Cisco Security
MAY 5, 2022
covers these security compliance framework and certification standards: SOC 2® – SOC for Service Organizations: Trust Services Criteria. ISO IEC 27001:2013 – Information technology — Security techniques — Information security management systems — Requirements. Today, the Cisco CCF V1.0
Notice Bored
JUNE 5, 2022
The organisation cannot adopt a generic suite of information security controls simply on the basis that they have been recommended or suggested by someone - not even if they are noted in Annex A. Justification for including a control is its effect on modifying information security risk. Subclause 6.1.3 Subclause 6.1.3
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Krebs on Security
JUNE 18, 2021
The SEC said that under First American’s remediation policies, if the person responsible for fixing the problem is unable to do so based on the timeframes listed above, that employee must have their management contact the company’s information security department to discuss their remediation plan and proposed time estimate.
Notice Bored
FEBRUARY 20, 2022
The newly-published third edition of ISO/IEC 27002 is a welcome update to the primary ISO27k controls catalogue (officially, a 'reference set of generic information security controls'). Aside from restructuring and generally updating the controls from the 2013 second edition, the committee (finally!) hopefully.
eSecurity Planet
AUGUST 9, 2022
Thus, it can be difficult for even small enterprises to keep up with information security and data privacy compliance. Sometimes, however, information security, data privacy, and IT compliance overall are people problems more than they are pure data problems. Security, Privacy and Compliance Can Conflict.
SC Magazine
MAY 17, 2021
But what might they offer the front-facing information security officer – someone with a ten-year plan, wondering what to prepare for down the line? The project is based on work Baines did for Europol’s Cyber Crimes Center, Project 2020, which made a similar series of predictions in 2013 targeting last year.
Notice Bored
SEPTEMBER 23, 2020
One of the recurrent (zombie) threads on the ISO27k Forum concerns the status of ISO/IEC 27001:2013 Annex A. Typically the zombie is prodded from its slumber by a relatively inexperienced member naively suggesting that certain security controls from Annex A are essential, implying that they are mandatory for certification.
Expert insights. Personalized for you.
111 
Let's personalize your content