ISACARuSec
@IsacaRuSec
2.27K subscribers
1.83K photos
13 videos
313 files
5.72K links
Канал направления ИБ Московского отделения ISACA

Направление канала новости ISACA, новости в области управления ИБ в России и мире, обмен лучшими практиками.



Связь с администрацией
@popepiusXIII
Download Telegram
About
Blog
Apps
Platform
Join
ISACARuSec
2.27K subscribers
ISACARuSec
https://www.forbes.com/sites/kimberlywhitler/2017/09/16/7-cybersecurity-questions-every-leader-should-ask/amp/
Forbes
7 Cybersecurity Questions Every Leader Should Ask After The Equifax Breach
Theresa Payton, former CIO for the White House and current CEO of Fortalice Solutions, a cybersecurity and intelligence consulting firm, identifies the seven cybersecurity questions every business leader should ask.
385 viewsedited  
ISACARuSec
https://www.scmagazine.com/home/security-news/government-and-defense/tktktktktk-u-s-house-passes-bill-that-w/
SC Media
House passes bill that would codify DHS incident response teams
The U.S. House of Representatives yesterday passed H.R.1158, its version of the DHS Cyber Incident Response Teams Act of 2019.
357 views
ISACARuSec
Forwarded from RUSCADASEC news: Кибербезопасность АСУ ТП (Anton Shipulin)
Github репозиторий, cобирающий материалы по теме безопасности и кибербезопасности роботов с пошаговыми руководствами: Robot reconnaissance, Robot footprinting, Robot enumeration, Robot Threat Modeling & Robot Vulnerability Identification, Robot exploitation, Robot forensics, Robot reversing and Other

https://github.com/vmayoral/basic_robot_cybersecurity
GitHub
GitHub - vmayoral/robot_hacking_manual: Robot Hacking Manual (RHM). From robotics to cybersecurity. Papers, notes and writeups…
Robot Hacking Manual (RHM). From robotics to cybersecurity. Papers, notes and writeups from a journey into robot cybersecurity. - vmayoral/robot_hacking_manual
11 views
ISACARuSec
https://citizenlab.ca/2019/06/the-predator-in-your-pocket-a-multidisciplinary-assessment-of-the-stalkerware-application-industry/
The Citizen Lab
The Predator in Your Pocket: A Multidisciplinary Assessment of the Stalkerware Application Industry - The Citizen Lab
The report includes technical elements associated with stalkerware applications, marketing activities, and compliance with Canadian privacy legislation.
415 views
ISACARuSec
Обзор докладов WEIS, ссылка на которые публиковалась выше
https://lukatsky.blogspot.com/2019/06/iso-27001-bug-bounty.html?m=1
Blogspot
Почему сертификат ISO 27001 приводит к снижению инвестиционной привлекательности, а программа bug bounty лучше пентестов...
Блог Алексея Лукацкого "Бизнес без опасности"
367 viewsedited  
ISACARuSec
Forwarded from Пост Лукацкого
Выложены презентации с ITSF 2019 https://t.co/UCKRt2c48l @itsfkzn
— Alexey Lukatsky (@alukatsky) June 14, 2019
itsecurityforum.ru
ITSF 2019
XIII Цифровой Форум - ITSF. Большие данные. Кибербезопасность. Законодательство.
6 views
ISACARuSec
https://twitter.com/ronrossecure/status/1139581770251362306?s=09
Twitter
Ron Ross
The Government of Japan will be adopting NIST 800-171 cybersecurity requirements for its defense industry and associated defense contractors. The requirements are having a global impact and raising the bar for protecting sensitive information. https://t.co/zBbjOSdIWA…
379 viewsedited  
ISACARuSec
https://www.helpnetsecurity.com/2019/06/13/ciso-board-reporting/
Help Net Security
CISO do's and don'ts for board reporting - Help Net Security
Security is no longer just a job for IT – it impacts all areas of a business, from brand perception to the bottom line. As a result, CISOs are
418 views
ISACARuSec
https://www.securitylab.ru/contest/499473.php
SecurityLab.ru
Заканчивается конкурс статей на SecurityLab.ru
Всех участников конкурса ждут ценные призы и подарки и победителю конкурса будет вручен главный приз от компании Palo Alto Networks.
368 views
ISACARuSec
Forwarded from RUSCADASEC news: Кибербезопасность АСУ ТП (Anton Shipulin)
The International Society of Automation (ISA) выпустило книгу «Security PHA Review for Consequence-Based Cybersecurity» от Edward M. Marszal and Jim McGlone из компании Kenexis. Авторы рассказывают, как использовать результаты анализа опасностей process hazard analysis (PHA) для определения уязвимых к кибератакам сценариев и устранения проблем. Доступна электронная версия книги

