, Indigenous partners, and AI experts."

60

6 Comments

Interested in Threat Hunting and Cloud? In #BSidesEdmonton, we have another presentation from two security experts, Kai Iyer-Anoop Krishnan and Chi Phong Huynh both from EY Canada. Kai manages Applied Machine Learning Research and Security Engineering, holds multiple certifications and has extensive knowledge in various domains, including Web-App Development, Data Science, Incident Response, DevSecOps and Purple Teaming. Phong works on threat hunting, detection research for cloud environment, Azure Sentinel, AWS and develop Jupyter notebooks to support his daily incident response and investigation tasks in cloud and on-prem environment. Kai and Phong's session will explore the capabilities of Jupyter notebooks as a powerful tool to enhance threat hunting capabilities, especially across cloud platforms like Microsoft Azure and AWS. The focus is identifying common attack Tactics, Techniques, and Procedures (TTPs) utilized by threat actors, introducing detections mapped to the MITRE ATT&CK framework and threat hunting methodologies backed by unsupervised machine learning. To know more about the speakers and details, check out https://buff.ly/4aUna24! #cybersecurity #conference #speaker #announcement

11

Proofpoint’s 2024 Voice of the CISO Report Reveals that More than Four in 5 Canadian CISOs Identify Human Error as Leading Cybersecurity Risk Proofpoint, Inc., a leading cybersecurity and compliance company released its annual Voice of the CISO report, which explores key challenges, expectations and priorities of chief information security officers (CISOs) worldwide. The 2024 report draws attention to a notable trend: while fears of cyber attacks continue to rise, Canadian CISOs demonstrate increasing confidence in their ability to defend against these threats, reflecting a significant shift in the cybersecurity landscape. Over two-thirds (90%) of surveyed CISOs in Canada feel at risk of a material cyber attack over the next 12 months, compared to 58% the year before. CISOs today clearly remain on high alert, but confidence among them is growing: only 33% feel unprepared to cope with a targeted cyber attack, showing a marked decrease over last year’s 60% and 63% in 2022. Human error continues to be perceived as the Achilles' heel of cybersecurity, with almost three-quarters (83%) of CISOs in Canada identifying it as the most significant vulnerability. In a year of growing insider threats and people-driven data loss, more CISOs than ever (90%) see human risk, in particular negligent employees as a key cybersecurity concern over the next two years. However, there's growing optimism in the role of AI-powered solutions to mitigate human-centric risks, reflecting a strategic pivot towards technology-driven defenses. The 2024 Voice of the CISO report examines global third-party survey responses from 1,600 CISOs from organizations of 1,000 employees or more across different industries. Throughout the course of Q1 2024, 100 CISOs were interviewed in each market across 16 countries: the U.S., Canada, the UK, France, Germany, Italy, Spain, Sweden, the Netherlands, UAE, KSA, Australia, Japan, Singapore, South Korea, and Brazil. The report offers a vital perspective on the state of cybersecurity from those at the forefront of protecting people and defending data. The report also stresses the importance of maintaining robust cybersecurity measures in the face of economic pressures and the critical role of human factors in organizational cyber readiness. The survey also measures the changes in alignment between security leaders and their boards of directors, exploring how their relationship impacts security priorities. To download the 2024 Voice of the CISO report, please visit: https://lnkd.in/dVe95ta Read More: https://lnkd.in/gExrccZ2 # Voice of the CISO report #CISOs #cybersecurity #human-centric risks #Proofpoint #NetMon

3

📄 Are you ready to navigate Alberta’s modernized access to information framework? Bill 34: Access to Information Act is transforming how public bodies handle requests for information, ensuring transparency while safeguarding sensitive data. Here’s what you need to know: • 🕵️ Enhanced Information Rights: Individuals have clearer and stronger rights to access records held by public bodies. • ⏳ Streamlined Processes: Simplified and efficient workflows for responding to access requests. • 🔒 Protection of Sensitive Information: Stricter exceptions to disclosure safeguard personal privacy and public safety. • 👥 Third-Party Considerations: Clear rules for notifying and involving third parties during access requests. • 💼 Accountability Measures: Independent oversight from the Information and Privacy Commissioner ensures compliance. ⚠️ Non-compliance is not an option. These updates reflect Alberta’s commitment to transparency and accountability in the digital age. ✅ Be prepared. Schedule a free consulting session with RSec Group to optimize your processes and ensure compliance with Alberta’s modernized access to information standards. 📩 Contact us @ https://rsecgroup.com/ #IBMpartners #IBMAmplify #RSec #IBM Freddy Alves Vaquero, Ian Wight, Pena, Nick Lisle, 🔐 Gabriel Murcia, Vivian Calderón Ballesteros, Lindsay Carreau, Paola Arbelaez, Rafael Bernabé Abad Figueroa, Pablo Luna, NATALIA DEL RIO, Johanna Ramirez, Claudia Patricia Rojas Medina, Eric Cranfield, Jamie Thrower, Elsa Patricia Pilonieta Matis, Jennifer Bila Casimiro, Alessandro F. B. Cardoso, Juan Diego Mesa Morales, Alejandra Guzmán, Mike L. Murphy, Monika Okorn

