ETSI IoT week highlights how ICT standards can help sustainability

Sophia Antipolis, 17 October 2022

Last week ETSI hosted the 2022 ETSI IoT Week event, focused on “Pursuing the Digital and Green Transformation”. 52 speakers from industry, research, universities, cities and other SDOs demonstrated, with concrete examples, how ICT standards can help reach the UN Sustainable Development Goals (SDGs) and the European Green Deal to an audience from 22 countries around the world.

Read More...

Should critical infrastructure orgs boost OT/ICS systems’ security with zero trust? Absolutely, the CSA says. Meanwhile, the Five Eyes countries offer cyber advice to tech startups. Plus, a survey finds “shadow AI” weakening data governance. And get the latest on MFA methods, CISO trends and Uncle Sam’s AI strategy.

Dive into six things that are top of mind for the week ending Nov. 1.

1 - Securing OT/ICS in critical infrastructure with zero trust

As their operational technology (OT) computing environments become more digitized, converged with IT systems and cloud-based, critical infrastructure organizations should beef up their cybersecurity by adopting zero trust principles.

That’s the key message of the Cloud Security Alliance’s “Zero Trust Guidance for Critical Infrastructure,” which focuses on applying zero trust methods to OT and industrial control system (ICS) systems.

While OT/ICS environments were historically air gapped, that’s rarely the case anymore. “Modern systems are often interconnected via embedded wireless access, cloud and other internet-connected services, and software-as-a-service (SaaS) applications,” reads the 64-page white paper, which was published this week.

The CSA hopes the document will help cybersecurity teams and OT/ICS operators enhance the way they communicate and collaborate.

Among the topics covered are:

• Critical infrastructure’s unique threat vectors
• The convergence of IT/OT with digital transformation
• Architecture and technology differences between OT and IT

The guide also outlines this five-step process for implementing zero trust in OT/ICS environments:

• Define the surface to be protected
• Map operational flows
• Build a zero trust architecture
• Draft a zero trust policy
• Monitor and maintain the environment

A zero trust strategy boosts the security of critical OT/ICS systems by helping teams “keep pace with rapid technological advancements and the evolving threat landscape,” Jennifer Minella, the paper’s lead author, said in a statement.

To get more details, read:

• The report’s announcement “New Paper from Cloud Security Alliance Examines Considerations and Application of Zero Trust Principles for Critical Infrastructure”
• The full report “Zero Trust Guidance for Critical Infrastructure”
• A complementary slide presentation

For more information about OT systems cybersecurity, check out these Tenable resources: 

• “What is operational technology (OT)?” (guide)
• “Discover, Measure, and Minimize the Risk Posed by Your Interconnected IT/OT/IoT Environments” (on-demand webinar)
• “How To Secure All of Your Assets - IT, OT and IoT - With an Exposure Management Platform” (blog)
• “Blackbox to blueprint: The security leader’s guidebook to managing OT and IT risk” (white paper)
• “Tenable Cloud Risk Report 2024” (white paper)

2 - Five Eyes publish cyber guidance for tech startups

Startup tech companies can be attractive targets for hackers, especially if they have weak cybersecurity and valuable intellectual property (IP).

To help startups prevent cyberattacks, the Five Eyes countries this week published cybersecurity guides tailored for these companies and their investors.

“This guidance is designed to help tech startups protect their innovation, reputation, and growth, while also helping tech investors fortify their portfolio companies against security risks," Mike Casey, U.S. National Counterintelligence and Security Center Director, said in a statement.

These are the top five cybersecurity recommendations from Australia, Canada, New Zealand, the U.S. and the U.K. for tech startups:

• Be aware of threat vectors, including malicious insiders, insecure IT and supply chain risk.
• Identify your most critical assets and conduct a risk assessment to pinpoint vulnerabilities.
• Build security into your products by managing intellectual assets and IP; monitoring who has access to sensitive information; and ensuring this information’s protection.
• Conduct due diligence when choosing partners and make sure they’re equipped to protect the data you share with them.
• Before you expand abroad, prepare and become informed about these new markets by, for example, understanding local laws in areas such as IP protection and data protection.

“Sophisticated nation-state adversaries, like China, are working hard to steal the intellectual property held by some of our countries’ most innovative and exciting startups,” Ken McCallum, Director General of the U.K.’s MI5, said in a statement.

