Collaborate Disseminate
Our manager often asks us for a quick understanding of what the risks will be based on some idea that the department has been working on during the ideation phase (the business requirements are generally written but no impla… Continue reading How to create non-generic security requirements for an idea phase?
I have a study project related to establishing of ISO 27001.
I will do GAP analyses on “fictional” company over all ISO 27001 Annex A controls using ISO 27002.
After I do that, I will detect the risks using the results of that GAP analys… Continue reading Potential risks per ISO 27002 clauses 5-18
It’s human nature to prefer the easy path and be frustrated by challenges that get thrown in our way. In business, challenges usually mean we have to outlay capital to address them or see a dip in our corporate results. But we see time and again … Continue reading Converting Challenge to Opportunity: Security and Privacy as Advantage
For that matter is TVRA only linked to security?
Can it be used to assess, evaluate all or any situation and from there, come up with control measures?
Continue reading TVRA does it cover physical, cyber and information security?
I’m having some trouble calculating CVSS v3.0 scores in some findings I’ve encountered.
In particular, one finding is a simple server information disclosure via default error pages. It is very similar to the following: https… Continue reading CVSS3.0 impact score and exploitability score
From this answer about browser security:
time to update if you really care about security
So if every other software and functions I need can work on a 32-bit OS, I guess the only reason for upgrade is the browser’s security? Can you… Continue reading Why should browser security be prioritized?
Application security debt has some similarities to technical debt but there are few differences that we need to think about when deciding if our security debt load has gotten too high and needs to be paid off. I would like to… Continue reading How to calculate our application security debt?
Our organization in the process of implementing several digital transformation initiatives including online/cloud platforms.
There are arguments in our Information Security team regarding ‘Risk Appetite’ of the organization…. Continue reading Should we change risk appetite when we go on a digital transformation journey?
To determine the most effective cybersecurity investment for your organization, it’s essential to follow a road map that skirts risks and assesses potential threats.
The post How to Maximize Your Cybersecurity Investment appeared first on Security Intelligence.
Continue reading How to Maximize Your Cybersecurity Investment
I plan on buying a couple of cheap cameras for my home. I plan to put them just inside the doors like the laundry door, I won’t be putting them in the bedroom or living room.
My major concern is how secure are they ? Can it … Continue reading Are unbranded home security camera secure?