До конца этого года должны выйти 4 документа по управлению ИТ от Isaca.
COBIT 2019 Publications & Resources
http://www.isaca.org/COBIT/Pages/COBIT-2019-Publications-Resources.aspx
COBIT 2019 Publications & Resources
http://www.isaca.org/COBIT/Pages/COBIT-2019-Publications-Resources.aspx
Forwarded from 𝕀𝕊𝕂ℝ-𝔸 𝔻𝕒𝕚𝕝𝕪
Вымогатели маскировались под специалистов по кибербезопасности/Задержаны хакеры, взламывавшие личные кабинеты клиентов банков и магазинов
МВД обезвредило преступную группу хакеров, которые взламывали личные кабинеты клиентов банков, интернет-магазинов и страховых компаний. Затем злоумышленники требовали от организаций за якобы обнаруженные «уязвимости» в их системах вознаграждение в размере от 40 тыс. до 250 тыс. руб. Одновременно они торговали на хакерских форумах данными для доступа к аккаунтам. В итоге от их действий пострадало около десяти крупных компаний.
https://www.kommersant.ru/doc/3780504
МВД обезвредило преступную группу хакеров, которые взламывали личные кабинеты клиентов банков, интернет-магазинов и страховых компаний. Затем злоумышленники требовали от организаций за якобы обнаруженные «уязвимости» в их системах вознаграждение в размере от 40 тыс. до 250 тыс. руб. Одновременно они торговали на хакерских форумах данными для доступа к аккаунтам. В итоге от их действий пострадало около десяти крупных компаний.
https://www.kommersant.ru/doc/3780504
Примеры вопросов начальной (entry) сертификации ISACA CSX Fundamentals. Сертификация либо для студентов или для тех кто вообще не знаком с ИБ.
Почему за метро и транспорт теперь надо платить наличкой...
Усманов встал на кассу: зачем его компании данные о платежах в метро :: Технологии и медиа :: РБК
https://www.rbc.ru/technology_and_media/26/10/2018/5bd1e8589a7947c4e9701675?from=center_3
Усманов встал на кассу: зачем его компании данные о платежах в метро :: Технологии и медиа :: РБК
https://www.rbc.ru/technology_and_media/26/10/2018/5bd1e8589a7947c4e9701675?from=center_3
РБК
Усманов встал на кассу: зачем его компании данные о платежах в метро
Торги за право обслуживать кассы в метро закончились неожиданно: победитель, связанный с USM Алишера Усманова,
Webinar: Machine Learning: What Assurance Professionals Need to Know
Machine learning has evolved past an esoteric technique worked on by academics and research institutes into a viable technology being deployed at many companies. Machine learning has been significantly changing the competitive landscape of business models worldwide, contributing to the demise of established business, such as Blockbuster, to creating entirely new businesses, such as algorithmic advertising. This presentation strives to address the questions of what assurance professionals need to know about this technology and how to provide assurance around machine learning implementations and its unique risks.
https://www.isaca.org/Education/Online-Learning/Pages/webinar-machine-learning-what-assurance-professionals-need-to-know.aspx
Machine learning has evolved past an esoteric technique worked on by academics and research institutes into a viable technology being deployed at many companies. Machine learning has been significantly changing the competitive landscape of business models worldwide, contributing to the demise of established business, such as Blockbuster, to creating entirely new businesses, such as algorithmic advertising. This presentation strives to address the questions of what assurance professionals need to know about this technology and how to provide assurance around machine learning implementations and its unique risks.
https://www.isaca.org/Education/Online-Learning/Pages/webinar-machine-learning-what-assurance-professionals-need-to-know.aspx
Webinar: How to Fight Security Fatigue in Your Enterprise
Your most critical stakeholders are prone to security fatigue: the executive team (or board) and the co-workers that you’re tasked to protect. Your success is tied to your ability to establish and maintain credibility with your stakeholders while also protecting your business. How do you ensure they’re adequately attuned to the most pressing threats without building a reputation of being a Chicken Little?
