Collaborate Disseminate
The business in question has high requirements for information security due to the sensitive nature of their work. The company has 5 people on staff and work with consultants from time to time. Is there another information security standar… Continue reading What standard alternative to ISO 27001 can be used for a small business?
Suppose I were to purchase a new domain of .financial, hence my email would be chris@company.financial.
Question
What assurances are there that the root name server, the registrar infrastructure will be in place for X year… Continue reading Can a "TLD" go out of business? What long term protections does ICANN have for new TLDs? [migrated]
Suppose I were to purchase a new domain of .financial, hence my email would be chris@company.financial.
Question
What assurances are there that the root name server, the registrar infrastructure will be in place for X year… Continue reading Can a "TLD" go out of business? What long term protections does ICANN have for new TLDs? [migrated]
We’re a small company and we do not have resources that we can dedicate to heavyweight threat modeling. However, if we could find a threat modeling framework that was pretty lightweight I think there is value in documenting the data flows … Continue reading Help me find a lightweight threat modeling framework
The question of how to balance pragmatism with an absolutist view of security has been discussed here already. But I need the answer to a concrete variant of that question.
You’re the security expert hired to help an application team with… Continue reading How would you reason with and work with the security paranoiac on your team?
IT Security Pros are very smart people who need to give your environment with the respect and care that the business requires.
Part 1
What are the traits you look for in an employee before approving them for sensitive acc… Continue reading What personal traits and characteristics do you look for in a IT Security pro? [on hold]