Как раскрывают уязвимости в Голландии :-)
Coordinated Vulnerability Disclosure: Guidelines published by NCSC — ENISA
https://www.enisa.europa.eu/news/member-states/coordinated-vulnerability-disclosure-guidelines-published-by-ncsc
Coordinated Vulnerability Disclosure: Guidelines published by NCSC — ENISA
https://www.enisa.europa.eu/news/member-states/coordinated-vulnerability-disclosure-guidelines-published-by-ncsc
www.enisa.europa.eu
Coordinated Vulnerability Disclosure: Guidelines published by NCSC
The Coordinated Vulnerability Disclosure Guideline that aims to support organisations with their CVD-policy was published last week by the Dutch National Cybersecurity Centre.
Человек самое слабое звено но про DMARC не забывай :-)
Culture the missing link for cybersecurity's weakest link | ZDNet
https://www.zdnet.com/article/culture-the-missing-link-for-cybersecuritys-weakest-link/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
Culture the missing link for cybersecurity's weakest link | ZDNet
https://www.zdnet.com/article/culture-the-missing-link-for-cybersecuritys-weakest-link/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
ZDNet
Culture the missing link for cybersecurity's weakest link | ZDNet
Whether people are your weakest link and falling for phishing attacks, or your strongest link and looking out for anything suspicious, is down to your organisation's culture.
Соблюдение privacy ограничивает внедрение новых технологий.
Wells Fargo: Banks entering a legal quagmire in the name of technology | ZDNet
https://www.zdnet.com/article/wells-fargo-banks-entering-a-legal-quagmire-in-the-name-of-technology/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
Wells Fargo: Banks entering a legal quagmire in the name of technology | ZDNet
https://www.zdnet.com/article/wells-fargo-banks-entering-a-legal-quagmire-in-the-name-of-technology/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
ZDNet
Wells Fargo: Banks entering a legal quagmire in the name of technology
Wells Fargo's Financial Institutions Group Head of Compliance and Operational Risk is cognisant of the need to adopt machine learning and artificial intelligence, but she said the law isn't exactly ready for it.
Новая сертификация от ISACA.
Cybersecurity Audit - ISACA
http://www.isaca.org/info/cybersecurity-audit/index.html
Cybersecurity Audit - ISACA
http://www.isaca.org/info/cybersecurity-audit/index.html
How To Audit GDPR
Напоминаю доступ к части ресурсов сайта возможен только в режиме браузера полная версия сайта.
Миграция на новый сайт идет постепенно.
http://www.isaca.org/Knowledge-Center/Research/ResearchDeliverables/Pages/How-to-Audit-GDPR.aspx
Напоминаю доступ к части ресурсов сайта возможен только в режиме браузера полная версия сайта.
Миграция на новый сайт идет постепенно.
http://www.isaca.org/Knowledge-Center/Research/ResearchDeliverables/Pages/How-to-Audit-GDPR.aspx
Must-read книга для Всёх кто связан с soc. Перевод постепенно продолжается. Но читать лучше всего оригинал.
Forwarded from Пост Лукацкого
Кому должен подчиняться SOC и как грамотно прописать его полномочия? Что нужно учесть в регламенте SOC и политиках по кибербезопасности? Об этом в переводе Стратегии 3 #гайдMITRE #10стратегийSOChttps://t.co/jALArxxCBs
— R-Vision (@rvision_pro) October 24, 2018
— R-Vision (@rvision_pro) October 24, 2018
Twitter
#гайдmitre hashtag on Twitter
See Tweets about #гайдmitre on Twitter. See what people are saying and join the conversation.
Clarity and focus on security required for successful digital transformation - Help Net Security
https://www.helpnetsecurity.com/2018/10/18/successful-digital-transformation/
https://www.helpnetsecurity.com/2018/10/18/successful-digital-transformation/
Help Net Security
Clarity and focus on security required for successful digital transformation - Help Net Security
For a successful digital transformation, security must be given its due, especially in the context of adopting technologies such as AI, cloud and IoT.
ISACARuSec pinned «Новая сертификация от ISACA. Cybersecurity Audit - ISACA http://www.isaca.org/info/cybersecurity-audit/index.html»
ITL Bulletin , One Block at a Time – Helping to Build Blockchain Knowledge | CSRC
https://csrc.nist.gov/publications/detail/itl-bulletin/2018/10/helping-to-build-blockchain-knowledge/final
https://csrc.nist.gov/publications/detail/itl-bulletin/2018/10/helping-to-build-blockchain-knowledge/final
CSRC | NIST
ITL Bulletin October 2018, One Block at a Time – Helping to Build Blockchain Knowledge
This bulletin summarizes the information found in NISTIR 8202: Blockchain Technology overview which provides a high-level technical overview of blockchain technology. It discusses its application to cryptocurrency in depth, but also shows its broader applications.
До конца этого года должны выйти 4 документа по управлению ИТ от Isaca.