https://www.isaca.org/Education/Online-Learning/Pages/webinar-how-to-fight-security-fatigue-in-your-enterprise.aspx
Your most critical stakeholders are prone to security fatigue: the executive team (or board) and the co-workers that you’re tasked to protect. Your success is tied to your ability to establish and maintain credibility with your stakeholders while also protecting your business. How do you ensure they’re adequately attuned to the most pressing threats without building a reputation of being a Chicken Little?
https://www.isaca.org/Education/Online-Learning/Pages/webinar-how-to-fight-security-fatigue-in-your-enterprise.aspx
The Outlook for Auditors and Infosec Professionals in the Fourth Industrial Revolution - ISACA Now
The Future of Jobs Report 2018, published by the World Economic Forum, presents a well-researched reading with a thorough and comprehensive coverage of global industries and regions. The essence of the report can be captured in the preface by Klaus Schwab, founder and executive chairman, World Economic Forum, which states “Catalysing positive outcomes and a future of good work for all will require bold leadership and an entrepreneurial spirit from businesses and governments, as well as an agile mindset of lifelong learning from employees.”
https://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=1093
The Future of Jobs Report 2018, published by the World Economic Forum, presents a well-researched reading with a thorough and comprehensive coverage of global industries and regions. The essence of the report can be captured in the preface by Klaus Schwab, founder and executive chairman, World Economic Forum, which states “Catalysing positive outcomes and a future of good work for all will require bold leadership and an entrepreneurial spirit from businesses and governments, as well as an agile mindset of lifelong learning from employees.”
https://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=1093
The Future of Jobs Report 2018 | World Economic Forum
https://www.weforum.org/reports/the-future-of-jobs-report-2018
https://www.weforum.org/reports/the-future-of-jobs-report-2018
World Economic Forum
The Future of Jobs Report 2018
New categories of jobs will emerge, partly or wholly displacing others. The skill sets required in both old and new occupations will change in most industries and transform how and where people work.
Иногда для управления ИБ бывает полезно окунуться в сугубо техническое и полуандеграундное мероприятие.
Forwarded from ~
2600!
2 ноября, в 19:00
Москва:
Подкопаевский переулок 4, строение 7, бар "RNDM" @rndmbar http://2600.moscow
Санкт-Петербург: Краснодонская 4, бар "Beer&Cakes" http://2600.spb.ru
Мурманск:
Театральный бульвар 6, антикафе "Тепло" http://murmansk.2600.ru
Петрозаводск: Первомайский проспект 2, антикафе "Хорошее Место" http://ptz.2600.ru
Минск:
улица Гикало 5, бар "Гвоздь" http://pubgvozd.by
Есть желание выступить?
Напиши на почту 2600@2600.ru или заходи в общий чат @meetings2600
Stay tuned! :)
2 ноября, в 19:00
Москва:
Подкопаевский переулок 4, строение 7, бар "RNDM" @rndmbar http://2600.moscow
Санкт-Петербург: Краснодонская 4, бар "Beer&Cakes" http://2600.spb.ru
Мурманск:
Театральный бульвар 6, антикафе "Тепло" http://murmansk.2600.ru
Петрозаводск: Первомайский проспект 2, антикафе "Хорошее Место" http://ptz.2600.ru
Минск:
улица Гикало 5, бар "Гвоздь" http://pubgvozd.by
Есть желание выступить?
Напиши на почту 2600@2600.ru или заходи в общий чат @meetings2600
Stay tuned! :)
Возможно, скоро придется спрашивать у работников вендоров США не подрабатывают ли они на правительство.
http://www.cnews.ru/news/top/2018-10-24_itkompanii_ssha_stanut_sdavat_v_arendu_sotrudnikovpatriotov
http://www.cnews.ru/news/top/2018-10-24_itkompanii_ssha_stanut_sdavat_v_arendu_sotrudnikovpatriotov
CNews.ru
ИТ-компании США станут сдавать в аренду сотрудников-патриотов Дональду Трампу - CNews
Правительство США ведет поиск патриотов среди ИТ-специалистов крупных компаний. Им будет предложено работать по своей специальности на благо страны в рамках служебных командировок. ИТ-компании с...
