Vincent Hughes, MBA

September is National Suicide Prevention Month in the US. I want to call attention to this and let people know about my own personal struggles. In January 2008, I attempted suicide. If not for the actions of Samir Goncalves (thank you, brother, I owe you my life), I would not be here today. Prior to today, only a handful of people knew this occurred. Most of my family does not even know about this (surprise!), and I have never shared this where an employer could see it. I have gone out of my way to hide this aspect of myself out of shame, fear of reprisal, and fear of judgement resulting in lost opportunities. This has been both to my detriment and to the detriment of others as my choice to hide was a de facto choice to maintain the status quo around mental health in the US while offering me few opportunities to improve my own mental health. Through my time in the Questrom School of Business, Boston University MBA program, I met a group of understanding people who helped me to come to terms with the humanity of my experience and encouraged me to be more transparent. The final push came from Brad Graver, MBA at SecureWorld who was there for me when I needed it. Thank you to George Kamide who gave me the opportunity to share my story on Bare Knuckles & Brass Tacks - check out the podcast below. Today, I choose to stop hiding. I choose to ignore the social stigma around mental health that demonizes admitting I need help. I choose to stop silently accepting the norm and instead to actively be part of the solution. It is with regret that I admit I should have spoken out sooner. It is with the deepest sincerity that I hope speaking out now is not too late for someone who might need to know it is okay to talk about mental health. I especially want to spread this message to my fellow Cyber professionals. Working in Cybersecurity is incredibly stressful. Attacks are 24x7x365. Alerts that need to be investigated *now* come in at 2 am on Saturday mornings just as often as 2 pm on Thursday afternoons. There is no "down-time" in Cybersecurity and we're often fielding alerts even while on vacation. The burnout is real. We are accountable if there is a successful attack and heads of cybersecurity are often scapegoats. It's no wonder there is a mental health crisis in Cybersecurity. Please talk to your employees, contractors, consultants, friends, family, acquaintances and all fellow humans about mental health. If you have experienced mental health problems, drive acceptance by letting others know. If you see someone with possible problems, be the one to help. You don't need the answers. I certainly don't have them. Just be there. I was lucky to have people who were there. Be that person. Sincere thanks to those mentioned above, my entire EMBA 33 cohort, and my wife Kelly Bowker who holds my hand to guide me through the darkness when I can't see the light. Please consider checking out 988lifeline.org and The Trevor Project.

157

24 Comments

Just returned from the HIMSS Cybersecurity Forum 2024, and I'm both inspired and energized by the critical conversations we had about the future of cybersecurity in healthcare. One thing is crystal clear: cybersecurity isn't just an IT issue—it's a patient safety issue. With cyber threats growing more sophisticated, our patients' trust and well-being are on the line. Here are some key takeaways I believe the healthcare community needs to embrace: 1. Proactive Defense is Essential: Reactive measures are no longer sufficient. We need to invest in advanced threat detection and response strategies to stay ahead of potential breaches. 2. Culture of Security Awareness: Every team member plays a role in cybersecurity. Ongoing training and a culture that prioritizes security can make a significant difference. 3. Collaboration is Key: Sharing insights and threat intelligence across organizations can strengthen our collective defenses. Cybersecurity is a team sport. 4. Securing Emerging Technologies: As we adopt AI, IoT, and other innovations, integrating security from the ground up is non-negotiable. 5. Regulatory Compliance and Beyond: Meeting regulatory standards is just the baseline. We should strive to exceed them to truly safeguard our systems and data. For the healthcare community, understanding that cybersecurity is integral to patient care is vital. Let's advocate for the resources, policies, and education needed to protect our patients and uphold the integrity of our services. Looking forward to implementing these insights and continuing this crucial dialogue. Together, we can make healthcare safer for everyone. #HIMSSCybersecurityForum #HealthcareSecurity #PatientSafety #Cybersecurity #HealthcareInnovation

