Notice Bored

AUGUST 7, 2020

This morning I've been studying the final draft of the forthcoming second edition of ISO/IEC 27014 "Governance of information security" , partly to update ISO27001security.com but mostly out of my fascination with the topic. This will support the delivery of security education, training and awareness programs.

Government 52

Government InfoSec Information Security Accountability 52

Notice Bored

APRIL 12, 2022

This morning, I’ve been browsing and thinking about ISO/IEC 27403 , a draft ISO27k standard on the infosec and privacy aspects of “domotics” i.e. IoT things at home. Security configuration is, at best, an ad hoc activity when (some) things turn up. Security monitoring and management (e.g.

IoT 63

IoT InfoSec Risk Security Awareness 63

Security Boulevard

MAY 20, 2021

CybeReady’s Hi-5 brings together InfoSec leaders for peer-to-peer sharing via five short questions and insights. Dmitriy Sokolovskiy has been working in the cybersecurity space for over 14 years in dedicated security roles, in addition to 9 more years working in various IT areas.

CISO 58

CISO Technology InfoSec Information Security 58

Security Boulevard

MAY 4, 2021

CybeReady’s Hi-5 brings together InfoSec leaders for peer-to-peer sharing via five short questions and insights. She held Audit and Security leadership roles in leading European companies. In 2014 she founded WITSEC, a professional group of women working in IT and Information Security […].

CISO 52

CISO InfoSec Information Security Cybersecurity 52

SC Magazine

MAY 1, 2021

Prior to Mastercard, Abdullah was the chief information security officer at Xerox, where she established and led a corporate-wide information risk management program. She also served as the deputy chief information officer of the White House. She is also the host of the Mastering Cyber podcast.

Computers and Electronics 126

Computers and Electronics Technology Education Information Security 126

Security Boulevard

NOVEMBER 26, 2023

In this episode, Tom shows off AI generated images of a “Lonely and Sad Security Awareness Manager in a Dog Pound” and the humorous outcomes. The conversation shifts to Apple’s upcoming support for Rich Communication Services (RCS) and the potential security implications.

Scams 58

Scams Security Awareness Social Engineering Data privacy 58

Notice Bored

JULY 4, 2022

This is bewildering, scary stuff, especially for relatively inexperienced infosec or cybersecurity professionals who seldom set foot outside of the IT domain. At the CISO, Information Security Manager or Privacy Officer level, the view is no less scary despite narrower knowledge gaps. Documented! Maintained!

Risk 72

Risk Accountability InfoSec CISO 72

Notice Bored

AUGUST 18, 2020

Some time back I bumped into a handy management guide on information risk - a double-sided leaflet from the I nformation A ssurance A dvisory C ouncil. Sound advice like this is valuable both as it stands, and as a basis to develop awareness materials, strategies, policies and procedures.

Risk 85

Risk Security Awareness Government Information Security 85

The Falcon's View

AUGUST 29, 2017

The focus of the boot camp was around "behavior design," which was suggested to me by a friend who's a leading expert in modern, progress security awareness program management. I concluded that maybe this sub-field would be called something like "behavioral security" and started doing searches on the topic.

Information Security 45

Information Security InfoSec Social Engineering Security Awareness 45

Notice Bored

AUGUST 23, 2020

Oh no, it's more circumspect: the standard says "the organization shall determine the need for internal and external communications relevant to the information security management system". on security awareness which is already in the plan anyway: maybe we should mention A.7.2.2 in the preamble though.

Information Security 52

Information Security Security Awareness Security Performance Risk 52

Security Boulevard

APRIL 28, 2024

In episode 327 Tom, Scott, and Kevin discuss the findings from Mandiant’s M-Trends 2024 report, highlighting a significant rise in traditional vulnerability exploitation by attackers while observing a decline in phishing. Despite phishing’s decreased prevalence, it remains the second most popular method for gaining initial network access.

Phishing 63

Phishing Data privacy Passwords Technology 63

SC Magazine

FEBRUARY 26, 2021

Building a security awareness training program to develop a strong infosec culture requires time and money, and chief information security officers frequently try to make a case for such an investment by citing return on investment and other metrics of success. .” Christiaan Colen / CC BY-SA 2.0 ).

