https://ladybug-carillon-7k6n.squarespace.com/blog daily 0.75 2024-09-17 https://ladybug-carillon-7k6n.squarespace.com/blog/evolution-of-the-ciso monthly 0.5 2024-08-20 https://ladybug-carillon-7k6n.squarespace.com/blog/reflecting-on-database-compromises monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8ad2d892-1b0f-4d09-a88b-448dff96e3aa/_bf1d62b2-5dfb-4882-a133-71a6b2c4e18b.jpg Blog - Reflecting on Database compromises - Make it stand out Fig. 1: Actual photograph of the Oracle towers in Redwood Shores, California. No, really. https://ladybug-carillon-7k6n.squarespace.com/blog/ai-and-jobs monthly 0.5 2024-09-23 https://ladybug-carillon-7k6n.squarespace.com/blog/incident-report-writing monthly 0.5 2024-09-20 https://ladybug-carillon-7k6n.squarespace.com/blog/wearables-and-health-devices monthly 0.5 2024-09-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f71e8f9a-106a-409b-bb3e-73f4aaf5ca88/wearables-and-health.png Blog - Wearables and Health Devices - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/blog/mitre-attampck-g0007-fancy-bears monthly 0.5 2024-09-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b2621392-04cb-4a53-8cd3-6499ef675ec1/bears-4.jpg Blog - MITRE ATT&CK G0007: fancy bears - Make it stand out Fig. 1: What Fancy Russian bears might look like. https://ladybug-carillon-7k6n.squarespace.com/blog/dark-web-surveilance monthly 0.5 2024-09-18 https://ladybug-carillon-7k6n.squarespace.com/blog/exploding-pagers monthly 0.5 2024-09-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c0ee26c4-da26-4dc7-9672-9eb991044b53/auditor-8.jpg Blog - Exploding Pagers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/blog/internet-research-agency-ira-russia monthly 0.5 2024-09-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/03c8e059-8a0d-4731-ad0a-65bfb9ba7f7b/ira-4.jpg Blog - INTERNET RESEARCH AGENCY (IRA, RUSSIA) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/blog/russian-gru monthly 0.5 2024-09-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3b7a1b35-75d7-4113-924a-8936ebd1bda8/kgb-2.jpg Blog - The Russian GRU - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/blog/art-of-ethical-hacking3 monthly 0.5 2024-09-14 https://ladybug-carillon-7k6n.squarespace.com/blog/strontium-russia-gru monthly 0.5 2024-09-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/11c7a08e-f795-4cd0-8878-ee78d210c827/strontium-4.jpg Blog - STRONTIUM, RUSSIA and the GRU - Make it stand out Fig. 1: A slightly different Fortress of Solitude https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3f482cf2-a7ea-4844-9762-0cd67e788764/bear-5.jpg Blog - STRONTIUM, RUSSIA and the GRU - Summary STRONTIUM, also widely known as Fancy Bear or APT28, is a highly sophisticated Russian advanced persistent threat (APT) group. This notorious cyber espionage unit is believed to be closely linked to Russia's military intelligence agency, the General Staff Main Intelligence Directorate (GRU), specifically its 85th Main Special Service Center (GTsSS) military unit 26165. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/865deddf-f8e2-43e5-a496-441e00841b9a/court-1.jpg Blog - STRONTIUM, RUSSIA and the GRU - Historical Information Mid-2000s: STRONTIUM becomes active. 2016: The group gains notoriety for its role in the U.S. presidential election, targeting the Democratic National Committee (DNC) and Hillary Clinton's campaign. 2018: The U.S. indicts several GRU officers associated with STRONTIUM for their involvement in the 2016 election interference (MITRE ATT&CK) https://ladybug-carillon-7k6n.squarespace.com/blog/ransomware-response-playbooks monthly 0.5 2024-09-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/90498548-17e5-4580-8533-a18641260f2c/data-flow-4.jpg Blog - RANSOMWARE RESPONSE AND PLAYBOOKS - Introduction Ransomware is a growing cyber threat requiring proactive response planning. Organizations should have playbooks outlining response procedures, conduct simulations to test readiness, invest in prevention controls, and balance legal/ethical considerations around paying ransoms. https://ladybug-carillon-7k6n.squarespace.com/blog/voodoo-bear-sandworm-apt44 monthly 0.5 2024-09-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ed8f1ed8-5de8-45a7-bd65-4fa91597cf80/sandworm-1.jpg Blog - Voodoo Bear, Sandworm, and APT44 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5c275bb7-3b89-4dc9-b3a6-f1db817cd189/voodoo-bear-1.jpeg Blog - Voodoo Bear, Sandworm, and APT44 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/bf1693e9-ee96-4df8-a681-52c0ea374058/voodoo-bear-2.jpeg Blog - Voodoo Bear, Sandworm, and APT44 