Ben Tesnar

Cybersecurity enthusiast, CISO, interested in learning from others

[Ben Tesnar @CISOTesnarB]

Q5 Deeper incident response planning (including MS partners!), which includes regular testing, table tops, simulations, red teaming, with the assumption of a high percentage of remote workers. @CIOStraightTalk #Stinsights #OneHCL

[mike d. kail 🗻 @mdkail]

@CIOStraightTalk @CISOTesnarB @JosephSteinberg @renjuv @sanjaykatkar @vthakur @DigitalSecArch A5: I'm a broken record in the fact that I've continually said it has been "WFA - Work From Anywhere" for several years now and increased during the pandemic and will remain at this elevated state going forward #STinsights @CIOStraightTalk

[Ben Tesnar @CISOTesnarB]

Q5 Forget traditional borders. Forget the physical location.
Zero trust strategies will help companies be better prepared. @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Agree. RBAC strategy needs to also include privileged access management protocols. Lateral movement once "inside" and privilege escalation is a common tactic from threat adversaries.

[mike d. kail 🗻 @mdkail]

@renjuv @CIOStraightTalk @CISOTesnarB @JosephSteinberg @sanjaykatkar @vthakur @DigitalSecArch In addition to the "defense in depth" point I just made, RBAC - Role Based Access Control is another best practice to help here #STinsights @CIOStraightTalk

[Ben Tesnar @CISOTesnarB]

Appeal to the human aspect - "We're all in this together", "One Team".

[Wayne Anderson @DigitalSecArch]

Q4: Lean on the side of transparency and over-communication. The #social side of a crisis is important. We are seeing the value of transparency and #empathy and communicating the why, not just the what/how of #security. #STinsights @CIOStraightTalk #OneHCL

[Ben Tesnar @CISOTesnarB]

Q4 Most of what needs to be done isn't new. Some larger companies have seen targeted denial of service attacks on company VPN and remote access infrastructure. Ensure DDoS protections are in place. AND TESTED @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

No question about it. Before now, many companies viewed this risk as remote (but high impact). Those thoughts have/will shift. I expect more funding towards BCP programs, including more human resources.

[Wayne Anderson @DigitalSecArch]

Around 20-30% of companies that I have done assessment in last 2 years - including a few F100 - had trouble justifying "real" #BCDR resources. #COVID19 experience should help drive more all-hazards ready #continuity planning. #STinsights @CIOStraightTalk #OneHCL

[Ben Tesnar @CISOTesnarB]

I like the "addressing employee wellness" aspect! Fatigued resources, prone to mistakes, increase risk.

[Renju Varghese @renjuv]

@CIOStraightTalk @CISOTesnarB @JosephSteinberg @mdkail @sanjaykatkar @vthakur @DigitalSecArch Q3, Enhancing Endpoint Security, Addressing employee wellness to reduce employee fatique, IAM & PAM programs, re-looking at protection for IPs & crown jewels #STinsights @CIOStraightTalk #OneHCL

[Ben Tesnar @CISOTesnarB]

Device profiling with NAC technology is one effective way to identify insecure machines when they return to the office, and quarantine them before they connect to internal resources. @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Q3 Companies should consider developing a "return to office" plan before corporate devices return to the internal network. It should include things like verifying patch levels, deep and comprehensive malware scans, and log reviews for these users. @CIOStraightTalk #Stinsights

[Ben Tesnar @CISOTesnarB]

Q3 Companies should consider developing a "return to office" plan before corporate devices return to the internal network. It should include things like verifying patch levels, deep and comprehensive malware scans, and log reviews for these users. @CIOStraightTalk #Stinsights

[Ben Tesnar @CISOTesnarB]

Yes! Don't forget the basic hygiene measures

[Vikram Thakur @vthakur]

@CIOStraightTalk @CISOTesnarB @JosephSteinberg @mdkail @renjuv @sanjaykatkar @DigitalSecArch Not letting basics slip. Stay up with patches. Do vuln scanning. Have good password hygiene. Use MFA. Follow least privilege. Standardize on technologies. Standing up VPN infra for more bandwidth.

@CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Q3 Ensure that known COVID and WFH indicators of compromise are being ingested into threat intelligence platforms and correlated against network traffic and logs @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Q3 Leveraging more virtual desktop environments, which can be deployed fairly quickly, helps users be productive from any device and helps maintain reasonable security measures in a company controlled environment @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

#brokenrecord Security is an enterprise risk, and everyone's responsibility

[Moin Shaikh @moingshaikh]

@CIOStraightTalk @CISOTesnarB @JosephSteinberg @mdkail @renjuv @sanjaykatkar @vthakur @DigitalSecArch A2: I have seen many companies and teams realizing now that security is "shared" responsibility.

Org. can no longer rely on their solid security tools and network infra alone to protect the systems and data. Employees have to play their role, too.

#STinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Role based communications, email warning banners, and phishing assessments have also been effective communication mechanisms for us. #stinsights

[Paul Hemp @paul_hemp]

Per #3): Have you -- anyone on the panel -- seen examples of particularly effective communications that a company may have have used to educate thousands of employees working at home about cyber-vigilance? #STinsights @CIOStraightTalk #oneHCL

[Ben Tesnar @CISOTesnarB]

Somewhat tactical, but it's been highly effective to show end users actual COVID-19 and WFH themed phishing messages. Then they can visualize the actual threat.

[Paul Hemp @paul_hemp]

Per #3): Have you -- anyone on the panel -- seen examples of particularly effective communications that a company may have have used to educate thousands of employees working at home about cyber-vigilance? #STinsights @CIOStraightTalk #oneHCL

[mike d. kail 🗻 @mdkail]

@CIOStraightTalk @CISOTesnarB @JosephSteinberg @renjuv @sanjaykatkar @vthakur @DigitalSecArch A2: Unfortunately many are learning how ill prepared they were for any sort of "event" -- not having enough laptop, mobile device inventory, not enough VPN capacity, no communication guidelines. This is a people and process issue, not tech #STinsights @CIOStraightTalk

[Ben Tesnar @CISOTesnarB]

Completely agree. Never let a good crisis go to waste - this will help us change the narrative. Can't afford to not be direct.

[Wayne Anderson @DigitalSecArch]

It always has been, but #COVID has required i think more effort to communicate the "why" well, to be crisp in what the expectations are, and to help people with transparency of what threats look like. #STinsights @CIOStraightTalk #OneHCL

[Ben Tesnar @CISOTesnarB]

SOC's also need to ensure they have visibility in to key systems, and are looking at the right log sources @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Q2 Security Operation Center's need additional training to spot threats related to COVID and work from home practices @CIOStraightTalk #Stinsights #OneHCL

[Ben Tesnar @CISOTesnarB]

Obtaining and using threat intelligence plays a critical role in identifying and stopping COVID and work from home threats @CIOStraightTalk #Stinsights #OneHCL