37

1 Comment

MSPs, are you using compliance confidence as a practice differentiator? Samuel Daigle at Kennebunk Cyber Systems and Beachhead's own Cam Roberson talk with Channel Mastered's MSP Chat about an important MSP differentiator: executing a best-practice cybersecurity strategy that matches up to evolving compliance regulations. Sam: "Almost every single client I've ever worked with has three different problem statements that we try to tackle: 1) What is your real-world risk? 2) From an IT / security perspective, what is a blocker to revenue? 3) How are you *demonstrating* that you are doing what you need to do for compliance? If I can answer these three things, then I can probably answer any questions for any specific compliance regulation." Excellent insights from Sam, watch the excerpt ⬇ https://lnkd.in/gFsJAKiH

3

⚠️ Beware of QR Code Phishing Scams ⚠️ As QR codes become increasingly ubiquitous in our daily lives, it's important to stay vigilant against potential phishing scams that exploit this technology. Here's what you need to know: 🔍 **How it Works**: Cybercriminals embed malicious links within QR codes, often disguised as legitimate offers or promotions. When scanned, these codes can lead to fake websites designed to steal sensitive information or install malware on your device. 💻🔒 #QRCodeSecurity #PhishingAwareness #Cybersecurity #NewBridge NewBridge Pharmaceuticals

5

🎙️”I try and take on projects that maybe no one else wants to take on” After earning her reputation as a successful security leader, Sanju Misra, #CISO at Alnylam Pharmaceuticals, didn’t have to find new roles — new roles came to her. Sanju is back again on The New CISO Podcast with Stephen Moore to cover how she became “the person who gets the call”, and outline her strategy for switching roles as a CISO. Listen now! 🔗 https://ow.ly/eaEY50UvtIr Exabeam

39

1 Comment

I'm extremely excited to be a part of the Governance Institute of Australia Leadership Conference where I will be giving a keynote speech on 5th September, talking about all about the following areas: - The effect of modern technology and digitalisation on how future generations think and feel - Changes to human brain functions – the way we process information, engage, empathise and take risks - How will this impact the way we work? - Neuroscience and modern leadership

26

1 Comment

🗞️Big news for Axonius! ECS has selected Axonius platform to support U.S. Department of Homeland Security's CDM Data Services Program, allowing U.S. Federal agencies to gain access to CDM and FISMA reporting. Read the full press release here: https://lnkd.in/gq_5eK9X Rebecca Mckay Lucy House Craig Brennan

7

𝗪𝗲𝘁𝗦𝘁𝗼𝗻𝗲 𝗟𝗮𝗯𝘀 𝗔𝗻𝗻𝗼𝘂𝗻𝗰𝗲𝘀 𝗦𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰 𝗣𝗮𝗿𝘁𝗻𝗲𝗿𝘀𝗵𝗶𝗽 𝘄𝗶𝘁𝗵 𝗧𝗘𝗚𝗜𝗖𝗼𝗻𝗻𝗲𝗰𝘁 Jersey City, NJ, July 29, 2024 – WetStone Technologies, a leading developer of cybersecurity solutions, is pleased to announce a strategic partnership with TEGIConnect, LLC, a renowned technology solutions provider. This collaboration will enhance security for medical imaging data across the tribal, federal, state, and commercial healthcare sectors. 𝗞𝗲𝘆 𝗛𝗶𝗴𝗵𝗹𝗶𝗴𝗵𝘁𝘀 𝗼𝗳 𝘁𝗵𝗲 𝗣𝗮𝗿𝘁𝗻𝗲𝗿𝘀𝗵𝗶𝗽: 1. 𝗧𝗮𝗿𝗴𝗲𝘁𝗲𝗱 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻: By combining WetStone Labs' SecureDICOM technology with TEGIConnect's robust solutions and services, we will offer unparalleled security measures to healthcare clients and equipment manufacturers. 2. 𝗘𝗻𝗵𝗮𝗻𝗰𝗲𝗱 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗘𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲: Together, our companies will provide seamless, secure, and efficient technology solutions that improve overall customer satisfaction and operational efficiency. 3. 𝗠𝗮𝗿𝗸𝗲𝘁 𝗘𝘅𝗽𝗮𝗻𝘀𝗶𝗼𝗻: This partnership will enable WetStone Labs to extend the reach of our SecureDICOM technology into new markets, while TEGIConnect will benefit from integrating our advanced security solutions into their offerings for diverse radiologic and diagnostic healthcare sectors. " We are excited to partner with TEGIConnect to bring our patent-pending software product SecureDICOM, an advanced solution for protecting DICOM files, to a wider network of healthcare organizations in the public and private sectors," said Carlton Jeffcoat, CISSP, CTO of WetStone Labs. "This collaboration will expand the presence of SecureDICOM, ensuring that more healthcare providers can benefit from our cutting-edge technology to safeguard their sensitive medical images." Kimberly Rogers, Owner, SVP of Delivery Operations of TEGIConnect, added, "Partnering with WetStone Labs will enable us to offer our clients state-of-the-art cybersecurity solutions. We are confident that this partnership will enhance our technology suite and provide greater security for healthcare networks against threats within DICOM files." 𝗔𝗯𝗼𝘂𝘁 𝗦𝗲𝗰𝘂𝗿𝗲𝗗𝗜𝗖𝗢𝗠: SecureDICOM enhances healthcare security by providing specialized protection for DICOM files. It addresses the unique structure and demands of these medical imaging files that general antivirus tools cannot effectively cover. SecureDICOM offers targeted protection, multi-dimensional security, and regulatory compliance support, ensuring the integrity and security of sensitive medical images. To read the full press release click the link: https://lnkd.in/e47GsZ7r 𝗙𝗼𝗿 𝗺𝗼𝗿𝗲 𝗶𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻, 𝗽𝗹𝗲𝗮𝘀𝗲 𝗰𝗼𝗻𝘁𝗮𝗰𝘁:   Geoff Barron Jason Addis #DICOM #PACS #MedicalImaging #Radiology #DiagnosticImaging #HealthcareSecurity #CyberSecurity #Malware #HealthcareIT #Steganography #HIPAA #DFIR #CyberCrime #AWS #partnership #pressrelease

