by jdpoteet | Apr 17, 2025 | News
The Information Security Forum (ISF) is a premier educational event designed to bring together IT and security professionals from public sector organizations across Texas. Hosted by the Texas Department of Information Resources, Office of the Chief Information Security Officer, the 26th Annual ISF will take place May 28–29, 2025, at the Palmer Events Center in Austin, Texas.
This two-day conference will feature a variety of security-focused presentations delivered by representatives from state agencies, vendors, and public education institutions. ISF is open exclusively to IT and security personnel from Texas government entities and public institutions of higher education.
Attendees can expect to learn about emerging security trends and the latest technological advancements. It’s also an excellent opportunity to network and showcase your products and services to key security and IT decision-makers.
Who Can Attend:
This complimentary event is open only to employees of state and local government, K–12 schools, and public institutions of higher education. Complimentary beverages, snacks, continental breakfast, and lunch will be available both days. Pre-registration is required to attend.
Register here: https://xcelevents.swoogo.com/isf2025attendee
DIR Information Security Forum (ISF) 2025
May 28 – 29, 2025
Palmer Events Center
900 Barton Springs Rd
Austin, TX 78704
BLACKSWAN BOOTH #320
Contact
For additional questions regarding the Information Security Forum, email ISF@dir.texas.gov.
by jdpoteet | Apr 14, 2025 | News, Flyers, Blogs
Introduction: A New Era of Cyber Vigilance
In an increasingly digitized financial landscape, the U.S. Securities and Exchange Commission (SEC) has elevated cybersecurity and operational resilience to the pinnacle of its 2025 examination agenda. As financial firms deepen their reliance on advanced technologies and third-party ecosystems, the stakes have never been higher.
Cyber threats—from sophisticated data breaches to ransomware attacks—pose existential risks to market stability and investor trust. Recognizing this, the SEC is intensifying its focus on ensuring that firms’ cyber risk management frameworks are robust, adaptive to an evolving threat landscape, and aligned with stringent regulatory standards. This whitepaper explores the SEC’s 2025 priorities, delving into key focus areas, recent enforcement trends, and actionable strategies for firms to fortify their defenses and meet regulatory expectations.
At the forefront of helping firms meet these challenges is Blackswan Cybersecurity, dedicated to strengthening cyber resilience through risk-informed strategies, regulatory alignment, and 24/7 advanced threat mitigation TTPs.
This whitepaper explores the SEC’s 2025 priorities, delving into key focus areas, recent enforcement trends, and actionable strategies for firms to fortify their defenses and meet regulatory requirements.
The Imperative of Cybersecurity Governance
A commitment to strong cybersecurity governance lies at the heart of the SEC’s 2025 priorities. The agency scrutinizes whether firms have embedded cyber risk oversight into their leadership structures, with senior management and boards playing active roles in safeguarding their organizations. This begins with establishing clear, actionable policies to identify and mitigate cyber risks, underpinned by regular risk assessments that probe vulnerabilities across IT ecosystems.
Equally critical are well-defined escalation and response protocols, ensuring that firms can act swiftly and decisively when a cyber incident occurs. The SEC’s message is clear: cybersecurity is no longer a technical issue relegated to IT departments—it is a strategic imperative that demands executive accountability.
Mastering Incident Response and Recovery
As cyberattacks grow in frequency and complexity, the ability to respond and recover effectively has become a cornerstone of operational resilience. The SEC is zeroing in on firms’ incident response capabilities, examining the strength of detection systems, the clarity of reporting mechanisms, and the readiness to counter threats like ransomware, business email compromise (BEC), and data exfiltration.
Beyond immediate response, the agency seeks robust post-incident analysis and remediation strategies that prevent recurrence. A particular point of emphasis is handling material cybersecurity incidents—firms must demonstrate technical preparedness and transparency, providing timely disclosures to investors and regulators to maintain market confidence.
Safeguarding the Lifeblood of Finance: Data Protection
In a sector where sensitive financial and investor data is the lifeblood of operations, protecting it remains a non-negotiable priority. The SEC is intensifying its evaluation of data security controls, focusing on identity and access management (IAM) systems to thwart unauthorized intrusions, the widespread adoption of multi-factor authentication (MFA) across critical platforms, and the deployment of encryption and data loss prevention (DLP) tools to shield information from compromise.
Firms that fall short in these areas risk operational disruption and the SEC’s regulatory hammer, as inadequate data protection could trigger enforcement actions that reverberate across the industry.
Navigating the Third-Party Risk Frontier
The interconnected nature of modern finance—where third-party service providers are integral to operations—introduces a complex web of cyber risks. The SEC is spotlighting how firms manage these external dependencies, starting with rigorous vendor due diligence and risk assessments before onboarding.
Contracts must embed enforceable cybersecurity requirements, and ongoing monitoring is essential to ensure compliance with industry standards. With outsourced services often serving as potential weak links, the SEC urges firms to eliminate regulatory blind spots by documenting and refining their third-party risk management practices, ensuring resilience extends beyond their walls.
Aligning with Evolving Regulatory Standards
The SEC’s 2025 examinations are not occurring in a vacuum—they are shaped by a wave of recent regulatory updates designed to bolster cybersecurity across the financial sector. Firms are expected to align with enhanced requirements under Regulation S-P, which fortifies customer data protection and proposed Cybersecurity Risk Management Rules targeting investment advisers and broker-dealers.
