Search Results for: cyber security

ISO-27001-Annex-A.10-Cryptography

ISO 27001 Annex : A.10 Cryptography

Leave a Comment / ISO 27001 La, Knowledge Base / By

ISO 27001 Annex : A.10 Cryptography in this article explaining Cryptographic controls, Policy on the Utilization of Cryptographic Controls & Key Management. A.10.1 Cryptographic controls Its objective is to ensure the proper and efficient use of cryptography to protect the confidentiality, authenticity and/or integrity of the information. A.10.1.1 Policy on the Utilization of Cryptographic Controls Control- A policy on the use of cryptographic controls to secure information should be developed and enforced. Implementation Guidance- The …

ISO 27001 Annex : A.10 Cryptography Read More »

ISO-27001-Annex-A.9.4.4-Use-of-Privileged-Utility-Programs

ISO 27001 Annex : A.9.4.4 Use of Privileged Utility Programs & A.9.4.5 Access Control to Program Source Code

Leave a Comment / ISO 27001 La, Knowledge Base / By

In this article ISO 27001 Annex : A.9.4.4 Use of Privileged Utility Programs & A.9.4.5 Access Control to Program Source Code this two topics are explain. A.9.4.4 Use of Privileged Utility Programs Control- The use of utility programs that could bypass system and application controls should be limited and tightly controlled. Implementation Guidance- The following guidelines should be taken into account when using utility programs that could override system and application controls: the use of …

ISO 27001 Annex : A.9.4.4 Use of Privileged Utility Programs & A.9.4.5 Access Control to Program Source Code Read More »

ISO-27001-Annex-A.9.3-User-Responsibilities

ISO 27001 Annex : A.9.3 User Responsibilities

Leave a Comment / ISO 27001 La, Knowledge Base / By

ISO 27001 Annex : A.9.3 User Responsibilities Its objective is the Responsibility of users for safeguarding their authentication information. A.9.3.1 Use of Secret Authentication Information Control- Use of secret authentication information should be allowed for users to follow the organization’s practices. Implementation Guidance- It is recommended that all users: maintain confidential information on secure authentication to ensure that it is not leaked to the other parties, including people of authority; Avoid maintaining a record of …

ISO 27001 Annex : A.9.3 User Responsibilities Read More »

ISO-27001-Annex-A.9.2.3 Management-of-Privileged-Access-Rights

ISO 27001 Annex : A.9.2.3 Management of Privileged Access Rights & A.9.2.4 Management of Secret Authentication Information of Users

Leave a Comment / ISO 27001 La, Knowledge Base / By

ISO 27001 Annex : A.9.2.3 Management of Privileged Access Rights & A.9.2.4 Management of Secret Authentication Information of Users these two topic is explained in this article. A.9.2.3 Management of Privileged Access Rights Control- A.9.2.3 Management of Privileged Access Rights The allocation and usage of exclusive access privileges will be limited and controlled. Implementation guidance- A structured authorizing procedure in accordance with the appropriate access management policies should monitor the allocation and usage of delegated …

ISO 27001 Annex : A.9.2.3 Management of Privileged Access Rights & A.9.2.4 Management of Secret Authentication Information of Users Read More »

ISO-27001-Annex : A.9.1.2-Access-to-Networks-and-Network-Services

ISO 27001 Annex : A.9.1.2 Access to Networks and Network Services

Leave a Comment / ISO 27001 La, Knowledge Base / By

Control- ISO 27001 Annex : A.9.1.2 Access to Networks and Network Services Only network and network facilities which have expressly been approved for use will be made available to users. Implementation Guidance- A policy on the use of networks and network policy should be developed. Following points should be covered in this policy: networks and network infrastructure to which access is permitted; Authorization procedures for determining who is permitted to access which networks and Networking services; …

ISO 27001 Annex : A.9.1.2 Access to Networks and Network Services Read More »

6-Things-You -Should-know -About Social -Engineering

6 Things You Should know About Social Engineering

Leave a Comment / CEH / By

6 Things You Should know About Social Engineering in this article is explaining Whole concept of  Social Engineering Pen Testing, There skills and Behaviors at risk of Attacks etc.  What is Social Engineering Pen Testing? Considering that you just are now familiar with all the mandatory concepts of social engineering, techniques to perform social engineering, and countermeasures to implement various threats, we are going to proceed to penetration testing. Social engineering pen testing is that …

6 Things You Should know About Social Engineering Read More »

Distribute-Threat-Intelligence-Overview

Distribute Threat Intelligence Overview

Leave a Comment / CTIA / By

Distribute Threat Intelligence overview to evolving landscape of cyber threats and attacks has raised the need to access timely intelligence to protect the organizations against varied knowledge breaches and security incidents. Organized threat actors with subtle tools and strategies are creating ancient defense mechanisms ineffective. To resolve such issues, the organizations would like a frenzied threat intelligence program to collaborate and share threat intelligence that has awareness and alerts stakeholders concerning evolving information breaches and …

Distribute Threat Intelligence Overview Read More »

Priority-Intelligence-needs

Priority Intelligence needs

Leave a Comment / CTIA / By

Priority Intelligence needs PIRs are outlined because the basic parts needed for building a threat intelligence program. PIRs are sometimes approved by the organization’s management. Priority Intelligence needs PIRs provides needs that square measure essential for high-level management for creating strategic, operational, or military science changes within the structure infrastructure to scale back risks. Priority Intelligence needs PIRs facilitate organizations to succeed in their strategic goals by providing dynamic situational awareness concerning the evolving threat …

Priority Intelligence needs Read More »

Avoid-Common-Threat-Intelligence-Pitfalls

Avoid Common Threat Intelligence Pitfalls

Leave a Comment / CTIA / By

Threat Intelligence Threat Intelligence Pitfalls is refers to the information of what’s malicious in and around our systems, beginning with adversaries or actors and increasing to the ways accustomed breach, exploit or abuse your systems and knowledge. The common formats of exchanging that info are referred to as Indicators of Compromise (IOCs), which may be simply matched on security merchandise. These aren’t essentially the simplest match to associate degree actual threat a lot of a …

Avoid Common Threat Intelligence Pitfalls Read More »