https://www.isa.org/store/security-pha-review-for-consequence-based-cybersecurity/65832391
7 views
ISACARuSec
https://twitter.com/Batrankov/status/1140289808339742721?s=09
Twitter
Denis Batrankov
Шпаргалка для тех, кто занимается расследованием инцидентов 17 минут чтения и ты #Expert #DFIR https://t.co/YD7Ti7EE3C
508 viewsedited  
ISACARuSec
Continuous Monitoring for IT Infrastructure | NCCoE
https://www.nccoe.nist.gov/projects/building-blocks/continuous-monitoring
386 views
ISACARuSec
http://80na20.blogspot.com/2019/06/2.html?m=1
Blogspot
Что делать российскому безопаснику на Западе? ч2 Опыт коллег, Запад
Управление информационной безопасностью
372 views
ISACARuSec
https://access.redhat.com/security/vulnerabilities/tcpsack
Red Hat Customer Portal
TCP SACK PANIC - Kernel vulnerabilities - CVE-2019-11477, CVE-2019-11478 & CVE-2019-11479 | Red Hat Customer Portal
Access Red Hat’s knowledge, guidance, and support through your subscription.
399 views
ISACARuSec
https://www.securitylab.ru/news/499491.php
SecurityLab.ru
Positive Technologies приглашает на вебинар «Риски безопасности применения техник искусственного интеллекта»
Вебинар состоится 11 июля в 14:00.
423 views
ISACARuSec
SP 800-205, Attribute Considerations for Access Control Systems | CSRC
https://csrc.nist.gov/publications/detail/sp/800-205/final
CSRC | NIST
NIST Special Publication (SP) 800-205, Attribute Considerations for Access Control Systems
This document provides federal agencies with a guide for implementing attributes in access control systems. Attributes enable a logical access control methodology where authorization to perform a set of operations is determined by evaluating attributes associated…
344 views
ISACARuSec
https://twitter.com/enisa_eu/status/1140944910264274944?s=09
Twitter
ENISA
Today @enisa_eu expert Rossella Mattioli is presenting the Reference Security Incident Taxonomy Working Group – RSIT WG at #FIRSTCon19. Find out more on our GitHub https://t.co/6moW4C592d
366 viewsedited  
ISACARuSec
https://twitter.com/amysblackshaw/status/1140629307213209602?s=09
Twitter
Amy Blackshaw
Top 10 Security Projects for 2019 #gartnersec
326 viewsedited  
ISACARuSec
https://twitter.com/bareiss_patrick/status/1140635423682809856?s=09
Twitter
Patrick Bareiß
I created a new Sigma detection rule repository. It is organized based on the @MITREattack framework. Additionally, every detection rule has a testing documentation. @likethecoins #DFIR #SOC #Splunk https://t.co/YXkP8uqkPb
322 viewsedited  
ISACARuSec
https://twitter.com/apbarros/status/1140990229454696448?s=09
Twitter
Augusto Barros
Our comparison of deception platforms has been published! https://t.co/ZmIlq74L0T Thanks for all those involved in putting it together!
303 viewsedited  
ISACARuSec
https://twitter.com/ArchieScorp/status/1141055883306254336?s=09
Twitter
Alexander Redchits
Интереснейшее исследование на тему психологии предубеждений в сфере кибербезопасности. Возможно о каких-то типах предубеждений вы и не задумывались. Очень полезный документ. https://t.co/TsgE1CL3me
343 viewsedited