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7ecfd999-266b-4b99-9630-4a91598e0583/voodoo-bear-1.jpg Blog - Voodoo Bear, Sandworm, and APT44 The 2015 attack on the Ukrainian power grid, a watershed moment in cyber warfare, exposed the vulnerability of critical infrastructure to sophisticated cyberattacks. This brazen act of sabotage not only plunged hundreds of thousands into darkness but also sent shockwaves through the international community. Western governments and cybersecurity experts condemned the attack as a reckless and destabilizing act, further straining relations between Russia and the West. The NotPetya ransomware outbreak in 2017, also attributed to Voodoo Bear, amplified these concerns. While disguised as ransomware, NotPetya was a wiper malware designed to cause widespread destruction. https://ladybug-carillon-7k6n.squarespace.com/blog/iot-devices monthly 0.5 2024-09-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1721852338349-J1NOCQZBLZIPVK9TFAVF/Investigating+Compromised+IoT+Devices.jpg Blog - INVESTIGATING COMPROMISED IOT DEVICES The proliferation of connected IoT and OT devices in industrial, medical, and other environments has introduced new response challenges when breaches occur. Legacy devices often lack security controls and monitoring, forcing responders to cautiously inspect compromised systems to avoid operational disruption. https://ladybug-carillon-7k6n.squarespace.com/blog/the-equation-group-p2ktr monthly 0.5 2024-09-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/248b7717-5ad7-42c3-9f9c-5801f7d66b95/123_1.jpeg Blog - Bitcoin Scammer Baiting - Having fun with Fraudsters I do not encourage anyone to do this. But when I get particularly sill, odd, or slightly unusual messages, I like to share. https://ladybug-carillon-7k6n.squarespace.com/blog/cloud-security-monitoring monthly 0.5 2024-09-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8c49a5da-47a0-47a1-82c2-13d7e91fde5b/_672240e6-dab0-408c-a9ee-9dc8909c13bc.jpg Blog - Cloud Security Monitoring However, it's crucial to recognize that not all attacks can be discovered solely through cloud resource monitoring. Sophisticated threats that exploit zero-day vulnerabilities or use advanced evasion techniques may slip through traditional detection methods. Moreover, attacks targeting on-premises components in hybrid environments or endpoints outside the cloud perimeter may remain invisible to cloud-centric monitoring solutions. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409458026-D7G01L2RSVTI3TG4M6OR/alt_2_Access+Control.jpg Blog - Cloud Security Monitoring Furthermore, effective cloud security monitoring extends beyond just tool implementation. It requires a holistic approach that includes robust identity and access management, regular vulnerability assessments, and continuous compliance monitoring. Organizations should also focus on developing cloud-specific incident response plans that account for the unique challenges of investigating and containing threats in distributed, ephemeral environments. https://ladybug-carillon-7k6n.squarespace.com/blog/the-equation-group monthly 0.5 2024-09-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d2ede0c5-0e66-43c9-99d1-9f64c922618f/nsa-1.jpg Blog - The Equation Group - Equation Group The Equation Group is a highly sophisticated advanced persistent threat (APT) group, suspected of being linked to the Tailored Access Operations (TAO) unit of the U.S. National Security Agency (NSA). Discovered by Kaspersky Lab in 2015, the group has been active since at least 2001 and is known for its advanced techniques and tools https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/bfb1ea98-b65a-495b-82c4-6bc88d2747c5/analyst-17.jpg Blog - The Equation Group - Techniques and Tactics The Equation Group uses a variety of techniques, including: Zero-Day Exploits: Utilizing previously unknown vulnerabilities. Encryption: Extensive use of encryption algorithms like RC5 and RC6. Firmware Reprogramming: Reprogramming hard drive firmware to create hidden storage. Self-Destruct Mechanisms: Ensuring malware can self-destruct to avoid detection (Wikipedia Council on Foreign Relations) https://ladybug-carillon-7k6n.squarespace.com/blog/iso-27001-and-the-art-of-translating-policy-into-practice monthly 0.5 2024-09-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8addcd1d-1fa1-42c0-b031-c2b869581058/auditor-8.jpg Blog - ISO 27001 and the Art of Translating Policy into Practice Take, for instance, a policy requiring multi-factor authentication (MFA) for all critical systems. When well-implemented, this translates seamlessly into technical controls: MFA is enabled across the board, exceptions are rigorously documented and reviewed, and management metrics track adoption rates and security incidents prevented. It's a textbook example of policy informing practice. