
Introduction to Log Management (IR110)
CISA is proud to offer the cybersecurity awareness webinar, Introduction to Log Management on Friday, July 7, 2023 from 11 a.m. to noon EDT. We are excited to share this information with stakeholders across the Federal enterprise and nationally.
The target audience for this webinar is non-technical and beginning incident responders.
Log files provide the data that are the bread and butter of incident response, enabling network analysts and incident responders to investigate and diagnose issues and suspicious activity from network perimeter to epicenter. This webinar introduces the fundamentals of investigating logs for incidents.
This webinar includes the following information and more:
- Common attack methods: Understand log analysis, and its importance as a crucial component of incident response and network security.
- Key guidance for organizations: Introduce resources and tools that enable organizations and individuals to use log analysis to query for threat activity including SIEM, FPCAP analysis, and using PowerShell and Active Directory to run scripts.
- Case studies: Explore the methods and impacts of real-life cyberattacks, and how the victims responded and recovered.
- Knowledge check: The course concludes with a brief knowledge check section to reinforce key concepts and takeaways.
Event Logistics:
- Date: Friday, July 7, 2023
- Time: 11 a.m. - noon EDT
- Location: Online via Adobe Connect
- CPE Credit: Participants can earn 1 CPE credit for attending this course.
- Note: Audio is through Adobe Connect; there is no external dial-in. Closed captioning will be available during this training event.
If you require a reasonable accommodation to fully participate in this virtual event, please contact [email protected] at least five business days prior to the training with the type of support you need.
Speaker Series: NCCoE Learning Series: Security Segmentation for Small Manufacturers
As manufacturers are increasingly targeted in cyberattacks, any gaps in cybersecurity leave small manufacturers vulnerable to attacks. Small manufacturers tend to operate facilities with limited staff and resources, often causing cybersecurity to fall by the wayside as something that costs too much time and money. Additionally, bringing together various cybersecurity standards, frameworks, and guides to derive a coherent action plan is a challenge even for those experienced in cybersecurity. Security segmentation is a cost effective and efficient security design approach for protecting cyber assets by grouping them based on their communication and security requirements.
Join us on June 28, 2023 from 2:00-2:45 p.m. ET where we will discuss the NCCoE’s most recent manufacturing publication, NIST Cybersecurity White Paper: Security Segmentation in a Small Manufacturing Environment. The paper outlines a practical six-step approach, incorporating the NIST Cybersecurity Framework (CSF) and NIST IR 8183 Cybersecurity Framework Manufacturing Profile (“CSF Manufacturing Profile”), that manufacturers can follow to implement security segmentation and mitigate cyber vulnerabilities in their manufacturing environments.
Join us on June 28 for a discussion where you’ll:
- meet the publication authors
- receive an overview of the new white paper with key takeaways
- have the opportunity to ask the publication authors questions
- learn how to stay involved in the NCCoE’s manufacturing-related efforts
Cybersecurity Basics for your Small Business
Technology is a double-edged sword. On the one hand, it creates productivity and business opportunities never seen before. On the other it can allow remote users access to an entire business, enabling them to take it down with a few keystrokes. Learn how to protect your small business from cyberattacks with these cybersecurity tips.
These basic tips of cybersecurity for your small business, allowing you to create robust systems and policies to protect the data of your business and its clients.
Defend Against Ransomware Attacks Cyber Range Training (IR209)
The Cybersecurity and Infrastructure Security Agency (CISA) is proud to present the Defend Against Ransomware Attacks Cyber Range Training event on June 22, 2023, from 9 a.m. to 1 p.m. EDT. The 200-level training events are open to government employees and contractors across Federal, State, Local, Tribal, and Territorial government, educational partners, and critical infrastructure partners. Please use your organization email address when registering.
Defending Internet Accessible Systems (IR104)
CISA is proud to offer the cybersecurity awareness webinar, Defending Internet Accessible Systems (IR104) on Wednesday, June 21, 2023, from 11 a.m. to noon EDT. We are excited to share this information with stakeholders across the Federal enterprise and nationally.
Internet accessible systems have become the backbone of modern business and communication infrastructure, from smartphones to web applications such as Outlook to the explosive growth of the Internet of Things (IoT). Each of these systems, applications, and devices, however, can be targeted by threat actors and used to conduct malicious activity if left unsecured—worse, improperly configured and ill maintained systems can leave vulnerabilities and sensitive information open to exploit.
Join us for the following information and more:
- Common attacks and vulnerabilities: Understand common vulnerabilities of internet accessible systems, how they are exploited by threat actors, and how to mitigate them to prevent attacks from succeeding.
- CISA guidance: Learn key guidance, resources, and best practices to address vulnerabilities and prepare effective incident response and recovery.
- Case studies: Examine the methods and impacts of real-life cyber-attacks, and how the targets responded and recovered.
- Knowledge check: Knowledge check questions will be asked throughout the course to reinforce key concepts and important takeaways.
This awareness webinar is designed for both technical and non-technical audiences
Understanding Indicators of Compromise Cyber Range Training (IR208)
The Cybersecurity and Infrastructure Security Agency (CISA) is proud to offer the Incident Response Training event, Understanding Indicators of Compromise Cyber Range Training (IR208) on June 15, 2023, from 9 a.m. to 1 p.m. EDT. The 200-level training events are open to government employees and contractors across Federal, State, Local, Tribal, and Territorial government, educational partners, and critical infrastructure partners. Please use your organization email address when registering.
Cyber CrossFit: Getting your team in shape to resist cyber attacks
Most successful cyber attacks target employees.
- When they are not properly trained and prepared, employees can be your organization's weakest link.
- Come learn best practices and tips for making your whole company more resistant to cyber attacks.
This class is offered in partnership with Mt. Hood SBDC
How to register for this class
- Enter the registration site here.
- Once you are on the registration page you will click on the “add to cart” button, on the right-hand side you will now see checkout click on that button.
- This will take you to another page (a log-in page) where you will need to create a new customer account (even if you have taken classes at Mt. Hood Community College in the past). Remember the information you enter for your username and password. You will need these each time you register. There will be one more page you must complete.
- After completing this you will have completed your class registration
This class is offered live via Zoom
Cybersecurity Training for Your Small Business
Have you thought about how your business would survive a cyber attack? The JFCAC Small Business Resource Center is providing a FREE virtual 60-minute Cybersecurity training to entrepreneurs and small business owners to educate them on the importance of recognizing cyber threats, learn and implement safe browsing habits, and to properly utilize authentication tools.
SBOM-a-Rama
To support a community effort to advance SBOM technologies, processes, and practices, CISA will facilitate the 2023 CISA SBOM-a-Rama. The goal of this meeting is to help the broader software and security community understand the current state of SBOM and what efforts have been made by different parts of the SBOM community, including CISA-facilitated community-led work and other activity from sectors and governments. Attendees are invited to ask questions, share comments, and raise further issues that need attention. A full agenda will be posted in advance of the meeting at https://cisa.gov/SBOM.
This event is open to anyone. CISA welcomes participation from anyone interested in learning about the current state of SBOM practice and implementation, including private sector practitioners, policy experts, academics, and representatives from non-U.S. organizations. A form to allow individuals to register their interest in either in-person or virtual participation will be available at https://cisa.gov/SBOM.
Why Cybersecurity is Relevant to Everyone
This webinar will provide safe computer and network usage tips for small business owners. It concerns not only businesses, but also individuals.