Drawing attention to just one good quote in the article: “And it also taught many of them the importance of segmenting their networks as much as possible to contain possible damage from malware infection.”

Sadly, there’s still a long ways to go before all organizations understand the importance of not only network segmentation, but also data segmentation.

About a year ago I was at a state government industry forum (I won’t name the state) where they boasted about their ambitious goal of moving everything to the cloud and centralizing all departments’ data. In one of the breakout sessions during the Q&A period, I stood up and asked, “How are you planning to address the security risks you’re creating by total centralization?” The person on the panel who took my question said that one system they could control completely was more secure than ten or twenty systems that might have varying degrees of security. I refrained from telling them that they just admitted they sucked at project management.

#CallMeIfYouNeedMe #FIFONetworks

#cybersecurity #DataArchitecture #DataClassification

https://www.linkedin.com/pulse/notpetyas-8th-anniversary-global-industries-still-risk-notpetya-like-lqz7c/

My #PowerShell Summit talk with Danny Stutz is live. What's cool about our talk is that it's the first time PowerShell has been used for #datascience - at least as far as my research has shown! We analyze free text data in a zero-shot (untrained) way using #OpenAI embeddings and K-means clustering. If you don't know what that means, don't worry - we didn't either 😂 (we're not data scientists!). But we did a decent job explaining it, and the demo gods were with us that day!

https://youtu.be/XJXtxXtMIbE?si=JuuvTUxkiKkKJWev

If you're a PowerShell enthusiast, we also have many "goodies" in our code, such as wrapper functions to make installing and using #NuGet packages easier or automatically handling retries to hashtag#API calls. Check it out: https://github.com/franklesniak/AutoCategorizerPS.

If you give the talk a watch or check out our code, let us know your thoughts in the comments.

#PSHSummit #dataclassification #datainsights #dotnet

𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐁𝐞𝐬𝐭 𝐏𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬 𝐟𝐨𝐫 𝐆𝐞𝐧𝐀𝐈 𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬 (𝐎𝐩𝐞𝐧𝐀𝐈) 𝐢𝐧 𝐀𝐳𝐮𝐫𝐞

LLM apps pose significant security challenges that need to be addressed by developers and administrators of GenAI applications. These challenges include:

➡ Protecting the confidentiality and integrity of the data used to train and query the LLMs

➡Ensuring the availability and reliability of the LLMs and their services

➡Preventing the misuse or abuse of the LLMs by malicious actors or unintended users

➡Monitoring and auditing the LLMs' outputs and behaviors for quality, accuracy, and compliance

➡Managing the ethical and social implications of the LLMs' outputs and impacts

Learn Best Practices of Security for GenAI Applications in Azure:

✔ 𝐃𝐚𝐭𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲

✔𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲

✔𝐀𝐜𝐜𝐞𝐬𝐬 𝐚𝐧𝐝 𝐈𝐝𝐞𝐧𝐭𝐢𝐭𝐲 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲

✔𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲

✔𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲

https://techcommunity.microsoft.com/t5/azure-architecture-blog/security-best-practices-for-genai-applications-openai-in-azure/ba-p/4027885

#llm #azure #openai #ai #azureopenai #privacy #security #api #data #network #access #identity #application #security #cybersecurity #soc #rbac #mfa #ids #monitoring #firewall #dataclassification #encryption

The Microsoft podcast "Three Steps to Master Information Governance in Your Hybrid Work Environment" discusses steps for successfully managing information in a hybrid work environment.

The three steps are
▶️data classification
▶️policy creation and enforcement
▶️compliance monitoring and reporting.

https://bit.ly/3oHxOaf

#Microsoft #InformationGovernance #DataClassification #PolicyEnforcement

Using the Graph API to Extract Sensitivity Labels

This article is about the use of sensitivity labels in SharePoint Online. Sensitivity Labels provide a way to classify and protect documents. By using Sensitivity Labels in SharePoint Online, organizations can improve the protection of sensitive data on their intranet and meet compliance requirements. https://bit.ly/41UHc8E

#SharePointOnline #Compliance #DataClassification #Office365 #Microsoft #CloudSecurity #Security #Practical365