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723356623268-S74NO6F7OJZ7J3BXWOQW/Audit+Log+Monitoring.jpg Blog - ISO 27001 and the Art of Translating Policy into Practice First and foremost, we need to embrace a collaborative approach to policy development. Bring technical teams into the conversation early. Their practical insights can help shape policies that are both ambitious and achievable. This isn't about lowering the bar – it's about ensuring the bar is set at the right height. https://ladybug-carillon-7k6n.squarespace.com/blog/developing-relationships-with-governments monthly 0.5 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/blog/rbac-and-auth monthly 0.5 2024-09-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f4eb7d0d-a086-4b2e-8d54-a44594e169ed/access-4.jpg Blog - RBAC and Auth MacOS environments offer RBAC through a combination of local user management and directory services like Open Directory or integration with Active Directory. The concept of user groups is central to MacOS RBAC, with file system permissions and application access controlled through these groups. A key consideration in MacOS environments is the balance between local and network-based authentication, especially in organizations with a mix of on-site and remote workers. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/28f90b73-b201-40ba-99cb-f62ff8c83a52/access-3.jpg Blog - RBAC and Auth Moving to cloud environments, RBAC takes on new dimensions of complexity. In AWS, Identity and Access Management (IAM) is the cornerstone of RBAC, allowing fine-grained control over access to AWS services and resources. IAM policies, which are JSON documents defining permissions, can be attached to users, groups, or roles. A critical best practice in AWS is the use of IAM roles for EC2 instances and other AWS services, rather than embedding access keys in application code. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/689dfc13-d3b0-4b93-b263-9367aec7f8a7/auditor-6.jpg Blog - RBAC and Auth Across all these cloud platforms, a key consideration is the dynamic nature of cloud resources. Unlike traditional on-premises environments where servers and applications are relatively static, cloud resources can be created, modified, and destroyed rapidly. This necessitates a more dynamic approach to RBAC, often involving automation and infrastructure-as-code practices to ensure that access controls are consistently applied as the environment evolves. https://ladybug-carillon-7k6n.squarespace.com/blog/cybersecurity-configuration-in-the-modern-enterprise monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/09737037-8efd-4fe3-80dc-827eb6ba2c7f/staff-2.jpg Blog - Cybersecurity Configuration in the Modern Enterprise Measuring the effectiveness of these collaborative efforts often involves tracking metrics such as Time to Detection (TTD) and Time to Fix (TTF). Common tools used for this purpose include Security Information and Event Management (SIEM) systems, ticketing and incident management platforms, and specialized security analytics tools. https://ladybug-carillon-7k6n.squarespace.com/blog/building-robust-cybersecurity-with-ethical-leadership monthly 0.5 2024-08-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/4094f310-5ef4-49e2-a815-c75baeec1074/leadership-5.jpg Blog - Building Robust Cybersecurity with Ethical Leadership Imagine a world where every click, every transaction, and every digital interaction is underpinned by an unwavering sense of security and trust. This is not just a utopian vision, but a necessary foundation for the continued growth and stability of our digital society. As leaders, we have the power—and the responsibility—to turn this vision into reality. https://ladybug-carillon-7k6n.squarespace.com/blog/cybersecurity-implications-of-open-banking-and-apis monthly 0.5 2024-08-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/eeff7bda-a242-4d7b-8963-c1445d7e5f52/bank-4.jpg Blog - Cybersecurity Implications of Open Banking and APIs However, this financial renaissance comes with a host of technical challenges that strike at the heart of cybersecurity. Authentication and authorization become critical pain points as systems must verify the identity and permissions of both users and third-party applications accessing sensitive financial data. