IT and Business Insights for SMB Solution Providers

Jay Ferron

I am a self proclaimed geek who has authored, may technical training courses. As a speaker Jay has presented at many events including, user groups, Computer trade shows, DOD and federal conferences, ISPCON, TechEd, and WPC. Jay is on the global board member of GITCA. Past President of ISACA-CT, Past president APCUG and is a Microsoft MVP Enterprise Security. Jay has been a MVP in in Windows, HPC, and Azure.

My information Resource
Identification and Disruption of QakBot Infrastructure
August 30th, 2023 | Jay Ferron | My information Resource
The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) released this Joint Cybersecurity Advisory  to disseminate QakBot infrastructure indicators of compromise (IOCs) identified through FBI investigations as of August 2023. On August 25, FBI and - Read More
 
Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines: NIST SP 800-204D ipd Available for Comment
August 30th, 2023 | Jay Ferron | My information Resource
The initial public draft (ipd) of NIST Special Publication (SP) 800-204D, Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines, is now available for public comment. Cloud-native applications are made up of multiple loosely coupled components called - Read More
 
Proposal to Revise SP 800-38D, “Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC
August 28th, 2023 | Jay Ferron | My information Resource
NIST’s Crypto Publication Review Board announced the review of SP 800-38D, Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC (2007) in August 2021. In response, NIST received public comments. NIST proposes revising SP 800-38D to address many of the technical - Read More
 
NIST Announces First Four Quantum-Resistant Cryptographic Algorithms
August 28th, 2023 | Jay Ferron | My information Resource
NIST has chosen the first group of encryption tools that are designed to withstand the assault of a future quantum computer, which could potentially crack the security used to protect privacy in the digital systems we rely on every day — such as online banking and email software. Read More - Read More
 
NIST to Standardize Encryption Algorithms That Can Resist Attack by Quantum Computer
August 28th, 2023 | Jay Ferron | My information Resource
Last year, the National Institute of Standards and Technology (NIST) selected four algorithms designed to withstand attack by quantum computers. Now the agency has begun the process of standardizing these algorithms — the final step before making these mathematical tools available so that - Read More
 
Access Resources for Cybersecurity Career Week
August 28th, 2023 | Jay Ferron | My information Resource
Cybersecurity Career Week October 16-21, 2023nist.gov/nice/ccw Cybersecurity Career Week is a campaign to promote the discovery of cybersecurity careers and share resources that increase understanding of the multiple learning pathways that lead to those careers. ATTEND THE INFORMATIONAL - Read More
 
NIST Workshop on Multi-party Threshold Schemes (MPTS) 2023, September 26th–28th (Virtual)
August 28th, 2023 | Jay Ferron | My information Resource
NIST Workshop on Multi-party Threshold Schemes (MPTS) 2023, September 26th–28th (Virtual) What: MPTS 2023 (Virtual): NIST Workshop on Multi-Party Threshold Schemes Date - Read More
 
Building a Cybersecurity and Privacy Learning Program: NIST Releases Draft SP 800-50 Rev. 1
August 28th, 2023 | Jay Ferron | My information Resource
Draft NIST Special Publication (SP) 800-50r1 (Revision 1), Building a Cybersecurity and Privacy Learning Program, is now available for public comment. The document was first published in 2003 as Building an Information Technology Security Awareness and Training Program. The public comment period - Read More
 
Cyber Risks of Improperly Disposed IT Assets
August 23rd, 2023 | Jay Ferron | My information Resource
Image Source: NIST According to NIST’s IT Asset Management , the typical asset lifecycle goes through the enrollment, operation, and end-of-life phases. IT assets include magnetic and optical media (hard drives, DVDs, USB flash drives, and SD cards) and components found in internet- - Read More
 
Draft CSF Profile for EV XFC Infrastructure!
August 23rd, 2023 | Jay Ferron | My information Resource
There’s Still Time to Comment on the Draft NIST IR 8473, Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure The National Cybersecurity Center of Excellence (NCCoE) has released for public comment the initial public draft of NIST Internal Report (NIST IR) - Read More
 

Pages