Collaborate Disseminate
We are moving users and computers/servers from an old domain to a new one within our company. The domains are managed using Active Directory.
What are the security risks, considerations, and controls I need to consider to allow a secure mi… Continue reading What are the security risks when doing domain migration of users and computers?
I work for 2 clients. Each requires me to use their VPN client to connect to their network. If I do this simultaneously, then does this create a security risk? My concern is the host creating a bridge between the networks.
Is this even pos… Continue reading if i connect to 2 different networks using 2 different VPN clients from a single host, can the host act as a bridge between the 2 networks?
I have setup a VM on our internal network and it is assigned an internal IP address. The VM requires connectivity to a couple of internet sites mainly Microsoft and ports are generally 80 and 443. This is to run Power Automate.
All connec… Continue reading Do i place this service in the DMZ or datacentre(internal)?
We have cloud based digital platform at work and we have the ability to connect to our cloud based ERP system. The ERP provider has given 2 options to connect – 1) a connector which uses HTTPS or VPN.
I am trying to make a decision as to w… Continue reading What does VPN provide that HTTPS(TLS) does not?
As per the question what are the risks?
if we did go ahead with this and some of our users installed a supplier’s VPN client on to our corporate machines, once the connection is establish can a threat actor from the supplier use that conne… Continue reading A 3rd party supplier is asking us to install their VPN client onto our corporate machines to enable access to their environment, is this a good idea?
GDPR states data should be processed within the EEA. For the global company I work for, data will be processed outside of the EEA.
What are the cross-border risks I need to be aware of and how do I manage these risks (i.e. controls)?
I have seen many companies now implement virtual desktop to allow users to connect from their home/personal devices to access corporate resources. AWS Workspaces is one example of virtual desktop.
If a user is connecting from their persona… Continue reading What are the virtual desktop risks that i should consider?
I work for a company where we give customer (hundreds/thousands of users) access to 2 sites. One owned by a 3rd party SaaS and one owned by us. Customers spend alot of time registering for both sites and we also spend alot of time removing… Continue reading OAuth2, SAML, OpenID connect – Which one to use for my scenario?
If bitlocker was configured for a user not to input a PIN; and the device got lost/stolen; is there a risk of the data on the hard disk being exposed?
With no PIN enabled; is that essentially as good as having no hard disk encryption at al… Continue reading Is bitlocker without a PIN as good as having no hard disk encryption at all?
Data protection laws including GDPR state:
“Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.”
GDPR stipul… Continue reading How have you secured production data (PII) on non-prod environments?