11

2 Comments

🚨JOB SEARCH HACK:🚨 Lists!!!! ( Example Linked in post) Explore lists like "Top Companies in Cyber," "Top Companies in Tech," "Best Companies to Work For," and more. ( get creative, the internet is full of lists) These lists are compiled by various organizations and usually include company names and links to their websites. 🚀 Follow the links directly to the career sections of these websites. ✅ Saves time by providing a targeted list of reputable companies. ✅ Direct access to the company’s career page reduces time spent on searches. ✅ Efficiently narrows down your options to top-tier employers. Happy job hunting! Going through the company website also lets you see if it's a company you want to work for—check their mission, vision, values, and benefits before applying. #JobSearchHack #CareerTips #TimeSaver #DreamJob #Cyberjobs #cybersecurity https://lnkd.in/guYhsdHb

14

7 Comments

Security people: We think we can tell people to "closely look at the domain name to be sure it's the site you trust". Technology brought us IDNs. But great companies have innovated in the field of phishing-like technologies as well. Here are my top 2 Canadian examples. IGA Québec: "GREAT idea let's have our login page use login-seconnecter[.]ca instead of our actual domain, otherwise we'd be way too different from phishing!" Interac Corp.: "So we're going to EMAIL PEOPLE LOGOS OF BANKS THAT ARE CLICKABLE?" Who can beat this? I doubt even a phishing group could look phishier than IGA or Interac!

15

3 Comments

🔒 Cyber threats are on the rise, especially for small businesses in Edmonton, Alberta. That's why regular penetration testing is key to staying one step ahead. At CyberTech360, we offer a top-notch service that simulates hacker attacks to fortify your system's security. Don't wait for a breach to happen - protect your business proactively with our comprehensive pen testing service. #CyberSecurity #PenTesting #StaySecure 💻🔐

4

The Ontario government confirmed yesterday that it is introducing legislation that, if passed, "...would provide new tools to prevent and respond to cyber security threats and safeguard critical public services, such as health care and education. By enhancing cyber resilience, the government is ensuring these essential sectors remain secure and operational, protecting the safety and privacy of all Ontarians while providing them with more connected and convenient services across government." This would seem like a very positive step forward assuming the appropriate funding is put in place to support. #ontario #cyber #cybersecurity https://lnkd.in/efhmEbBK

16

5 Comments

#TechExecs #SevcoSecurity #CrowdStrike | Greater #Canada #CyberSecurity & #AssetIntelligence Forum (TODAY) Great Job Brian Contos Akiko Honda Sevco Security and Jennifer Tamasi CrowdStrike, with 80+ registrations and an incredible turnout! TOPIC: Closing Off Security Gaps with CrowdStrike & Sevco | How One Unprotected Device Leads to Exponential Risk The responsibilities of a security professional are immense—the environment you’re protecting is complex and dynamic and you’re facing an increasing number of threats looking for any possible security gap to exploit. All it takes is one unprotected device to put your entire enterprise at risk, yet the typical enterprise’s critical security controls are under-deployed by 20%. Sevco and CrowdStrike covered how security teams can benefit from a single, comprehensive IT asset inventory across existing tools to automatically expose and prioritize gaps in their environment. Thank you for leveraging #TechExecs Network (Leadership Forums)

20

2 Comments

🎯Canadian law enforcement authorities have arrested an individual who is suspected to have conducted a series of hacks stemming from the breach of cloud data warehousing platform Snowflake earlier this year. The individual in question, Alexander "Connor" Moucka (aka Judische and Waifu), was apprehended on October 30, 2024, on the basis of a provisional arrest warrant, following a request by the U.S. The development was first reported by Bloomberg and corroborated by 404 Media. The exact nature of the charges against Moucka is currently not known. 🔔 Stay connected for industry’s latest content – Follow Dr. Anil Lamba, CISSP #linkedin #teamamex #JPMorganChase #cybersecurity #technologycontrols #infosec #informationsecurity #GenAi #linkedintopvoices #cybersecurityawareness #innovation #techindustry #cyber #birminghamtech #cybersecurity #fintech #careerintech #handsworth #communitysupport #womenintech #technology #security #cloud #infosec #riskassessment #informationsecurity #auditmanagement #informationprotection #securityaudit #cyberrisks #cybersecurity #security #cloudsecurity #trends #grc #leadership #socialmedia #digitization #cyberrisk #education #Hacking #privacy #datasecurity #passwordmanagement #identitytheft #phishingemails #holidayseason #bankfraud #personalinformation #creditfraud

