Top three countries on #GDPR data breach notifications:
The Netherlands, 15,400
Germany: 12,600
U.K.: 10,600
#DPI19
https://twitter.com/LauraLinkomies/status/1106206488924774401?s=09
The Netherlands, 15,400
Germany: 12,600
U.K.: 10,600
#DPI19
https://twitter.com/LauraLinkomies/status/1106206488924774401?s=09
Twitter
Laura Linkomies
Top three countries on #GDPR data breach notifications: The Netherlands, 15,400 Germany: 12,600 U.K.: 10,600 #DPI19
Посмотрите, о чем твитнул(а) @PhilippeDeRyck: https://twitter.com/PhilippeDeRyck/status/1105096332778393601?s=09
Twitter
Philippe De Ryck
This document is a goldmine of design guidelines for building secure systems. It offers an application-level design view on how to prevent most common vulnerabilities. Wonderfully complementary to the more technical #OWASP top 10 proactive controls. http…
"...Developed by ISO and the International Electrotechnical Commission (IEC), ISO/IEC TS 27008, Information technology – Security techniques – Guidelines for the assessment of information security controls, provides guidance on assessing the controls in place to ensure they are fit for purpose, effective and efficient, and in line with company objectives..."
https://www.iso.org/news/ref2367.html
https://www.iso.org/news/ref2367.html
ISO
Stronger data protection with updated guidelines on assessing information security controls
Software attacks, theft of intellectual property or sabotage are just some of the many information security risks that organizations face. And the consequences can be huge. Most organizations have controls in place to protect them, but how can we ensure those…
https://www.enisa.europa.eu/news/enisa-news/security-and-privacy-considerations-in-autonomous-agents
www.enisa.europa.eu
Security and privacy considerations in autonomous agents — ENISA
While innovative autonomous agents, making use of Artificial Intelligence (AI), have transformed accessing and leveraging of data, a broad range of applications need to be revisited to mitigate their impact.
В UK в среднем компаниям требуется 21 день для сообщения об утечке, тогда как gdpr требует сообщать за 72 часа. 21 процент организаций вообще не сообщают об утечках.
https://www.scmagazine.com/home/security-news/privacy-compliance/companies-unable-to-meet-stringent-gdpr-data-breach-reporting-requirements/
https://www.scmagazine.com/home/security-news/privacy-compliance/companies-unable-to-meet-stringent-gdpr-data-breach-reporting-requirements/
SC Media
Companies unable to meet stringent GDPR data breach reporting requirements | SC Media
The first anniversary of GDPR going into effect is on the horizon, but one study has found that companies are rarely able to meet the reporting demands set by the legislation.
Посмотрите, о чем твитнул(а) @3dwave: https://twitter.com/3dwave/status/1107511637387423745?s=09
Twitter
Andrey Prozorov
Немного погулил и нашел пару неплохих и, что удивительно, бесплатных подборок (toolkit) шаблонов документов и рекомендаций по СУИБ: 1. #ISMS Document Template Library - https://t.co/AxR4LpwHKh 2. The Best ISO 27001 Documentation Toolkit - https://t.co/uMGKXupexL
Законопроект демократов в США предлагает обосновывать отсутствие экспертизы в области кибербезопасности в правлении компаний торгуемых на бирже.
House Dem introduces bill requiring public firms to disclose cybersecurity expertise in leadership | TheHill
https://thehill.com/policy/cybersecurity/433880-house-dem-introduces-cyber-bill-that-would-require-publicly-traded
House Dem introduces bill requiring public firms to disclose cybersecurity expertise in leadership | TheHill
https://thehill.com/policy/cybersecurity/433880-house-dem-introduces-cyber-bill-that-would-require-publicly-traded
TheHill
House Dem introduces bill requiring public firms to disclose cybersecurity expertise in leadership
A Democrat on the House Intelligence Committee introduced a bill on Wednesday that would require publicly traded companies to disclose to investors whether any members of their board of directors
Свежий номео журнала ISACA
Volume 6 20 March 2019
In This Issue
Vendor Risk Management: An Essential Tool for GDPR
Diving Into NIST Risk Management Framework Revision 2
Find Talented Professionals and Employers at ISACA Online Career FairThe
Top Concern for the State of CybersecurityAccelerate
Your Way to Becoming a CSXP
33 Years of COBIT
http://m.isaca.org/About-ISACA/-ISACA-Newsletter/Pages/@-isaca-volume-6-20-march-2019.aspx?utm_referrer=
Volume 6 20 March 2019
In This Issue
Vendor Risk Management: An Essential Tool for GDPR
Diving Into NIST Risk Management Framework Revision 2
Find Talented Professionals and Employers at ISACA Online Career FairThe
Top Concern for the State of CybersecurityAccelerate
Your Way to Becoming a CSXP
33 Years of COBIT
http://m.isaca.org/About-ISACA/-ISACA-Newsletter/Pages/@-isaca-volume-6-20-march-2019.aspx?utm_referrer=
Прогресс в развитии honeypot. HADES позволят создать сети "хозяйства Семибаба"из 70 000 хостов.
Sandia’s synthetic network offers new insight into how cyber attackers work - Federal News Network
https://federalnewsnetwork.com/ask-the-cio/2019/03/sandias-synthetic-network-offers-new-insight-into-how-cyber-attackers-work/
Sandia’s synthetic network offers new insight into how cyber attackers work - Federal News Network
https://federalnewsnetwork.com/ask-the-cio/2019/03/sandias-synthetic-network-offers-new-insight-into-how-cyber-attackers-work/
Federal News Network
Sandia’s synthetic network offers new insight into how cyber attackers work
Vince Urias, a distinguished member of the technical staff at Sandia National Laboratories, said the HADES programs creates a fake environment where cyber defenders can lure hackers and better understand their techniques.
Посмотрите, о чем твитнул(а) @3dwave: https://twitter.com/3dwave/status/1108064292195188736?s=09
Twitter
Andrey Prozorov
Я наконец-то пересмотрел и обновил свои рекомендации по составу документов, необходимых для #СУИБ по ISO 27001. Прошло всего-то 4 года. Встречайте версию 4.0, теперь она на английском... #ISMS https://t.co/K6A8jIdM8c