10

3 Comments

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

👋 For most Massachusetts organizations, scheduled shredding services are an integral part of a complete document management program. Documents that are inactive and no longer need to be retained take up costly office space, and may contain sensitive, confidential information that poses a security risk to your business if exposed. 👇 https://lnkd.in/eM8VAdJS

In this short video clip of our CEO, Dennis Underwood, presents "Lies, More Lies, and Ransomware Statistics" at the BSides Security Pittsburgh. Hear him take a deeper look into the typical victim profiles for ransomware attacks, how the attackers work, and methods, too! 💡 ⠀ Catch the full presentation here 👉🏼 https://lnkd.in/e4rU22ih ⠀ #Hackers #Ransomware #RansomwarePrevention #CyberAttacks #Cybersecurity

4

Evolution of a CISO Role The first CISO role was established in 1995 at Citicorp/Citigroup when Steve Katz became the world’s first CISO when he took the position at Citicorp/Citigroup in 1995. From the beginning of his CISO journey, Katz realized that the role was not just an IT position; it was about serving the business by reducing risk. In the following years, other organizations added this new position, with the CISO reporting to the CIO in most organizational structures. While many CISOs recognized the true nature of their role, the rest of their organizations were often not on the same page. Initially, the role was primarily about reducing risk and managing cybersecurity within the IT realm. The CISO job has since become far more complex. According to Fitzgerald’s 2019 book “CISO COMPASS: Navigating Cybersecurity Leadership Skills with Insights from Pioneers”, Katz’s hiring kicked off the first CISO era from 1995 to 2000, when CISOs focused on passwords and log-on security. Fitzgerald divides the changing roles into a timeline of subsequent eras: ·        2000 to 2004: Regulatory compliance CISOs ·        2004 to 2008: Risk-oriented CISOs ·        2008 to 2016: Threat-aware cybersecurity CISOs (social/mobile/cloud) ·        2016 to 2022: Privacy and data-aware CISOs ·        2022 to 2027+: The integrated, business-resilient CISO For more insights read my recent eBook on CISO 2.0 - Leading the Next Generation of Cybersecurity! at https://lnkd.in/grN_YAeX #CISO #Innovation #Leadership #Whitepaper #DigitalTransformation #CyberSecurity #InformationSecurity #DataProtection #RiskManagement #DigitalTrust #WorkplaceSecurity #CyberResilience #PreventionAndDetection #SecureDigitalWorld #CISOInsights #modernleadership #leadershipexcellence #authenticleadership #TechLeadership #CyberAwareness #InfosecCommunity #FutureOfSecurity #etciso #expresscomputers #IDC #ISMG

168

8 Comments