Centriworks, East Tennessee’s oldest and largest business technology company, announced today it has received the CompTIA Security Trustmark+ from CompTIA, the non-profit association for the world’s information technology (IT) industry.
The CompTIA Security Trustmark+ validates that Centriworks uses the security processes identified by the IT industry as generally accepted best practices and has been evaluated by an independent third-party assessor as meeting the criteria established by the CompTIA Security Trustmark+. Based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework, the CompTIA Security Trustmark+ is a comprehensive review of the security posture of any IT business, applicable across multiple industries and compliance regulations.
The CompTIA Security Trustmark+ signifies that Centriworks adheres to our industry’s highest standards for security practices and business processes in critical components of identification, protection, detection, response, and recovery as related to data security,†said Nancy Hammervik, senior vice president, industry relations, CompTIA. “Earning the Security Trustmark+ demonstrates a true commitment to address the challenges of security compliance facing our industry today.â€
To earn the CompTIA Security Trustmark+ Centriworks successfully passed an independent assessment of their security policies, capabilities, practices, and processes against industry best practices in areas such as:
- Security technologies, including firewalls, anti-Virus/ malware/ spyware, and intrusion detection
- Vulnerability assessment detection
- Data encryption
- Technical employee knowledge/expertise
- Security clearances and background checks
- Physical and hardware security
- Permissions, passwords, and other security requirements
You’ve Been Violated: Do You Know Your Risks re: Unfortunate Cyber Events?
Yesterday the Managed Technology Association conference concluded. Drew Sanford ran an excellent group exercise. We broke out into groups of five and assumed roles (CEO, CIO, CFO, CMO, and MSP) and simulated each role’s response to odd and not-so-odd occurrences on the company’s network over ten days.
The exercise drove home the technical and response complexities of cyber events or incidents (including whether it is either). There are land mines all over the place if you do not have the technical expertise or a response plan!
I implore all SMB owners, C-Suite members, and managers to take cyber threats seriously. You, at minimum, should review your last assessment or have one completed to know where the holes are in your defenses and what steps should be taken to mitigate your risk.