ISACARuSec
We are considering themes for our remote meetup or meetups for 2021. What would you prefer? Feel free to contact me or post your propositions in our chat. Especially if your are ready to share with us.
We're opening Call for Presentation about DevSecOps theme. Call is open from 23 Feb to 02 Mar, end-users, vendors and consultants can join. Apply by sending inquiry to @popepiusXIII
An effective security leader | F-Secure
F-secure conducted a series of in-depth interviews with CISOs in the US and Europe to find out how they see their role and what they think their future looks like.
https://www.f-secure.com/en/business/resources/an-effective-security-leader
F-secure conducted a series of in-depth interviews with CISOs in the US and Europe to find out how they see their role and what they think their future looks like.
https://www.f-secure.com/en/business/resources/an-effective-security-leader
F-Secure
An effective security leader
Our report, The CISO’s New Dawn, drew on the collective experiences of 28 CISOs. This chapter uncovers how their roles have changed over the last 12-18 months.
How ManoMano manages and respond to millions of security events : A do it yourself spirit and automation | by Jules Duvivier | Manomano Tech | Medium
https://medium.com/manomano-tech/how-manomano-manages-and-respond-to-millions-of-security-events-a-do-it-yourself-spirit-and-495bd7c1246c
https://medium.com/manomano-tech/how-manomano-manages-and-respond-to-millions-of-security-events-a-do-it-yourself-spirit-and-495bd7c1246c
Medium
How ManoMano manages and responds to millions of security events : A do it yourself spirit and automation
This platform aims to automate the management to an incident by taking advantage of two open source tools TheHive and n8n
"• The current evidence about the ability of cyber insurance to improve
cyber security practices is limited. While cyber insurers may be able
to provide expertise to policyholders and increase their awareness of
cyber risks, much of the existing evidence base is largely theoretical
and there is still considerable scepticism from customers about the
benefits of cyber insurance. "
cyber security practices is limited. While cyber insurers may be able
to provide expertise to policyholders and increase their awareness of
cyber risks, much of the existing evidence base is largely theoretical
and there is still considerable scepticism from customers about the
benefits of cyber insurance. "
Регистрация в веб-семинаре - Zoom
https://zoom.us/webinar/register/2116124666912/WN__a2xShGTQFC3ueC2BZKkQA
https://zoom.us/webinar/register/2116124666912/WN__a2xShGTQFC3ueC2BZKkQA
NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 4.0 | NIST
https://www.nist.gov/publications/nist-framework-and-roadmap-smart-grid-interoperability-standards-release-40
https://www.nist.gov/publications/nist-framework-and-roadmap-smart-grid-interoperability-standards-release-40
NIST
NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 4.0
NIST's fourth framework informing America's development of the smart grid includes updates to the Smart Grid Conceptual Model, introduces new Communication Path
Toward a PEC Use-Case Suite (Preliminary Draft) | CSRC
https://csrc.nist.gov/publications/detail/white-paper/2021/01/21/toward-a-pec-use-case-suite-preliminary-draft/draft#pubs-abstract-header
https://csrc.nist.gov/publications/detail/white-paper/2021/01/21/toward-a-pec-use-case-suite-preliminary-draft/draft#pubs-abstract-header
CSRC | NIST
Toward a PEC Use-Case Suite (Preliminary Draft) (Draft)
This document motivates the development of a privacy-enhancing cryptography (PEC) use-case suite. This would constitute a set of proofs of concepts, showcasing the use of cryptographic tools for enabling privacy in various applications. This is not a proposal…
Supply Chain Assurance Community of Interest Webinar - March 2021 | NCCoE
https://www.nccoe.nist.gov/webform/supply-chain-assurance-community-interest-webinar-march-2021
https://www.nccoe.nist.gov/webform/supply-chain-assurance-community-interest-webinar-march-2021
ISACARuSec pinned «We're opening Call for Presentation about DevSecOps theme. Call is open from 23 Feb to 02 Mar, end-users, vendors and consultants can join. Apply by sending inquiry to @popepiusXIII»
Introducing Google Cloud’s new Cloud Security Podcast | Google Cloud Blog
https://cloud.google.com/blog/products/identity-security/introducing-google-clouds-new-cloud-security-podcast
https://cloud.google.com/blog/products/identity-security/introducing-google-clouds-new-cloud-security-podcast
Google Cloud Blog
Introducing Google Cloud’s new Cloud Security Podcast | Google Cloud Blog
Anton Chuvakin and Timothy Peacock, security professionals at Google Cloud, bring you a new podcast on cloud security.
Опубликована новая версия документа Payment Card Industry (PCI) Software Security Framework: Secure Software Lifecycle. Requirements and Assessment Procedures, version 1.1.
https://m.vk.com/wall-153623342_4865
https://m.vk.com/wall-153623342_4865
VK
Управление информационной безопасностью
РУБРИКА: Лучшие практики Опубликована новая версия документа Payment Card Industry (PCI) Software Security Framework: Secure Software Lifecycle. Requirements and Assessment Procedures, version 1.1. #pcidss
Free cybersecurity tool aims to help smaller businesses stay safer online | ZDNet
https://www.zdnet.com/article/free-cybersecurity-tool-aims-to-help-smaller-businesses-stay-safer-online/
https://www.zdnet.com/article/free-cybersecurity-tool-aims-to-help-smaller-businesses-stay-safer-online/
ZDNet
Free cybersecurity tool aims to help smaller businesses stay safer online | ZDNet
NCSC tool aims to help small businesses develop a strategy to protect themselves from cybercrime.
Forwarded from Пост Лукацкого
Вышла матрица ATT&CK для контейнеров (пока проект) - https://t.co/uN92AcO7Kq
— Alexey Lukatsky (@alukatsky) March 2, 2021
— Alexey Lukatsky (@alukatsky) March 2, 2021
Medium
Update: Help Shape ATT&CK for Containers
Last December, we sent out a call to the community to help us shape ATT&CK for Containers as part of a Center for Threat-Informed Defense…