DCTSO Security Presentations Available Until April 7

Ready to brush up on your cyber threat and security knowledge?The Division of Cyber Threat and Security Operations  (DCTSO) has you covered with pre-recorded presentations available on Confluence until Friday, April 7.

Learn about threat hunting, lowering your risk profile with DbProtect, Security Operations Center’s (SOC) security incident reporting framework, incident ticket management, and more.

Safeguarding the Crown Jewels: Protecting CMS’s Most Sensitive Data with DbProtect

Learn how the Vulnerability Assessment Team uses an enterprise database vulnerability management scanning tool, DbProtect, to protect CMS’s most sensitive data and prevent security breaches.

SOC Threat Hunt BlackCat Ransomware

We’ll discuss threat hunting and take a deep dive into BlackCat, a prevalent ransomware variant targeting the healthcare sector.

IRBRS SIR Development: SOC’s Turn

SOC has patiently waited to integrate a robust and contextually rich security incident reporting framework and now the opportunity is here.

Modernization and Repair of Incident Ticket Management at CMS - No Ticket Left Behind!

Take a look at how the Incident Management Team was able to recover from a series of critical issues by implementing some simple but effective solutions.