To get more details, check out these Five Eyes’ cybersecurity resources for tech startups:

• The announcement “Five Eyes Launch Shared Security Advice Campaign for Tech Startups”
• The main guides: 
  • “Secure Innovation: Security Advice for Emerging Technology Companies”
  • “Secure Innovation: Security Advice for Emerging Technology Investors”
• These complementary documents:
  • “Secure Innovation: Scenarios and Mitigations”
  • “Secure Innovation: Travel Security Guidance”
  • “Secure Innovation: Due Diligence Guidance”
  • “Secure Innovation: Companies Summary”

3 - Survey: Unapproved AI use impacting data governance

Employees’ use of unauthorized AI tools is creating compliance issues in a majority of organizations. Specifically, it makes it harder to control data governance and compliance, according to almost 60% of organizations surveyed by market researcher Vanson Bourne.

“Amid all the investment and adoption enthusiasm, many organisations are struggling for control and visibility over its use,” reads the firm’s “AI Barometer: October 2024” publication. Vanson Bourne polls 100 IT and business executives each month about their AI investment plans.

To what extent do you think the unsanctioned use of AI tools is impacting your organisation's ability to maintain control over data governance and compliance?

^{(Source: Vanson Bourne’s “AI Barometer: October 2024”)}

Close to half of organizations surveyed (44%) believe that at least 10% of their employees are using unapproved AI tools.

On a related front, organizations are also grappling with the issue of software vendors that unilaterally and silently add AI features to their products, especially to their SaaS applications.

While surveyed organizations say they’re reaping advantages from their AI usage, “such benefits are dependent on IT teams having the tools to address the control and visibility challenges they face,” the publication reads.

For more information about the use of unapproved AI tools, an issue also known as “shadow AI,” check out:

• “Do You Think You Have No AI Exposures? Think Again” (Tenable)
• “Shadow AI poses new generation of threats to enterprise IT” (TechTarget)
• “10 ways to prevent shadow AI disaster” (CIO)
• “Never Trust User Inputs -- And AI Isn't an Exception: A Security-First Approach” (Tenable)
• “Shadow AI in the ‘dark corners’ of work is becoming a big problem for companies” (CNBC)

VIDEO

Shadow AI Risks in Your Company

4 - NCSC explains nuances of multi-factor authentication

Multi-factor authentication (MFA) comes in a variety of flavors, and understanding the differences is critical for choosing the right option for each use case in your organization.

To help cybersecurity teams better understand the different MFA types and their pluses and minuses, the U.K. National Cyber Security Centre (NCSC) has updated its MFA guidance.

“The new guidance explains the benefits that come with strong authentication, while also minimising the friction that some users associate with MFA,” reads an NCSC blog.

In other words, what type of MFA method to use depends on people’s roles, how they work, the devices they use, the applications or services they’re accessing and so on.

Topics covered include:

• Recommended types of MFA, such as FIDO2 credentials, app-based and hardware-based code generators and message-based methods
• The importance of using strong MFA to secure users’ access to sensitive data
• The role of trusted devices in boosting and simplifying MFA
• Bad practices that weaken MFA’s effectiveness, such as:
  • Retaining weaker, password-only authentication protocols for legacy services
  • Excluding certain accounts from MFA requirements because their users, usually high-ranking officials, find MFA inconvenient

To get more details, read:

• The NCSC blog “Not all types of MFA are created equal”
• The NCSC guide “Multi-factor authentication for your corporate online services”

For more information about MFA:

• “Multifactor Authentication Cheat Sheet” (OWASP)
• “Deploying Multi Factor Authentication – The What, How, and Why” (SANS Institute)
• “How MFA gets hacked — and strategies to prevent it” (CSO)
• “How Multifactor Authentication Supports Growth for Businesses Focused on Zero Trust” (BizTech)
• “What is multi-factor authentication?” (TechTarget)

5 - U.S. gov’t outlines AI strategy, ties it to national security 

The White House has laid out its expectations for how the federal government ought to promote the development of AI in order to safeguard U.S. national security.

In the country’s first-ever National Security Memorandum (NSM) on AI, the Biden administration said the federal government must accomplish the following:

• Ensure the U.S. is the leader in the development of safe, secure and trustworthy AI
• Leverage advanced AI technologies to boost national security
• Advance global AI consensus and governance

“The NSM’s fundamental premise is that advances at the frontier of AI will have significant implications for national security and foreign policy in the near future,” reads a White House statement.

The NSM’s directives to federal agencies include:

• Help improve the security of chips and support the development of powerful supercomputers to be used by AI systems.
• Help AI developers protect their work against foreign spies by providing them with cybersecurity and counterintelligence information.
• Collaborate with international partners to create a governance framework for using AI in a way that is ethical, responsible and respects human rights. 