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9e97928d-8b31-4327-8795-e45ca224e7fd/bank-3.jpg Blog - Cybersecurity Implications of Open Banking and APIs The potential risks of open banking were starkly illustrated in a recent case involving FinTech Innovate, a financial aggregator that suffered a major data breach, exposing the financial data of millions of users across multiple banks. This incident not only caused immediate financial harm but also shook user trust in the entire open banking concept, highlighting the cascading effects of security vulnerabilities in an interconnected ecosystem. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3bb3764f-c17b-4d12-a33f-6874feb0783a/bank-2.jpg Blog - Cybersecurity Implications of Open Banking and APIs As we look to the future of open banking and its impact on financial cybersecurity, several key themes emerge. First, the need for a new paradigm of dynamic consent, where users have granular, real-time control over their data sharing preferences. Second, the growing importance of financial literacy and cybersecurity education as integral parts of consumer protection. https://ladybug-carillon-7k6n.squarespace.com/blog/edr-evasion-themida monthly 0.5 2024-09-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/828b9b7b-7fe5-466a-90bc-2d9e216bf6bc/Screenshot_20240829-201706.png Blog - EDR Evasion, Themida - Binary Packers, Signatures, Oh My Sometimes you see old friends in the weirdest places. https://ladybug-carillon-7k6n.squarespace.com/blog/dv1d5in9s8bbvt9v3f0d07g59vm8e0 monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/433c1323-6a01-48ed-ba6c-dec2e073c81e/auditor-11.jpg Blog - Blockchain Security Auditing for Financial Applications The psychology of security in decentralized systems adds another layer of complexity. Trust dynamics in blockchain networks operate differently from traditional systems, relying on cryptographic proof rather than social or institutional trust. This shift can lead to an illusion of invulnerability among users and developers, potentially resulting in overlooked vulnerabilities or underestimated risks. https://ladybug-carillon-7k6n.squarespace.com/blog/apt-events-groups monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e4ab9a5f-c824-4f7f-9e34-2e4845783b0d/macau-china-4.jpg Blog - APT Events, Groups - Macau Government Websites DDoS Attack Fig. 1: Absolutely real photograph of Macau, China. I took it myself. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/17bba242-09d5-41da-b4f3-5d699743c1b4/train-3.jpg Blog - APT Events, Groups - Iran's Railway Company APT Attack Fig. 2: Taken with a vintage 60's era Leica, standard lens https://ladybug-carillon-7k6n.squarespace.com/blog/telegram-durov-putin monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/67277e4e-5111-468f-ac93-021118ed4c12/facepalm-3.jpg Blog - Telegram, Durov, Putin - Make it stand out Fig. 1: The Internets Reaction. Taken from a US plane parked over the 'stans. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f6aa2ce8-2b19-4dd7-a7f3-d20d2e16713a/30ca5e64766b8ccfeb016aeed6e29b86.jpeg Blog - Telegram, Durov, Putin - Make it stand out Fig. 2: My actual reaction https://ladybug-carillon-7k6n.squarespace.com/blog/advanced-threat-hunting-with-siems-part-2-df2jh monthly 0.5 2024-08-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722739104855-WZXKCRX9JDMJNVJ1K2ZZ/Software+Deployment+Tools.jpg Blog - Advanced Threat Hunting with SIEMS, part 4 Integration of SIEM with other security tools is crucial for creating a comprehensive and efficient security ecosystem. By connecting your SIEM with technologies like SOAR, UEBA, and EDR, you can enhance threat detection capabilities, automate responses, and gain deeper insights into user behaviors and endpoint activities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/67f2086d-3403-4603-9cc8-f448a500272d/lstripSecurity+Awareness+Training.jpg Blog - Advanced Threat Hunting with SIEMS, part 4 Performance metrics are essential for evaluating the effectiveness of your SIEM and threat hunting operations. They provide quantifiable insights into your security posture, help identify areas for improvement, and demonstrate the value of your security investments. Properly implemented metrics enable data-driven decision-making and continuous enhancement of your security operations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7a0351aa-d3cd-4481-a810-849f118f203d/_e7838f1b-2961-44ec-a97a-6110616f13a7.jpg Blog - Advanced Threat Hunting with SIEMS, part 4 Automation and orchestration are key components in modern security operations, enabling teams to handle the increasing volume and complexity of security events efficiently. By automating routine tasks and orchestrating complex workflows, security teams can focus on high-value activities, reduce response times, and improve consistency in threat management. