Don't own the backup system? Propose one small restore test of something non-critical. Agree it with the owner, restore somewhere safe, check the files open, and time it. #Backups #SysAdmin

Someone makes $180K in cybersecurity. Great! But what's their experience, location, and responsibilities? I'm all for salary transparency, but context matters. Someone else's paycheck isn't a promise about your future, and it doesn't mean you're falling behind.

Did you know that rural hospitals are receiving free cybersecurity support from the White House? This six-month pilot aims to help them maintain care during tech disruptions, a crucial step for such facilities. Strengthening our healthcare's digital defenses is vital. #Cybersecurity

In a made-up example, the backup tool wasn't lying. It answered a narrower question than people thought. Is there at least one copy with different credentials, offline, or protected from changes? #Backups

Did you know that phishing scams account for over 80% of reported security incidents? Businesses must prioritize employee training to recognize phishing attempts. Awareness can significantly reduce risk. Stay vigilant! #CyberSecurity #Phishing

If the account that manages your servers can also delete or change your backups, one compromised account (or one honest mistake) can affect both. #Ransomware #Backups

Did you know attackers can hijack unpatched IoT devices, turning them into proxies? The ClingSTUN malware exploits vulnerabilities in these devices, putting your network at risk. Always keep your IoT devices updated to protect your digital environment. #IoTSecurity #CyberHygiene

Made-up example: who decided how long the business can be without the server? Worth knowing whether anyone did, and whether the backups can actually meet it. #DisasterRecovery

Did you know that preparing for rogue AI incidents is becoming essential? NIST and NSA released guidelines for detection, response, recovery, and reporting. Key is to keep records of model outputs and actions. Be proactive, not reactive. #Cybersecurity

Made-up example: a backup job reports success for months. A small restore test finds a subfolder was excluded at some point. The job copied everything it was asked to copy, so the report never mentioned it. #Backups #InfoSec

Did you know that adopting a Zero Trust architecture can significantly reduce your risk of lateral movement in breaches? By implementing continuous verification and least privilege access, you’re better positioned to contain potential threats. Stay proactive. #ZeroTrust

A backup report that says Success tells you a job finished and some data got copied. It doesn't tell you if it was the right data, if it will come back, or whether the thing that hurt your servers could reach the copies. #Backups #ITSecurity

Did you know that deduplication and alert grouping can significantly reduce noise in your security monitoring? These strategies help streamline your detection process and cut down on mean time to resolution. How are you managing alerts? #CyberSecurity #ThreatDetection

Before the next suspicious email report arrives, write yourself a one-page first-look checklist using your team's approved tools and procedures. Practice only on messages from a training environment your team provides.

Many aspiring cybersecurity professionals overlook the power of a home lab. It's not just about playing with tools; it’s a chance to demonstrate your problem-solving skills in interviews. Document your setups and findings to show prospective employers what you can do. #Cybersecurity #HomeLab

Three basic choices for a reported suspicious email: close it when the evidence supports that, ask for more information, or escalate under your team's procedures. If you close it, write down why you are comfortable doing so.

Did you know that internships can boost your cybersecurity skills significantly? William Collison's role with Queen Anne's County involves log analysis and security policy development. Real-world experience is invaluable in this field. #Cybersecurity #Internship

When someone reports a suspicious email, the first question is what they actually did. Ask open questions, like what they did after they saw it. Avoid leading ones, like "you didn't click it, did you?" And ask without blaming them.

Did you know that outdated identity-theft prevention measures can lead to hefty fines? The SEC recently fined an adviser $175,000 for such failures, emphasizing the importance of robust security practices. Ensure your protocols are up to date to protect your clients. #Cybersecurity

Degree, certification or experience? I'm not going to tell you that you need all of it. Those things didn't do the same job, so I wouldn't treat them as interchangeable. It's like asking whether a screwdriver or a wrench is better. Depends on what you're trying to turn.