The White House also published a complementary document titled “Framework To Advance AI Governance and Risk Management in National Security,” which adds implementation details and guidance for the NSM.

6 - State CISOs on the frontlines of AI security

As the cybersecurity risks and benefits of AI multiply, most U.S. state CISOs find themselves at the center of their governments' efforts to craft AI security strategies and policies.

That’s according to the “2024 Deloitte-NASCIO Cybersecurity Study,” which surveyed CISOs from all 50 states and the District of Columbia.

Specifically, 88% of state CISOs reported being involved in the development of a generative AI strategy, while 96% are involved with creating a generative AI security policy.

However, their involvement in AI cybersecurity matters isn’t necessarily making them optimistic about their states’ ability to fend off AI-boosted attacks.

None said they feel “extremely confident” that their state can prevent AI-boosted attacks, while only 10% reported feeling “very confident.” The majority (43%) said they feel “somewhat confident” while the rest said they are either “not very confident” or “not confident at all.”

Naturally, most state CISOs see AI-enabled cyberthreats as significant, with 71% categorizing them as either “very high threat” (18%) or “somewhat high threat” (53%).

At the same time, state CISOs see the potential for AI to help their cybersecurity efforts, as 41% are already using generative AI for cybersecurity, and another 43% have plans to do so by mid-2025.

Other findings from the "2024 Deloitte-NASCIO Cybersecurity Study" include:

• 4 in 10 state CISOs feel their budget is insufficient.
• Almost half of respondents rank cybersecurity staffing as one of the top challenges.
• In the past two years, 23 states have hired new CISOs, as the median tenure of a state CISO has dropped to 23 months, down from 30 months in 2022.
• More state CISOs are taking on privacy protection duties — 86% are responsible for privacy protection, up from 60% two years ago.

For more information about CISO trends:

• “What’s important to CISOs in 2024” (PwC)
• “The CISO’s Tightrope: Balancing Security, Business, and Legal Risks in 2024” (The National CIO Review)
• “State of CISO Leadership: 2024” (SC World)
• “4 Trends That Will Define the CISO's Role in 2024” (SANS Institute)

"Kyle is faced with the most emotional exorcism he's performed yet … as he begins to learn more about his abilities and what's really happening around him. The pieces are starting to fall into place as secrets are revealed that will change everything." -- Description provided by publisher.

One of cherished author Debbie Macomber's classic novels, this is an enchanting tale of a love that is challenged at every turn. At a magical Christmas fete, Karen McAlister meets a man she cannot ignore-the first man to interest her in a long while. Before she laid eyes on Rand Prescott, Karen would have said her life was complete and content . . . much to the dismay of her widowed father, who would love to see her married and settled. But everything changed that enchanted night: The stars, the moonlight, the music, and the champagne all conspired to throw two people together. But the fates are determined to pull them apart. Long ago, Rand Prescott erected a steel façade around his heart. He never had any intention of maintaining any kind of relationship with a woman. Independent, proud, and nearly blind, Rand felt he had no capacity to return a woman's love. But that was before he met Karen. In one night, she shattered all of his preconceived ideas about romance and threatened to break through his walls. Rand is convinced that Karen deserves better than the love of a blind man. Can he ever accept this beguiling woman into his life-and into his soul?

"In Taisho-era Japan, Tanjiro Kamado is a kindhearted boy who makes a living selling charcoal. But his peaceful life is shattered when a demon slaughters his entire family. His little sister Nezuko is the only survivor, but she has been transformed into a demon herself! Tanjiro sets out on a dangerous journey to find a way to return his sister to normal and destroy the demon who ruined his life … Tanjiro finally chases down the main body of the upper-rank demon Hantengu. However, dawn is approaching, and the rising sun is a threat to Nezuko. Tanjiro's concern for his sister is a distraction from the focus he needs to fight Hantengu, and if he hesitates it could be the last mistake he ever makes! Elsewhere, Tamayo ponders the nature of Nezuko's curse and how she could be so different from other demons." -- Provided by publisher

Event Begins: Wednesday, November 13, 2024 1:00pm
Location:
Organized By: University Career Center

Interested in gaining a first hand account of a career in aerospace engineering? Join Handshake and Pratt & Whitney Production Test Engineer, Anthony Bartolotta, for answers to questions on topics like:
An average day in the life of an aerospace engineer 
Important hard and soft skills for aspiring engineers to know
Tips for launching a career in engineering
Sign up for free today! 