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0c5b6d2e-d6f8-4af5-b72c-d3fe578d2f5a/Maintenance+of+Security+Policies+and+Procedures.jpg Blog - Advanced Threat Hunting with SIEMS, part 4 A hypothesis-driven approach to threat hunting involves formulating and testing specific theories about potential threats in your environment. This method combines the power of human intuition and expertise with data-driven analysis, allowing for targeted and efficient threat detection that goes beyond traditional rule-based alerting. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8a5e9c54-a203-48c6-ac15-b27ca3e2dfc9/Third-Party+Service+Providers.jpg Blog - Advanced Threat Hunting with SIEMS, part 4 Advanced features utilization in SIEM and threat hunting involves leveraging cutting-edge technologies like artificial intelligence, machine learning, and advanced correlation techniques. These tools can significantly enhance your ability to detect complex threats, predict potential attacks, and uncover subtle anomalies that might otherwise go unnoticed. https://ladybug-carillon-7k6n.squarespace.com/blog/advanced-threat-hunting-with-siems-853bw monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/cfb17226-425c-4b98-bf44-6e1062e4a22a/Data-at-rest+is+protected.jpg Blog - Advanced Threat Hunting with SIEMs, Part 3 Correlation rules are the backbone of effective threat detection in SIEM systems. They allow you to combine multiple data points and events to identify complex attack patterns that might not be apparent when looking at individual logs. By developing sophisticated, multi-stage detection rules and implementing risk scoring mechanisms, you can significantly enhance your ability to detect and prioritize potential threats in your environment. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5172443d-1aca-49c9-90bf-fd378a7183a8/Data+Mining+Protection.jpg Blog - Advanced Threat Hunting with SIEMs, Part 3 Anomaly detection is a crucial component of advanced threat hunting, leveraging the power of machine learning and artificial intelligence to identify unusual patterns that may indicate security threats. This approach goes beyond traditional rule-based detection, allowing you to uncover subtle, previously unknown threats by recognizing deviations from normal behavior in your environment. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/75fbc0fc-bc13-4487-9e4f-dab4444f7a0f/Incident+Response+and+Management.jpg Blog - Advanced Threat Hunting with SIEMs, Part 3 Incident response is a critical component of any comprehensive threat hunting strategy, enabling swift and effective action when potential threats are identified. A well-structured incident response process can significantly reduce the impact of security incidents, minimize downtime, and prevent further damage to your organization's assets and reputation. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c52609c6-33f9-4850-8d63-4a27c96a2d53/Audit+Log+Monitoring.jpg Blog - Advanced Threat Hunting with SIEMs, Part 3 Continuous monitoring forms the bedrock of effective threat hunting, providing a constant stream of data and insights about your environment's security status. This proactive approach allows for real-time threat detection, ongoing situational awareness, and the ability to quickly identify and respond to potential security incidents before they escalate. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ad8226ff-8cbc-4233-a08e-8a5bf8bef40a/data-flow-8.jpg Blog - Advanced Threat Hunting with SIEMs, Part 3 Regular updates are crucial in maintaining the effectiveness of your SIEM and threat hunting capabilities. In the ever-evolving landscape of cybersecurity, staying current with the latest software versions, detection techniques, and threat intelligence is essential to defend against new and emerging threats. https://ladybug-carillon-7k6n.squarespace.com/blog/advanced-threat-hunting-with-siems-part-2 monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723961499709-4ZY05HLGCTG0CSZDDQ3P/sun-tsu-2.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 - The Art of War Part 2, in the digital age, these words resonate deeply with cybersecurity professionals engaged in the constant battle against evolving threats. Advanced threat hunting with Security Information and Event Management (SIEM) systems embodies this proactive approach, transforming defensive postures into offensive strategies against cyber adversaries. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1f626e08-119b-46bf-a4f6-1c6e11ccc3f0/staff-4.