Deputy Seminar, Chicago, IL

Cyber Hygiene - CIS Critical Controls www.cisecurity.org

City of Baltimore – Ransomware – $18 million to fix, major disruption Uber – Stolen PII of 57 million users - $148 million to fix

• Cause: Unpatched MS vulnerability

• Cause: Failure to secure credentials

Sample of Major Cyber Incidents

• Cause: Unpatched vulnerabilities

Marriott/Starwood – Stolen card and PII of 383 million users

• Cause: Failure to secure credentials

Target – Stolen Card and PII of 110 million users

• Cause: Weak infrastructure and server configuration

City of Atlanta – Ransomware -- $20 million to fix