Senegalese akara, South African bunny chow, Nigerian jollof rice — these are just a few of the flavorful dishes African immigrant chefs regularly share with their Bay Area neighbors. Each dish tells a story of ancestry, migration, and memory, and the tastes and aromas keep chefs and diners connected to home, even when they’re far … Continue reading New Series ‘Dishes of the Diaspora’ Spotlights African Food and Culture in the Bay Area →

The post In-flight catering under threat as workers threaten strike appeared first on Personnel Today.

When contract negotiations between Alaska Airlines and their flight attendants' union broke down in 1993, the union had a choice to make.

The union — The Association of Flight Attendants-CWA — knew that if they chose to strike, Alaska Airlines could use a plan. While Alaska Airlines technically couldn't fire someone on strike, they could permanently replace the striking flight attendants with new workers. Essentially, if the union went on strike, they could risk thousands of people's jobs. The flight attendants knew they needed a counter-strategy.

They went with a strategy they called CHAOS: "Create Havoc Around Our System."

The strategy had two phases. Phase one: The union kept Alaska guessing about when, where, and how a strike might happen. They kept everyone, even their own members, in the dark. And in turn, Alaska Airlines had to be prepared for a strike at any place and any time. Phase two was to go on strike in a targeted and strategic way.

The havoc that the flight attendants created set off a sort-of labor-dispute arms race and would go on to inspire strikes today. And, it showed how powerful it can be to introduce a little chaos into negotiations.

Help support Planet Money and get bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

For thousands of years, getting light was a huge hassle. You had to make candles from scratch. This is not as romantic as it sounds. You had to get a cow, raise the cow, feed the cow, kill the cow, get the fat out of the cow, cook the fat, dip wicks into the fat. All that--for not very much light. Now, if we want to light a whole room, we just flip a switch.

The history of light explains why the world today is the way it is. It explains why we aren't all subsistence farmers, and why we can afford to have artists and massage therapists and plumbers. (And, yes, people who make podcasts about the history of light.) The history of light is the history of economic growth--of things getting faster, cheaper, and more efficient.

On today's show: How we got from dim little candles made out of cow fat, to as much light as we want at the flick of a switch.

Today's show was hosted by Jacob Goldstein and David Kestenbaum. It was originally produced by Caitlin Kenney and Damiano Marchetti. Today's rerun was produced by James Sneed, and edited by Jenny Lawton. It was fact-checked by Sierra Juarez. Engineering by Valentina Rodríguez Sánchez. Alex Goldmark is Planet Money's executive producer.

Help support Planet Money and hear our bonus episodes by subscribing to Planet Money+ in Apple Podcasts or at plus.npr.org/planetmoney.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

World Cafe's new concert series highlights music from Louisiana's Cajun Country.

Learn more about sponsor message choices: podcastchoices.com/adchoices

NPR Privacy Policy

Newsroom is highlighting Bruins who are creating the future at UCLA by advancing the strategic plan’s goals and priorities.

The outreach program connects Los Angeles-area students to scientists’ work in medicine and disease treatment.

TORONTO, ON — With the upcoming October 27 municipal elections taking place, political change is coming to many of Ontario’s big cities. A new paper by the University of Toronto’s Institute on Municipal Finance and Governance (IMFG) at the Munk School of Global Affairs profiles election campaigns in six of Ontario’s biggest cities — Hamilton, […]

Toronto, ON — Studies have shown that immigrants to the U.S., Canada, and Australia tend to be healthier and live longer than non-immigrants in their host countries, once adjustments have been made for income and education. There has been a great deal of speculation as to why this “healthy migrant effect” exists. One hypothesis proposes […]

Artificially intelligent traffic lights, human-electric hybrid pod vehicles and more  This first episode of U of T Cities features researchers and entrepreneurs working to build the future of traffic. Learn about artificially intelligent traffic lights, bike-car hybrid vehicles, a first-of-its-kind undergraduate course all about the Toronto election and more. http://bit.ly/1CVWAkn For more stories on U of […]

New report highlights how Mexico remains unsafe, particularly for people affected by HIVToronto, ON – Canada should remove Mexico from its refugee ‘safe’ list because of the country’s serious human rights abuses, the University of Toronto’s International Human Rights Program (IHRP) said in a new report released today. Failure to do so could place Canada in […]

In this episode, stories of the voices that inspire us, comfort us, and help us navigate the world--sometimes in defiance of science or logic. This episode is hosted by Moth Artistic Director, Catherine Burns. The Moth Radio Hour is produced by The Moth and Jay Allison of Atlantic Public Media.

Hosted by: Catherine Burns

Storytellers:

André De Shields is inspired by his sister and muse, Iris. 