CISO 88

CISO Security Awareness Phishing InfoSec 88

Security Boulevard

MARCH 19, 2023

We cover how empathy relates to cybersecurity in the industry, the importance of being empathetic in our roles as […] The post Exploring the Role of Empathy in Cybersecurity with Andra Zaharia appeared first on The Shared Security Show.

Cybersecurity 95

Cybersecurity Data privacy Technology Security Awareness 95

Security Boulevard

SEPTEMBER 10, 2023

Finally, we […] The post The FBI’s Qakbot Takedown, QR Code Phishing Attacks, Dox Anyone in America for $15 appeared first on Shared Security Podcast. In this episode we discuss the FBI’s remarkable takedown of the Qakbot botnet, a saga involving ransomware, cryptocurrency, and the FBI pushing an uninstaller to thousands of victim PCs.

Phishing 74

Phishing Cryptocurrency Ransomware Social Engineering 74

Security Boulevard

APRIL 24, 2022

Award-winning security transformation manager and digital anthropologist Lianne Potter joins us to discuss the fascinating topic of digital anthropology and how we can rehumanize cybersecurity.

Cybersecurity 98

Cybersecurity Security Awareness Technology InfoSec 98

Security Boulevard

DECEMBER 3, 2023

In this episode, noteworthy guest Tanya Janca returns to discuss her recent ventures and her vision for the future of Application Security. Tanya sheds light on her decision to partner […] The post Application Security Trends & Challenges with Tanya Janca appeared first on Shared Security Podcast.

Data privacy 58

Data privacy Technology Security Awareness InfoSec 58

Security Boulevard

JUNE 18, 2021

The post The Business Value of the Social-Engineer Phishing Service appeared first on Security Boulevard. Phishing attacks continue to plague organizations across the globe with great success, but why? Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an.

Social Engineering 102

Social Engineering Engineering Phishing Penetration Testing 102

Security Boulevard

APRIL 10, 2022

The post Truths and Myths of Privacy, Fake Shopping Apps, Borat RAT Malware appeared first on The Shared Security Show. Scott and Tom explain why privacy isn’t dead, why should everyone should care about their privacy, and how you should respond to someone that says “I don’t care about privacy, I have nothing to hide!”.

Malware 98

Malware Social Engineering Scams Engineering 98

Security Boulevard

JULY 2, 2023

Several major organizations, including British Airways and the BBC, fell victim to the recent MOVEit cyberattack. We discuss the alarming trend of hackers targeting trusted suppliers to gain access to customer data, potentially holding companies and individuals for ransom.

Passwords 52

Passwords Data breaches Data privacy Technology 52

Security Boulevard

APRIL 30, 2023

In this episode we speak with Kai Roer, a renowned author, security culture coach, and CEO of Praxis Security Labs. Kai shares his career journey in cybersecurity and emphasizes the importance of building a strong security culture within organizations.

Cybersecurity 52

Cybersecurity Data privacy Technology Security Awareness 52

Security Boulevard

MAY 14, 2021

Welcome to the Ask Chloé column on Security Boulevard! Each week, Chloé provides advice to readers’ questions to help guide them as they navigate the technology industry. This week, Chloé answers questions about the use of the term ‘cyber’ and how to best start implementing diversity, equity and inclusion best practices.

Technology 86

Technology Marketing CISO Security Awareness 86

Security Boulevard

DECEMBER 8, 2021

The post Business Email Compromise Scams appeared first on The Shared Security Show. This month we discuss Business Email Compromise (BEC) scams. What are they, how to identify them, and why BEC scams have created over $1.8 link] 64 times worse than ransomware? FBI statistics underline the […].

Scams 58

Scams Ransomware Security Awareness InfoSec 58

Notice Bored

MAY 14, 2022

The 'obvious' driver for information security is information risk: valuable yet vulnerable information must be secured/protected against anything that might compromise its confidentiality, integrity or availability, right? What does management want/expect out of information security?

Information Security 116

Information Security Risk Healthcare Government 116