IT security: CCleaner hack.
The CCleaner hack: Who is affected: People who have downloaded CCleaner version 5.33.6162 32-bit version download between August 15th and September 12th. If I have a 64-bit PC could I be…
CISSP certification: Entrapment and Enticement.
Entrapment and Enticement: Entrapment (Illegal and unethical): When someone is persuaded to commit a crime they had no intention to commit and is then charged with it. Openly advertising sensitive…
CISSP certification: Evidence for legal and regulatory issues.
Evidence: How you obtain and handle evidence is VERY important. Types of evidence: Real Evidence: Tangible and Physical objects, in IT Security: Hard Disks, USB Drives – NOT the data on…
CISSP certification: Legal and regulatory issues.
Legal and regulatory issues. As IT Security Professionals we need to understand that laws and regulations have a huge influence on how we work. We need to know some of…
IT Security: The Equifax breach could have been avoided with a patch released 2 months before the breach started.
Equifax has without notifying anyone updated their breach FAQ, now saying that it was breached using a vulnerability in Apache Struts. "We know that criminals exploited a U.S. website application…
IT security: US Energy Department Funds 20 New Cybersecurity Projects
The US Department of Energy (DOE) has announced 20 cybersecurity projects aimed at enhancing the reliability and resilience of the American electric grid, and oil and natural gas infrastructure through…
CISSP certification: Governance vs. Management.
For the certification it is important to know where you are in the organization and answer the questions from that viewpoint. You are a risk adviser or a IT security…
CISSP certification: Top-down Security management and organization structure.
Having top-down IT security leadership in an organization is key to success. If we do not have the buy-in of senior leadership, we will do a mediocre job at best.…
CISSP certification: MAC (Mandatory Access Control)
MAC (Mandatory Access Control): Often used when Confidentiality is most important. Almost always used in the military or in organizations where confidentiality is very important, rarely used in the private…
CISSP certification: RBAC (Role based access control).
RBAC (Role Based Access Control): Often used when data integrity is most important. Most large organizations use role based access control, your access levels are determined by your job role.…