Carnegie Mellon University Software Engineering Institute

A New CERT Vulnerability Note: SignalRGB kernel driver contains improper access control and IOCTL vulnerabilitieshttps://kb.cert.org/vuls/id/380058

As outlined in this post, the SEI is pioneering research into the application of zero trust principles within weapon system environments with embedded OT -

Implementing Zero Trust in Operational Technology: A Practical Case Study | CMU Software Engineering Institute Zero trust frameworks tailored to the unique requirements of OT systems are just beginning to emerge. The SEI is pioneering research into the application of zero trust principles within weapon system environments with embedded OT.

Join SEI CERT Division director Gregory Touhill Tuesday, June 23, for the LinkedIn Live session "Cybersecurity Oversight: What Boards Should Expect From a Cyber Risk Report."

Boards are getting more cybersecurity information than ever. But volume isn't insight.

Effective cyber-risk oversight depends on reporting that helps directors understand what's actually at risk, how management is responding, where accountability sits, and which decisions truly require board-level attention.

That's the focus of the opening LinkedIn Live session on the 5th Edition of the NACD Director's Handbook on Cyber-Risk Oversight, co-produced by NACD and the Internet Security Alliance.

The conversation zeroes in on one of the Handbook's most practical resources: Tool-Kit L, "Example Cybersecurity Board Reporting"--written by Touhill--and its connection to Principle 1, "Treating Cybersecurity as a Strategic Risk." We'll dig into what effective reporting should include, what directors should expect from security leadership, and how better reporting moves boards from passive updates to active oversight.

Moderated by Dylan Sandlin, Program Manager for Digital and Cybersecurity Content at NACD (National Association of Corporate Directors), the session features:

- Larry Clinton — President of the Internet Security Alliance.

- Brig. Gen. Gregory Touhill, USAF (Ret.) — the first Federal CISO of the United States, Director of the CERT Division at Carnegie Mellon's Software Engineering Institute, and ISA board member.

- Andrea Bonime-Blanc, JD/PhD — Founder and CEO of GEC Risk Advisory, bringing the director's perspective on how boards can ask sharper questions, assess business impact, and strengthen enterprise resilience.

https://www.linkedin.com/events/7467247421270622209/

SEI Releases Fortran Coding Standard -

The SEI CERT Coding Standard for Fortran | CMU Software Engineering Institute This post describes our work on the SEI CERT Fortran Coding Standard, which provides a core of well-documented and enforceable coding guidelines for Fortran.

A New CERT Vulnerability Note: Microsoft-signed UEFI shim bootloaders vulnerable to Secure Boot bypass - https://kb.cert.org/vuls/id/616257

Watch the archived video of yesterday's "Rethinking and Maturing AI Adoption."

https://www.youtube.com/watch?v=ob4plwq7PnE

In this webcast, experts from the SEI and Accenture shared technical insights and lessons learned from maturing AI adoption in complex environments. They demonstrated how a nimble assessment instrument such as the road-tested AI Adoption Maturity Model fills critical gaps faced by organizations adopting AI.

Panelists included Anita Carleton, Ipek Ozkaya, Rajendra Prasad (RP), John Haller, Tony Leraris, Majd Sakr, and Kaveh Safavi.

Rethinking and Maturing AI Adoption AI Adoption Maturity Model: Improving How Organizations Adopt AI So...

Today! Don't miss "Rethinking and Maturing AI Adoption" at 1:30 p.m. ET.

In this webcast, experts from the Software Engineering Institute at Carnegie Mellon University and Accenture will share technical insights and lessons learned from maturing AI adoption in complex environments. They will demonstrate how a nimble assessment instrument such as the road-tested AI Adoption Maturity Model fills critical gaps faced by organizations adopting AI.

The panel of speakers include Anita Carleton, John Haller, Ipek Ozkaya, Tony Leraris, Majd Sakr, Kaveh Safavi, and Rajendra Prasad (RP) - https://www.eventbrite.com/e/rethinking-and-maturing-ai-adoption-tickets-1990513608787

The newly released Artificial Intelligence (AI) Adoption Maturity Model is an empirically validated framework designed to help organizations move beyond AI experimentation and scale artificial intelligence with measurable, repeatable outcomes. The model, by the Software Engineering Institute in partnership with Accenture, provides a field-tested, structured approach for government and commercial enterprises to assess their current AI capabilities, identify gaps and build a clear roadmap for responsible, value-driven AI adoption -

SEI and Accenture Release AI Adoption Maturity Model to Help Organizations Scale AI with Predictable Outcomes | CMU Software Engineering Institute Fortune 500 companies are already using the model to establish a baseline for adopting artificial intelligence technology and plan for future AI investments.