Collaborate Disseminate
I run a small b2b saas business and am getting traction with enterprise companies. A security company is asking that we provide an information security policy. I figured the simplest course of action was to find an example an… Continue reading Information security policy examples [on hold]
I work for a company that deals with medical data, so we must comply with HIPAA as well as our desire for plain old corporate security. However, our ops team is quite zealous about the extent to which things are locked down…. Continue reading Is there a term for over-zealous security policies?
Visual Studio has had a long documented history of issues with antivirus. When building, it tends to read and write many files, of which our antivirus in general wants to scan all of them. This slows down the build process ma… Continue reading Excluding VS folder from real-time antivirus
I’m new to ISO 27001 and my goal is to come up with an ISMS policy for an mid-size organisation. As I did not purchase the standards, I went to read up advisera’s articles and went through their free foundation video course.
Now, I’m this… Continue reading ISO 27001 structure and granularity of the content
There are many questions on this site from users finding out that their employer has a certificate proxy in place, essentially implementing a man-in-the-middle attack so that all traffic is able to be decrypted.
I’ve been to… Continue reading Why do companies often implement an SSL proxy server?
I’m concerned primarily about the US, but also UK and Germany.
Is there any way to give a privacy policy greater trust, and more effectiveness, by somehow binding it to a company’s bylaws with the state?
I’d like to configure my company’s Google e-mail on my iPhone, however when enabling e-mail profile in Inbox, Gmail, Mail or any other app, the following Device Policy Alert is shown:
To use Google apps on this device as …, your orga… Continue reading Can Google Policy Profile remotely erase all data on the device?
This question already has an answer here:
Is it common practice for companies to MITM HTTPS traffic?
3 answers
Any suggestions on how to automatically expire company resources on the cloud that are shared with people from external domains? For example, over the years we’ve shared quite a few files on Google Drive with people outside t… Continue reading Automatically expiring external "shares" to company resources on the cloud [on hold]
So I work for a company where I make and receive phone calls and connect to remote servers and workstations. I work from home, use a company laptop and connect to the company’s network via software VPN . The hardware setup i… Continue reading Work from home, remote monitoring software, vpn, privacy