Tag: Cybersecurity
-
A Security Framework Cheat Sheet

Working in Governance, Risk, and Compliance involves understanding security frameworks’ purpose and application. This cheat sheet organizes frameworks into four categories: risk governance, control catalogs, certifiable standards, and laws. Key frameworks include NIST, ISO, and PCI DSS. Learning the underlying controls makes each framework clearer. Ultimately, organizations should prioritize genuine security over mere compliance, as…
-
“What to Do When You’re Hacked: A Plain-English Incident Response Guide”

Maybe someone just called you indicating that they received an email from you that seemed odd. Or, maybe your bank is indicating that you made a transaction that you know you didn’t make and your account’s balance is a little lower as a result. Or maybe your PC is indicating that your files are encrypted…
-
Vendor Security Questionnaire
Contact Information Company Name: _____________________________________________________________________ Respondent Name: _________________________________ Phone: _________________________ Respondent Business Email Address: ______________________________________________________ Respondent Title: ______________________________________________________________________ Incident Response Contact Name: _________________________________________________________ Incident Response Contact Title: ___________________________________________________________ Incident Response Contact Phone: _________________________________________________________ Incident Response Contact Email Address: ___________________________________________________ Basics & Email Security Yes No Yes No Yes No Yes No Yes No Yes No…
-
Cybersecurity Frameworks
I just did a post about my experience with the GRC Masterclass that Dr. Gerald Auger created. It was a great class and I highly recommend taking the class. With this post though, I wanted to highlight some of the major frameworks and give a general overview (and honestly a nice set of links to…
-
GRC Masterclass

I took an online Teachable class with Dr. Gerald Auger on how to be a GRC Analyst. I’m actually really glad I took this course. The class is less than 8 hours, but does a great job of helping equip an individual on how to be a GRC Analyst. The Title of the class is…
-
Planting the Flag
When America landed on the moon, one of the first things we did was to plant a flag. When an embassy is erected, one of the first things placed over the building is a flag. And when a military takes ground in a battle or a scouting troop leads a parade, one of the things…
-
Educational Freebies
Cisco: Cisco is presently offering courses for free. Their introduction to cybersecurity can be found here: https://www.netacad.com/courses/cybersecurity/introduction-cybersecurity. They have a Cybersecurity Essentials course here as well: https://www.netacad.com/courses/cybersecurity/cybersecurity-essentials. They also have a Networking Essentials course here: https://www.netacad.com/courses/networking/networking-essentials. Oracle: Oracle Cloud Infrastructure is offering their courses and certifications free through December 31st. You can find out more…
-
SOC
SOC (Security Operations Center) is essentially going to be necessary for any company in today’s world. Whether that’s just the only employee regularly running through a checklist that reviews the antivirus, backing up data, and making sure nothing is broken, or whether that’s a dedicated team of professionals who spend all day reviewing a company’s…
-
Tools To Learn
I love to learn. I think it’s a natural part of growth. But learning is more than just an opportunity to grow. It’s an opportunity to help others; something that they may need or benefit from. It’s an opportunity to equip; preparing for the worst and hoping for the best. And I would guess, that…



You must be logged in to post a comment.