New disclosure mandates for cyber incidents and risk management practices further underscore the need for transparency. To stay ahead, firms must proactively review and recalibrate their cybersecurity policies, weaving in best practices to meet current and emerging expectations.
Lessons from the Enforcement Frontline
The SEC’s resolve is vividly illustrated through its recent enforcement actions, which serve as both a warning and a roadmap for compliance.
- In October 2024, four companies—Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd., and Mimecast Limited—faced charges for misleading disclosures tied to the 2020 SolarWinds breach, paying penalties ranging from $990,000 to $4 million.
- In March 2024, the agency tackled “AI washing,” fining Delphia (USA) Inc. and Global Predictions Inc. a combined $400,000 for exaggerating their AI capabilities.
- In December 2024, the Industrial and Commercial Bank of China Financial Services (ICBCFS) settled charges following a ransomware attack, avoiding penalties due to cooperation but highlighting the cost of unpreparedness.
These cases underscore the SEC’s unwavering focus on truthfulness, preparedness, and accountability.
Charting the Path Forward
As the SEC’s 2025 examinations loom, financial firms must act decisively to align these priorities. Conducting cybersecurity risk assessments tailored to SEC expectations is a critical first step, followed by rigorous testing of incident response and business continuity plans through tabletop exercises.
Strengthening oversight of third-party vendors and ensuring they meet cybersecurity benchmarks is equally vital. Meanwhile, continuous monitoring and real-time threat detection can uncover vulnerabilities before exploiting them.
Blackswan Cybersecurity works closely with firms to implement these proactive measures, offering expert-led assessments, incident response readiness programs, and vendor risk management frameworks that meet and exceed regulatory expectations.
By embracing these measures, firms can mitigate regulatory risks and enhance their operational resilience in an unpredictable digital world.
Conclusion: Cybersecurity as a Competitive Edge
The SEC’s 2025 examination priorities signal a transformative moment for the financial sector, where cybersecurity and operational resilience are inseparable from market integrity and investor protection. Firms that view these mandates as an opportunity—rather than a burden—stand to gain a competitive edge.
Blackswan Cybersecurity empowers organizations to transform compliance into strategic advantage—by fortifying defenses, enhancing governance, and fostering trust through resilient operations.
By embracing cybersecurity as a core business function, firms safeguard not only their operations but also the trust of investors and the stability of the markets they serve. In this era of heightened scrutiny, proactive resilience is not just a regulatory necessity but a strategic advantage that will define the leaders of tomorrow.
by jdpoteet | Apr 11, 2025 | News, Blogs
DOWNLOAD PDF
Overview—Could This Ransomware Breach Have Been Prevented?
In mid-2023, the State Bar of Texas experienced a ransomware attack at the hands of the INC group—a relatively new but highly effective cybercrime syndicate. The result? A breach that compromised names, Social Security numbers, financial data, and other sensitive information belonging to attorneys and staff.
This was more than an inconvenience. It was a reminder that the legal profession is squarely in the crosshairs of modern cyber threats. And the lessons learned here carry urgent relevance for law firms and legal institutions everywhere.
DOWNLOAD PDF
A Breach Breakdown: What Went Wrong?
Based on public disclosures and INC’s known tactics, several key points of failure likely contributed to the success of the attack:
- Spear Phishing
INC ransomware operators have a history of using highly targeted phishing emails. These messages trick staff into clicking malicious links or downloading attachments that open the door to your network. Legal professionals, due to their public-facing roles and high-value data, are frequent targets.
- Unpatched Vulnerabilities
Known vulnerabilities in software—like CVE-2023-3519, which INC is believed to have exploited—are one of the lowest-hanging fruits for attackers. When security patches are delayed or missed, you’re essentially leaving the front door unlocked.
- Lack of Real-Time Monitoring
The breach wasn’t detected until the data was already exfiltrated. Without 24/7 monitoring, there was no opportunity to stop the attack midstream or limit its impact.
How Blackswan Cybersecurity Could Have Stopped It
At Blackswan, our services are designed to close these exact gaps—before they become front-page news. Here’s how:
24/7 Security Monitoring
- Our team actively monitors network activity around the clock, identifying suspicious behavior before it becomes a crisis.
- We don’t just wait for alerts—our SOC analysts investigate anomalies in real time and take action immediately.
Vulnerability Management
- Regular scanning and patch verification ensures your systems are hardened against known exploits like the ones INC used.
- We help legal firms prioritize updates based on actual risk—not just available patches.
Phishing Defense & User Training
- Our simulations and awareness programs reduce your firm’s exposure to social engineering.
- We test staff regularly and provide training that sticks, not just check-the-box compliance.
Incident Response Planning
- We prepare your firm for the worst-case scenario, so even if attackers gain a foothold, the damage is contained quickly.
- Rapid response reduces downtime, legal exposure, and reputational fallout.
Why Law Firms Shouldn’t Wait
Legal organizations hold extremely sensitive information—case strategies, client financials, privileged communications. Cybercriminals know this. They know that a single breach can shake client trust, trigger lawsuits, or lead to ethics complaints.
That’s why the legal industry is an increasingly common target. And that’s why passive cybersecurity measures are no longer enough.
Final Thoughts
What happened to the State Bar of Texas could happen to any legal organization without a modern cybersecurity partner in place. But it doesn’t have to.
Blackswan Cybersecurity exists to make sure your firm stays secure, compliant, and resilient—no matter what threat actors are out there. Let’s make sure your firm doesn’t become the next headline.
