Do you want to actually improve your level of Cybersecurity? What will you do differently today or in the next few months better than last year? As in past post the GDPR has laid out new regulations that affect an entity that has data of an EU resident with impact on any of the following: … Read more
Great video from BSides Columbus Ohio 2018 : “Zero to Owned in 1 Hour” That is an interesting review of how the new potential weaknesses are in the Cloud itself. Human Access to the cloud can be a weak point. AWS (Amazon Web Services) Does Multi-factor Authentication work with multiple people running things? Service Provider (cloud … Read more
How can it be that upgrading software and hardware is too hard? Or is it that the reboot is too hard? We don’t actually want to reboot do we? I know some people who deliberately do not reboot their computers until forced to do so by power outage or other dramatic events. Or is it … Read more
When we say We need to be more secure in cyberland, does that mean small business needs to change what they do to be more secure? ISACA says we need governance: Governance and management for Enterprise business should use the COBIT 5 principles Principle 1: Meet stakeholder needs Principle 2: Covering the enterprise from end-to-end … Read more
I am talking about the reality that someone must be responsible so we can hold their feet to the fire. We don’t want to get to the point of too many directions of responsibility, as then when a breach does happen it is dangerous to see what will happen from there? So the CISA (Certified … Read more