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Staff training is a critical component of any effective threat hunting program. Well-trained personnel are your most valuable asset in detecting and responding to sophisticated cyber threats. Continuous education and skill development ensure that your team stays ahead of evolving attack techniques and can effectively leverage your SIEM and other security tools. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/799d5a71-2b2a-4221-a3f5-13a041a93665/compliance-2.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Compliance adherence is a critical aspect of threat hunting and SIEM management, especially in heavily regulated industries. It involves aligning your security practices with various legal and industry-specific requirements while maintaining effective threat detection and response capabilities. Proper compliance management not only helps avoid legal issues but can also provide a structured framework for enhancing overall security posture. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e659a0d2-3ad3-4cbe-9550-f3155cc4a3bd/Log-in+Monitoring.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Log management is a fundamental aspect of effective threat hunting and SIEM operations. It involves the systematic collection, storage, and analysis of log data from various sources across your IT infrastructure. Proper log management not only supports threat detection and incident response but also plays a crucial role in compliance, forensics, and overall IT operations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/604a0888-c2b4-4c94-a5b6-b78a802c8de9/Incident+alert+thresholds+are+established.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Alert fine-tuning is a critical process in maximizing the effectiveness of your SIEM and threat hunting operations. It involves continuously refining your alert mechanisms to reduce noise, prioritize significant threats, and ensure that your security team focuses on the most important issues. Proper alert tuning can dramatically improve your ability to detect and respond to real threats while minimizing false positives and alert fatigue. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/6fb2fd9e-c3d6-43d1-8752-ac8e334980ab/bear-8.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Proactive threat hunting is an advanced security practice that goes beyond traditional reactive measures. It involves actively searching for hidden threats that have evaded existing security controls. This approach allows security teams to uncover sophisticated attacks, improve defenses, and stay ahead of evolving threats. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722739104855-WZXKCRX9JDMJNVJ1K2ZZ/Software+Deployment+Tools.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Integration of SIEM with other security tools is crucial for creating a comprehensive and efficient security ecosystem. By connecting your SIEM with technologies like SOAR, UEBA, and EDR, you can enhance threat detection capabilities, automate responses, and gain deeper insights into user behaviors and endpoint activities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/67f2086d-3403-4603-9cc8-f448a500272d/lstripSecurity+Awareness+Training.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Performance metrics are essential for evaluating the effectiveness of your SIEM and threat hunting operations. They provide quantifiable insights into your security posture, help identify areas for improvement, and demonstrate the value of your security investments. Properly implemented metrics enable data-driven decision-making and continuous enhancement of your security operations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7a0351aa-d3cd-4481-a810-849f118f203d/_e7838f1b-2961-44ec-a97a-6110616f13a7.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Automation and orchestration are key components in modern security operations, enabling teams to handle the increasing volume and complexity of security events efficiently. By automating routine tasks and orchestrating complex workflows, security teams can focus on high-value activities, reduce response times, and improve consistency in threat management. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0c5b6d2e-d6f8-4af5-b72c-d3fe578d2f5a/Maintenance+of+Security+Policies+and+Procedures.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 A hypothesis-driven approach to threat hunting involves formulating and testing specific theories about potential threats in your environment. This method combines the power of human intuition and expertise with data-driven analysis, allowing for targeted and efficient threat detection that goes beyond traditional rule-based alerting. