ISACARuSec

The Defending Against Software Supply Chain Attacks, released by CISA and the National Institute of Standards and Technology (NIST), provides an overview of software supply chain risks and recommendations on how software customers and vendors can use the NIST Cyber Supply Chain Risk Management (C-SCRM) Framework and the Secure Software Development Framework (SSDF) to identify, assess, and mitigate software supply chain risks.

https://www.cisa.gov/publication/software-supply-chain-attacks

www.cisa.gov

Software Supply Chain Attacks | CISA

313 viewsedited 05:04

ISACARuSec

308 views05:04

ISACARuSec

https://www.nist.gov/news-events/news/2021/04/nist-releases-measurement-tool-emerging-bgp-security-technologies

NIST

NIST Releases Measurement Tool for Emerging BGP Security Technologies

NIST has released a new version of its measurement tools aimed at improving trust and confidence in emerging technologies for improving the security and resi

649 views05:09

ISACARuSec

SP 800-172A (Draft), Assessing Enhanced Security Requirements for CUI | CSRC
https://csrc.nist.gov/publications/detail/sp/800-172A/draft

CSRC | NIST

NIST Special Publication (SP) 800-172A (Draft), Assessing Enhanced Security Requirements for Controlled Unclassified Information

The protection of Controlled Unclassified Information (CUI) in nonfederal systems and organizations is important to federal agencies and can directly impact the ability of the Federal Government to successfully carry out its assigned missions and business…

276 views17:03

ISACARuSec

https://sborisov.blogspot.com/2021/04/pci.html

Blogspot

Лучшие практики по жизненному циклу безопасности ПО от PCI

Обзор нового стандарта по разработке безопасного программного обеспечения PCI Secure SLC Standard

311 views04:38

ISACARuSec

https://csrc.nist.gov/publications/detail/white-paper/2021/04/28/getting-ready-for-post-quantum-cryptography/final#pubs-abstract-header

CSRC | NIST

Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic…

Cryptographic technologies are used throughout government and industry to authenticate the source and protect the confidentiality and integrity of information that we communicate and store. The paper describes the impact of quantum computing technology on…

266 views15:00

ISACARuSec

https://thepaypers.com/reports/financial-crime-and-fraud-report-2021/r1248631

Thepaypers

Financial Crime and Fraud Report 2021

<p style='text-align: justify;'><i>Financial Crime and Fraud Report 2021 follows the development of the best practices and tools used by financial institutions to prevent fraud from happening, to boost the digital onboarding process for their customers while…

261 views17:15

ISACARuSec

XDR Defined: Giving Meaning To Extended Detection And Response

https://go.forrester.com/blogs/xdr-defined-giving-meaning-to-extended-detection-and-response/

248 viewsedited 17:22

ISACARuSec

https://cloud.google.com/blog/products/identity-security/google-cloud-security-foundations-guide

Google Cloud Blog

Get the guide: Google Cloud security foundations | Google Cloud Blog

Get step by step guidance for creating a secured environment with Google Cloud with the security foundations guide and Terraform blueprint scripts.

262 views05:48

ISACARuSec

Очередной пост по обнаружению в блоге Антона Чувакина, известного эксперта по soc и siem, в прошлом аналитика Gartner.

https://medium.com/anton-on-security/what-are-your-not-detecting-5056e20b441c

Medium

What Are You NOT Detecting?

What are you not detecting?

286 viewsedited 05:49

ISACARuSec

https://twitter.com/ISACANews/status/1387466711889334274

Twitter

ISACA Global

To succeed in the CISM exam, reprogram your mind for success and think like a manager, writes George McPherson. Read more of George's CISM prep tips here: bit.ly/3dZ9N6I #cism #isaca #security #informationsecurity

298 viewsedited 05:50

ISACARuSec

https://csrc.nist.gov/publications/detail/sp/800-66/rev-2/draft