Исследование «Лаборатории Касперского»: лишь 5% директоров по ИБ участвуют в принятии ключевых решений в компании - CNews
http://safe.cnews.ru/news/line/2018-10-26_issledovanie_laboratorii_kasperskogo_lish
http://safe.cnews.ru/news/line/2018-10-26_issledovanie_laboratorii_kasperskogo_lish
CNews.ru
Исследование «Лаборатории Касперского»: лишь 5% директоров по ИБ участвуют в принятии ключевых решений в компании - CNews
При этом 95% директоров по информационной безопасности убеждены, что киберинциденты в любом их проявлении...
Для тех кому актуальны вопросы импортозамещения базовой операционной системы рекомендую Закрытую группу AstraLinux.
Присоединится можно по ссылке ниже:
https://t.me/joinchat/Bzt6QkHm1ZPzItPE2C9Fug
Присоединится можно по ссылке ниже:
https://t.me/joinchat/Bzt6QkHm1ZPzItPE2C9Fug
ISACARuSec
generating_anomalies_improves_return.pdf
Как генерирование аномалий влияет на ROI(return-on-investment) SIEM
Возможны последствия для рынка ИБ
https://www.opennet.ru/opennews/art.shtml?num=49515
https://www.opennet.ru/opennews/art.shtml?num=49515
www.opennet.ru
Компания IBM объявила о покупке Red Hat
Компания IBM официально объявила о достижении соглашения о покупке компании Red Hat. Red Hat интересует компанию IBM прежде всего своими решениями в области облачных технологий. Утверждается, что покупка Red Hat поможет компании IBM стать крупнейшим провайдером…
Действующим ciso будет полезно узнать как у коллег. Остальным оценить подходят ли они для роли ciso.
Обращаю внимание, что 37% процентов опрошеных ciso сертифицированные ISACA CISM.
https://www.kaspersky.com/blog/ciso-report/24288/
Обращаю внимание, что 37% процентов опрошеных ciso сертифицированные ISACA CISM.
https://www.kaspersky.com/blog/ciso-report/24288/
Kaspersky
What it takes to be a CISO: Success and leadership in corporate IT security
Some comments from Kaspersky Lab’s head of information security on the results of the CISO survey.
Introducing COBIT 2019: The Motivation for the Update?
https://www.isaca.org/COBIT/focus/Pages/introducing-cobit-2019-the-motivation-for-the-update.aspx
https://www.isaca.org/COBIT/focus/Pages/introducing-cobit-2019-the-motivation-for-the-update.aspx
The COBIT 2019 update improves COBIT in the following areas:
It better addresses the importance of I&T governance for the enterprise. To achieve benefits realization, risk optimization, resource optimization, and business and IT alignment for the enterprise, an I&T governance program needs to be in place, supported by the board of directors and executive management. That governance program must be maintained on a basis that enables and encourages continuous improvement. This is a major differentiator for successful organizations.
It addresses new trends in technology. For example, Development Operations (DevOps) and Agile development concepts are added; off-premises operations are considered; the impact of third-party providers is addressed; outsourcing activities are more thoroughly discussed; and, although not singled out, the Internet of Things (IoT) is addressed.
It is more up to date, with latest standards and working methods. The COBIT model allows referencing and alignment to concepts originating in other sources (e.g., other IT standards, compliance regulations).
It provides more flexibility. The addition of the COBIT Design Guide: Designing an Information and Technology Governance Solution1 provides additional guidance for defining and using design factors, which allow COBIT content to be tailored for better alignment with each organization’s and each user’s particular context.