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8a5e9c54-a203-48c6-ac15-b27ca3e2dfc9/Third-Party+Service+Providers.jpg Blog - Advanced Threat Hunting with SIEMS, part 2 Advanced features utilization in SIEM and threat hunting involves leveraging cutting-edge technologies like artificial intelligence, machine learning, and advanced correlation techniques. These tools can significantly enhance your ability to detect complex threats, predict potential attacks, and uncover subtle anomalies that might otherwise go unnoticed. https://ladybug-carillon-7k6n.squarespace.com/blog/regulatory-compliance-challenges-in-fintech-cybersecurity monthly 0.5 2024-08-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1d81ad97-3c26-4fd4-b174-c57b87905749/_8ed68ab4-e86c-4089-9d78-2fc597dc4a5b.jpg Blog - Regulatory Compliance Challenges in Fintech Cybersecurity At the heart of these challenges lies the constant struggle to keep pace with evolving regulations. As governments and regulatory bodies scramble to address the unique risks posed by fintech, companies find themselves in a perpetual state of adaptation. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/14161f72-185c-4be5-8937-f2d2b21fdfad/virtual-8.jpg Blog - Regulatory Compliance Challenges in Fintech Cybersecurity As we look to the future of regulatory compliance in fintech, several key themes emerge. First, the need for adaptive and principle-based regulations that can keep pace with technological innovation. Second, the growing importance of ethical considerations in shaping both regulations and corporate policies. And third, the critical role of education and awareness in fostering a culture of compliance and security within fintech organizations. https://ladybug-carillon-7k6n.squarespace.com/blog/advanced-threat-hunting-with-siems monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c15e789f-07a8-412c-b63c-96142a9918d6/sun-tsu-1.jpg Blog - Advanced Threat Hunting with SIEMs, Part 1 - The Art of War In the digital age, these words resonate deeply with cybersecurity professionals engaged in the constant battle against evolving threats. Advanced threat hunting with Security Information and Event Management (SIEM) systems embodies this proactive approach, transforming defensive postures into offensive strategies against cyber adversaries. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/75fbc0fc-bc13-4487-9e4f-dab4444f7a0f/Incident+Response+and+Management.jpg Blog - Advanced Threat Hunting with SIEMs, Part 1 Understanding your environment is the foundation of effective threat hunting. It involves creating a comprehensive map of your digital landscape, including all assets, network connections, and data flows. This knowledge allows you to identify potential vulnerabilities, prioritize your security efforts, and quickly spot anomalies that could indicate a threat. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/71db80f1-65d6-4d74-9222-1c823b7bf8fc/lstripInstallation+of+Security+Patches.jpg Blog - Advanced Threat Hunting with SIEMs, Part 1 Collecting comprehensive data is a crucial step in effective threat hunting. It involves gathering logs and telemetry from all critical systems across your environment, including endpoints, network devices, servers, and cloud services. This holistic approach to data collection provides the raw material needed for in-depth analysis and threat detection, allowing you to piece together the full picture of potential security incidents. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/208cb728-dbdf-4073-8fcd-c4d1d8014367/lstripData+Mining+Protection.jpg Blog - Advanced Threat Hunting with SIEMs, Part 1 Data normalization is a critical process in threat hunting that involves transforming diverse log formats into a standardized structure. This uniformity allows for easier correlation, analysis, and searching across different data sources. By implementing a common event schema and enriching data with additional context, you create a more cohesive and insightful dataset for threat detection and investigation. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7e614103-2c6a-43c8-8e7d-33cbf0176d43/lstripProtect+Information.jpg Blog - Advanced Threat Hunting with SIEMs, Part 1 Threat intelligence integration is a pivotal component of advanced threat hunting, providing crucial context and indicators to guide your investigations. By incorporating diverse threat feeds and correlating them with your internal telemetry, you can significantly enhance your ability to detect and respond to emerging threats. This process involves not just consuming threat data, but actively applying it to your specific environment and use cases. