Collaborate Disseminate
The company I work at has started to overwrite SSL certificates with their own self issued one so that they can monitor traffic to the internet more closely. They also installed the corresponding CA to the certificate store. … Continue reading What is the best practice when corporate network is overwriting SSL certificates?
TL:DR Seeking highly authoritative references to the security of using VPN to access corporate network services.
I am looking to make a persuasive argument in favour of tightly controlled VPN access to corporate internal se… Continue reading Reference to Authoratative Support for VPN over direct server access
Are there any documents or standards, that recommend the specifics of information backups? Like algorithms you should use, schemes, backup logs, backup policy, mediums. Well, everything.
Continue reading What are normative documents that regard information backup thoroughly?
If a company employs a security company to ‘hack’ into their systems and agrees to allow this security company to send fake phishing emails to employees…
…is that company (or the security company) legally liable if – in … Continue reading Corporate penetration testing/phishing [on hold]
I am implementing a security firewall in my organization. I want to log data of all the computers which are provided by my organization to the employees and send the data periodically to a server. Even if the laptops are not … Continue reading ISMS: how to send logs from network computers to server? [on hold]
I’m currently evaluating the configuration of Chrome for Business in a corporate environment. There is a setting which prevents users from signing into Chrome with their personal accounts. My gut feeling is that this should be disabled but… Continue reading Restricting user sign-in on Chrome for Business
What is the difference between an IT security policy, an information security policy and a cyber security policy?
Continue reading Difference between cyber security and information security?
To be honest, I was not sure if this belongs to this board or Law Stack Exchange.
I am searching for a specific term that describes a policy that a company does not allow itself to share its intellectual property with third … Continue reading A term for a policy that forbids employees storing intellectualy property (e.g. Source Code) on hosted third parties services
To be honest, I was not sure if this belongs to this board or Law Stack Exchange.
I am searching for a specific term that describes a policy that a company does not allow itself to share its intellectual property with third … Continue reading A term for a policy that forbids employees storing intellectualy property (e.g. Source Code) on hosted third parties services
I run a small b2b saas business and am getting traction with enterprise companies. A security company is asking that we provide an information security policy. I figured the simplest course of action was to find an example an… Continue reading Information security policy examples [on hold]