Whether or not you agree with this conversation or you believe that this isn’t being talked about (which it is), this could have been a better guideline submitted by CISA, which was ultimately my main point on my initial message.

Yes the focus of the guide is to improve mobile comms (hence the title) but this guideline expands past this focus.

As you said, using signal makes any VPN redundant. Encrypted messaging makes half of the recommendations on the guide pointless if the focus was ONLY for the communication aspect.

Using Signal is an obvious choice though.

Absolutely not.

YIKES

This hits too close to home for me.

I just had one of our senior devs who has been with the company for 15 years argue with me that he doesn’t see the urgency in hardening our application server despite everyone having FULL admin access…including our customers. 😑

I’m wondering the same thing.

Both equally important in the process 😎

I honestly didn’t know this was a thing that was happening. This is actually comical 😂