2

🚨 New Blog Alert! 🚨 🔐 Canada’s cybersecurity landscape is rapidly evolving, and understanding the critical roles within this field is more important than ever. In Part 1 of our exclusive interview with Claudiu Popa, we explore the essential roles and skills that every aspiring cybersecurity professional should know. Whether you’re just starting out or looking to advance your career, these insights are crucial for navigating this dynamic industry. 💻 But that’s not all—Claudiu also shares strategies to bridge the growing talent gap in cybersecurity. With so many opportunities and challenges ahead, now is the time to equip yourself with the knowledge and skills that will set you apart. Don’t miss this deep dive into the future of cybersecurity in Canada! Check out Part 1 here: https://lnkd.in/g9WCjpbc #CybersecurityCareers #ClaudiuPopa #UnHackable #DigitalDefense #CyberSkills #TalentGap #CybersecurityExpert #KnowledgeFlow #TechCareers #CareerDevelopment

1

It’s quite concerning when a government organization lacks robust data governance and auditing practices. Imagine employees accessing sensitive personal information without proper records, only to sell it to criminals! 😱 In cases like this, effective data governance is crucial. It ensures transparency, data quality, and accountability. Fortunately, there have been efforts to establish data governance frameworks in various agencies. For instance, the Departments of Agriculture, Commerce, Housing and Urban Development, and the National Science Foundation have made progress in this area. However, gaps still exist, and continuous improvement is essential. https://lnkd.in/gDsNeMzv

2

Lifelabs, the biggest provider of community laboratory services in Canada still doesn't have multi factor authentication (MFA) when you login to check your test results at mycarecompass.lifelabs.com. (They suffered a data breach in 2019). Don't be like lifelabs; protect all your business applications with MFA. Remember, SMS multifactor authentication is inherently risky, do not use it. Use an Authenticator app instead. Consult with Prasna IT https://lnkd.in/gBnxfQ2S #MFA #dataSecurity #humanizedITSupport (Note: Portal asks for secret questions during login, this challenge is in the same category as passwords and is not true MFA.)

11

Cyber Security Today, April 22, 2024 -Vulnerability in CrushFTP file transfer software, security updates for Cisco’s controller management application, and more - IT World Canada: Cyber Security Today, April 22, 2024 -Vulnerability in CrushFTP file transfer software, security updates for Cisco’s controller management application, and more  IT World Canada #CyberSecurity #InfoSec #SecurityInsights

1

🔐 Discover CAN/CIOSC 104:2021 FAQs with Cyber Security Canada! Join us for our 5-part series where each day we answer a frequently asked question about this cyber certification, starting with our first question today: What is CAN/CIOSC 104? CAN CIOSC 104:2021 is a cybersecurity certification standard developed to enhance organizations' security practices. It provides guidelines and requirements for establishing, implementing, maintaining, and continually improving a cybersecurity program consisting of various control requirements. This certification is aimed at boosting organizations' cybersecurity resilience. #CyberSecureCanada #CANCIOSC104 #CyberSecurityCanada

10

🚀 Exciting News! AWS Canada has launched a $5 million K12 Cyber Grant Program to empower cybersecurity in Canadian schools! 🇨🇦💻 As educational institutions increasingly adopt cloud technologies, the need for robust cybersecurity measures has never been more critical. To address this, AWS is committing $5 million in promotional credits to help public schools across Canada enhance their cyber defenses and ensure a secure digital learning environment. 👩‍🏫👨‍🏫 This initiative will not only strengthen our schools' IT infrastructure against threats like ransomware but also support the reskilling of K12 IT staff through no-cost AWS security training. 🌟 Highlights: - $5 million in AWS promotional credits for cybersecurity solutions. - Free AWS security training for K12 IT staff. - No-cost cyber incident response support. - Security reviews for EdTech providers. Let's empower our educators and students with the tools they need to succeed in a digital world! Interested institutions can apply today. Let’s join hands in creating a safer and more secure learning environment for our future leaders. #AWS #Cybersecurity #Education #DigitalTransformation #K12 Read more about the program here: https://lnkd.in/gT_-4w8n Great shout out to the AWS Canada education team that worked behind the scenes to make this happen! Matt Deneault Chen Trang, B.Sc. David Horne Coral Kennett Fahd Gulzar Peter Famiglietti Katherine Chao Meredith Berger, M.S. Annmarie Lehner Kevin McCandless praveen Katta Paul Miedzik

32

4 Comments