Bud Trillin and a Chinatown chicken play tic-tac-toe. 

In the wake of an unfathomable loss, Francine Lobis Wheeler must navigate grieving in the public eye. 

“Maybe soon I’ll add ‘measured response to frustration’ to the list of things I can pass on to my children. It’s not as fun as singing ditties about teachers or toilets, but it’s arguably a more essential skill that will serve them well in their own lives.”

Color is a critical part of any product. It’s the first thing your customer sees. Whether you are manufacturing components for assembly or finished assembled goods, the color has to be right every time or you risk scrapping, reworking, or discounting the product. This impacts your bottom line.

In aerospace, lightweighting is crucial for fuel efficiency, range, and emissions. Material analysis and technology advancements offer weight reduction without sacrificing performance or safety.

Even with accessible technology developed to support their growth, the sad truth is that only a few manufacturers have fully explored the power of automation. The majority are still figuring out the best way to get started.

SHARING OUR LIGHT LIMITED EDITION CANVAS by James Christensen is a(n) Limited Edition. The Edition is Limited to Limited to 450 pcs

Spirit Flight by Kitty Cantrell is a(n) Limited Edition. The Edition is Limited to Limited Edition of 750 pcs

Spirit Flight AP by Kitty Cantrell is a(n) Limited Edition. The Edition is Limited to Artist Proof of 75 pcs

Riviera Twilight Paper by Kerry Hallam is a(n) Limited Edition. The Edition is Limited to pcs

Riviera Twilight Canvas by Kerry Hallam is a(n) Limited Edition. The Edition is Limited to pcs

Twilight Rendezvous by Kerry Hallam is a(n) Limited Edition. The Edition is Limited to pcs

Twilight Rendezvous Enhanced by Kerry Hallam is a(n) Limited Edition. The Edition is Limited to pcs

Into the Light by Lee Bogle is a(n) Limited Edition. The Edition is Limited to Limited Edition of 250 pcs

Cinderellas Moonlight Arrival by Harrison Ellenshaw is a(n) Limited Edition. The Edition is Limited to 195 pcs

Moonlight Proposal by James Coleman is a(n) Limited Edition. The Edition is Limited to Limited Edition #84 of 95 pcs

Twilight Beauty Giclee on Canvas by James Coleman is a(n) Limited Edition. The Edition is Limited to Edition of 95 pcs

Under the Moonlight by James Coleman is a(n) Limited Edition. The Edition is Limited to Limited Edition of 195 pcs

The light of the world Open Edition by C. Michael Dudash is a(n) Open Edition. The Edition is Limited to n/a pcs

Enlightened Giclee On Canvas by Arian is a(n) Limited Edition. The Edition is Limited to Limited Edition of 45 pcs

Open to the Light Giclee On Canvas by Arian is a(n) Limited Edition. The Edition is Limited to Limited Edition of 45 pcs

Delightful Dahlias by Brian Davis is a(n) Limited Edition. The Edition is Limited to Limited Edition of 295 pcs

Enlightenment by Brian Davis is a(n) Limited Edition. The Edition is Limited to Limited Edition of 295 pcs

Sunlight Dance by Brian Davis is a(n) Limited Edition. The Edition is Limited to Limited Edition of 295 pcs

The electric field around a narrow conical point can be very high, and such a behavior is the reason for the effectiveness of lightning rods. We use Maple's LegendreP function to visualize the electric potential near a lightning rod.

Some defense technologists believe that the U.S. Air Force’s manned Next Generation Air Dominance (NGAD) sixth generation fighter, in order to survive a service-ordered review, will have to be smaller […]

Flight testing of an autonomous KC-135 Stratotanker may begin next year. Boston’s Merlin Labs, Inc. and the U.S. Air Force’s 6th Air Refueling Wing at MacDill AFB, Fla., have been testing […]

Ellis & Watts Global Industries just launched a new website designed to highlight its global capabilities in five key practice areas and six sectors. 

Efficiency and sustainability have become the center of attention for almost every industry today, including the water heating space.

A&B Properties Inc. (ABP), a wholly owned subsidiary of Alexander & Baldwin Inc., has partnered with Carbon Lighthouse, an energy services company, to implement a two-month pilot to identify energy efficiency initiatives for its commercial assets in Hawaii.

Whether indoor air is clean or laden with pathogens isn’t usually something you can see with the naked eye. Except at Greenheck’s AHR Expo booth, where visitors were treated to the full VR experience.

Record heat waves are driving up energy costs, but what can the HVAC industry do to mitigate some of those expenses?