Andy Jabbour, Author at FB-ISAO

FB-ISAO Attends the Faith-Based Safety and Security Symposium at the White House

September 26, 2019
Andy Jabbour
faith, security

“The need to preserve the right to peacefully congregate and practice a religion of choice is integral in the Constitution, and an attack against such facilities is a direct threat to American democracy” DHS CISA Assistant Director Brian Harrell On…

The Value of Training – Priceless

September 17, 2019
Andy Jabbour
faith, preparedness, resiliency

During the aftermath of any suspicious activity, emergency, hostile event, or disaster is a prime opportunity to examine organizational incident response procedures for any potential weakness. When weaknesses are identified, the solution may require a change in procedure, but many times will simply require more intentional training regarding established procedures

Associated Risks: A Perhaps Not-So-Obvious Threat

September 3, 2019
Andy Jabbour
security

Associated risks are potential unwanted outcomes resulting from an incident, event, or occurrence in nearby proximity, that may not be connected to the specific organization or location. In many instances, the associated risk stems from the impact of threats against people, places or event that are actually the intended target

Hostile Events Attack Cycle – Intense Surveillance

August 16, 2019
Andy Jabbour
HEAC, security

Once a target is selected, the attacker will resolve outstanding questions about the target environment, expand collection efforts through surveillance, and seek to adequately address remaining unknowns in order to ensure their attack is as successful as possible.

Hostile Events Attack Cycle – Target Selection

August 12, 2019
Andy Jabbour
faith, HEAC, security

In this and future posts, we will explore the HEAC in greater detail, focusing on steps in the cycle, how the attacker conducts each step, and how organizations can prepare to defend against potential attacks. In this post we cover how attackers use initial planning to select targets.

Say No to Ransomware – Have a Plan!

July 22, 2019
Andy Jabbour
cybersecurity

Over the past several weeks, ransomware has been a widespread topic. However, on 02 July there was a bit of good news for a change. St John Ambulance, a “not-for-profit provider of specialist patient transport services across England” advised customers they were “subjected to a ransomware attack.” Fortunately, having a plan in place allowed St John Ambulance to resolve the issue within 30 minutes without paying any ransom demands.

Houses of Worship, Faith-Based Organizations, Charities, and Other Non-Profits: Yes, This CAN Happen to You.

July 12, 2019
Andy Jabbour
cybersecurity

by Jennifer Lyn Walker and Omar Tisza This post was originally informed by a TLP: GREEN FB-ISAO Monthly Threat Overview, distributed on 27 June 2019. It’s easy to adopt the “this won’t happen to me” mentality when it comes to fighting cyber…

Not Banking on Ransomware – Non-Profit Charities Facing Multiple Challenges After Being Impacted

A series of recent ransomware incidents are not only highlighting just how vulnerable faith-based organizations and charities are to this type of cyberattack, these incidents also demonstrate threat actors interest in targeting organizations that are often less prepared for a cyber incident and perception they may be more willing to pay the ransom

June’s FB-ISAO Monthly Threat Overview: Vandalism & Theft

by Andy Jabbour, Managing Director, FB-ISAO This post was originally informed by a TLP GREEN FB-ISAO Monthly Threat Overview, distributed on 27 June 2019. Every month, FB-ISAO provides a TLP GREEN report, the FB-ISAO Monthly Threat Overview. The report is developed over a specific reporting period…

FB-ISAO Newsletter, v1, issue 1

June 10, 2019
Andy Jabbour
General

The first TLP WHITE | FB-ISAO Newsletter was distributed on 06 Jun, and may be accessed below. FB-newsletter-June-2019Download To access links, download the FB-ISAO Newsletter from the link above.