COBIT 2019 Publications & Resources
http://www.isaca.org/COBIT/Pages/COBIT-2019-Publications-Resources.aspx
COBIT 2019 Publications & Resources
http://www.isaca.org/COBIT/Pages/COBIT-2019-Publications-Resources.aspx
Forwarded from 𝕀𝕊𝕂ℝ-𝔸 𝔻𝕒𝕚𝕝𝕪
Вымогатели маскировались под специалистов по кибербезопасности/Задержаны хакеры, взламывавшие личные кабинеты клиентов банков и магазинов
МВД обезвредило преступную группу хакеров, которые взламывали личные кабинеты клиентов банков, интернет-магазинов и страховых компаний. Затем злоумышленники требовали от организаций за якобы обнаруженные «уязвимости» в их системах вознаграждение в размере от 40 тыс. до 250 тыс. руб. Одновременно они торговали на хакерских форумах данными для доступа к аккаунтам. В итоге от их действий пострадало около десяти крупных компаний.
https://www.kommersant.ru/doc/3780504
МВД обезвредило преступную группу хакеров, которые взламывали личные кабинеты клиентов банков, интернет-магазинов и страховых компаний. Затем злоумышленники требовали от организаций за якобы обнаруженные «уязвимости» в их системах вознаграждение в размере от 40 тыс. до 250 тыс. руб. Одновременно они торговали на хакерских форумах данными для доступа к аккаунтам. В итоге от их действий пострадало около десяти крупных компаний.
https://www.kommersant.ru/doc/3780504
Примеры вопросов начальной (entry) сертификации ISACA CSX Fundamentals. Сертификация либо для студентов или для тех кто вообще не знаком с ИБ.
Почему за метро и транспорт теперь надо платить наличкой...
Усманов встал на кассу: зачем его компании данные о платежах в метро :: Технологии и медиа :: РБК
https://www.rbc.ru/technology_and_media/26/10/2018/5bd1e8589a7947c4e9701675?from=center_3
Усманов встал на кассу: зачем его компании данные о платежах в метро :: Технологии и медиа :: РБК
https://www.rbc.ru/technology_and_media/26/10/2018/5bd1e8589a7947c4e9701675?from=center_3
РБК
Усманов встал на кассу: зачем его компании данные о платежах в метро
Торги за право обслуживать кассы в метро закончились неожиданно: победитель, связанный с USM Алишера Усманова,
Webinar: Machine Learning: What Assurance Professionals Need to Know
Machine learning has evolved past an esoteric technique worked on by academics and research institutes into a viable technology being deployed at many companies. Machine learning has been significantly changing the competitive landscape of business models worldwide, contributing to the demise of established business, such as Blockbuster, to creating entirely new businesses, such as algorithmic advertising. This presentation strives to address the questions of what assurance professionals need to know about this technology and how to provide assurance around machine learning implementations and its unique risks.
https://www.isaca.org/Education/Online-Learning/Pages/webinar-machine-learning-what-assurance-professionals-need-to-know.aspx
Machine learning has evolved past an esoteric technique worked on by academics and research institutes into a viable technology being deployed at many companies. Machine learning has been significantly changing the competitive landscape of business models worldwide, contributing to the demise of established business, such as Blockbuster, to creating entirely new businesses, such as algorithmic advertising. This presentation strives to address the questions of what assurance professionals need to know about this technology and how to provide assurance around machine learning implementations and its unique risks.
https://www.isaca.org/Education/Online-Learning/Pages/webinar-machine-learning-what-assurance-professionals-need-to-know.aspx
Webinar: How to Fight Security Fatigue in Your Enterprise
Your most critical stakeholders are prone to security fatigue: the executive team (or board) and the co-workers that you’re tasked to protect. Your success is tied to your ability to establish and maintain credibility with your stakeholders while also protecting your business. How do you ensure they’re adequately attuned to the most pressing threats without building a reputation of being a Chicken Little?
https://www.isaca.org/Education/Online-Learning/Pages/webinar-how-to-fight-security-fatigue-in-your-enterprise.aspx
Your most critical stakeholders are prone to security fatigue: the executive team (or board) and the co-workers that you’re tasked to protect. Your success is tied to your ability to establish and maintain credibility with your stakeholders while also protecting your business. How do you ensure they’re adequately attuned to the most pressing threats without building a reputation of being a Chicken Little?
https://www.isaca.org/Education/Online-Learning/Pages/webinar-how-to-fight-security-fatigue-in-your-enterprise.aspx
The Outlook for Auditors and Infosec Professionals in the Fourth Industrial Revolution - ISACA Now
The Future of Jobs Report 2018, published by the World Economic Forum, presents a well-researched reading with a thorough and comprehensive coverage of global industries and regions. The essence of the report can be captured in the preface by Klaus Schwab, founder and executive chairman, World Economic Forum, which states “Catalysing positive outcomes and a future of good work for all will require bold leadership and an entrepreneurial spirit from businesses and governments, as well as an agile mindset of lifelong learning from employees.”
https://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=1093
The Future of Jobs Report 2018, published by the World Economic Forum, presents a well-researched reading with a thorough and comprehensive coverage of global industries and regions. The essence of the report can be captured in the preface by Klaus Schwab, founder and executive chairman, World Economic Forum, which states “Catalysing positive outcomes and a future of good work for all will require bold leadership and an entrepreneurial spirit from businesses and governments, as well as an agile mindset of lifelong learning from employees.”
https://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=1093