It introduces focus area concepts. A focus area describes a certain governance topic, domain or issue that can be addressed by a collection of governance and management objectives and their components. Examples include: small and medium enterprises, cybersecurity, digital transformation, and cloud computing. Focus areas can contain a combination of generic governance components and variants. The number of focus areas is virtually unlimited; new ones can be added as required or as subject matter experts and practitioners contribute. This is what makes COBIT open-ended.
It is perceived as more prescriptive. Frameworks such as COBIT can be descriptive and prescriptive. The COBIT conceptual model is constructed and presented such that its instantiation—that is, the tailored COBIT governance components—is perceived as a prescription of how to set up a customized governance system for I&T.
It is a better instrument to manage performance of I&T.The structure of the COBIT performance management model is integrated into the conceptual model. The maturity and capability concepts are introduced for better alignment with Capability Maturity Model Integration (CMMI).
It adds a new online collaboration feature. Future updates will be recommended by COBIT users, vetted by a COBIT Steering Committee, to ensure consistent COBIT core framework quality and timelier updates.
It supports decision-making. The key asset for all organizations is information. This information must be accurate, reliable, timely and available when needed for critical decision-making. The information is made available to all organizations through the use of technology, which must be secure and cost-effective.
It better addresses the importance of I&T governance for the enterprise. To achieve benefits realization, risk optimization, resource optimization, and business and IT alignment for the enterprise, an I&T governance program needs to be in place, supported by the board of directors and executive management. That governance program must be maintained on a basis that enables and encourages continuous improvement. This is a major differentiator for successful organizations.
It addresses new trends in technology. For example, Development Operations (DevOps) and Agile development concepts are added; off-premises operations are considered; the impact of third-party providers is addressed; outsourcing activities are more thoroughly discussed; and, although not singled out, the Internet of Things (IoT) is addressed.
It is more up to date, with latest standards and working methods. The COBIT model allows referencing and alignment to concepts originating in other sources (e.g., other IT standards, compliance regulations).
It provides more flexibility. The addition of the COBIT Design Guide: Designing an Information and Technology Governance Solution1 provides additional guidance for defining and using design factors, which allow COBIT content to be tailored for better alignment with each organization’s and each user’s particular context.
It introduces focus area concepts. A focus area describes a certain governance topic, domain or issue that can be addressed by a collection of governance and management objectives and their components. Examples include: small and medium enterprises, cybersecurity, digital transformation, and cloud computing. Focus areas can contain a combination of generic governance components and variants. The number of focus areas is virtually unlimited; new ones can be added as required or as subject matter experts and practitioners contribute. This is what makes COBIT open-ended.
It is perceived as more prescriptive. Frameworks such as COBIT can be descriptive and prescriptive. The COBIT conceptual model is constructed and presented such that its instantiation—that is, the tailored COBIT governance components—is perceived as a prescription of how to set up a customized governance system for I&T.
It is a better instrument to manage performance of I&T.The structure of the COBIT performance management model is integrated into the conceptual model. The maturity and capability concepts are introduced for better alignment with Capability Maturity Model Integration (CMMI).
It adds a new online collaboration feature. Future updates will be recommended by COBIT users, vetted by a COBIT Steering Committee, to ensure consistent COBIT core framework quality and timelier updates.
It supports decision-making. The key asset for all organizations is information. This information must be accurate, reliable, timely and available when needed for critical decision-making. The information is made available to all organizations through the use of technology, which must be secure and cost-effective.
Forwarded from Пост Лукацкого
На сайте TК26 опубликован для обсуждения проект рекомендаций Использование алгоритмов ГОСТ Р 34.10-2012, ГОСТ Р 34.11-2012 в сертификате, списке аннулированных сертификатов (CRL) и запросе на сертификат PKCS #10 инфраструктуры открытых ключей X.509https://t.co/BrcexLOTZN
— Russian cryptography (@CryptographyRU) October 30, 2018
— Russian cryptography (@CryptographyRU) October 30, 2018