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e5ef9094-69c7-4b71-96a6-13d8bd7a2268/Vulnerability+Management.jpg Blog - Advanced Threat Hunting with SIEMs, Part 1 Behavioral analysis is a sophisticated approach to threat hunting that focuses on identifying anomalies in user, system, and network activities. By establishing baselines of normal behavior and leveraging advanced analytics techniques, you can detect subtle deviations that may indicate potential security threats. This method is particularly effective in uncovering insider threats, compromised accounts, and advanced persistent threats that might evade traditional signature-based detection. https://ladybug-carillon-7k6n.squarespace.com/blog/blackcat monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a2e9db89-2fbc-4998-a115-535d6424ba69/cat-1.jpg Blog - BlackCat Ransomware BlackCat's rise to prominence is a testament to the evolving ransomware landscape. Operating on a Ransomware-as-a-Service (RaaS) model, the group has effectively franchised cybercrime, lowering the barrier to entry for aspiring cybercriminals while maintaining a high level of operational security. This business model has allowed BlackCat to scale its operations rapidly, targeting a diverse array of victims across multiple sectors. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/620e2f30-823c-48e5-b419-fccea394c64b/cat-3.jpg Blog - BlackCat Ransomware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/blog/the-evolving-landscape-of-fintech monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/30d39386-805b-4b90-97e1-e6fb46106c6e/bank-2.jpg Blog - Klarna, & The Evolving Landscape of Fintech In the ever-shifting terrain of financial technology, recent developments have underscored the sector's volatility and potential for transformation. The industry has witnessed the closure of promising startups Tally and Score, while simultaneously observing established player Klarna's bold foray into traditional banking. These events collectively paint a nuanced picture of the fintech ecosystem's current state and future trajectory. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e265cc7a-ec9f-4aa0-a662-0577fc203470/bank-3.jpg Blog - Klarna, & The Evolving Landscape of Fintech However, Klarna's expansion into banking is not without its challenges. The company will need to navigate a complex regulatory landscape, including compliance with the European Union's Payment Services Directive 2 (PSD2) and the General Data Protection Regulation (GDPR). Additionally, as Klarna moves into traditional banking services, it may face scrutiny under Basel III regulations, which set stringent capital requirements for banks to ensure their stability. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a82b456a-696e-4e81-82aa-e0f73bdb9053/bank-1.jpg Blog - Klarna, & The Evolving Landscape of Fintech Furthermore, Klarna's entry into banking opens up access to more stable funding sources. Traditional banking activities, such as taking deposits, provide a reliable and often lower-cost source of capital compared to the venture funding and debt financing that many fintechs rely on. This shift could significantly improve Klarna's long-term financial stability and profitability. For context, traditional banks often enjoy a cost of funds rate of 0.5-2%, while fintechs might pay 5-10% or more for their capital. https://ladybug-carillon-7k6n.squarespace.com/blog/cryptocurrency-the-frontier-of-trust-vulnerability-and-justice monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/38404bf8-263d-4447-824d-84b8c1936089/blockchain-1.jpg Blog - Cryptocurrency: The Frontier of Trust, Vulnerability, and Justice Solana, with its high-speed, low-cost transactions, represents the next evolution in blockchain technology. Its Proof of History consensus mechanism aims to solve the blockchain trilemma of security, decentralization, and scalability. However, Solana's repeated network outages highlight the challenges of maintaining stability in high-performance blockchain networks, reminding us that the quest for speed must not come at the cost of reliability. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/94202154-42ea-4431-8385-241eb8d78381/blockchain-2.jpg Blog - Cryptocurrency: The Frontier of Trust, Vulnerability, and Justice The philosophical debate surrounding blockchain as a path to a more just financial system is complex and nuanced. Proponents argue that cryptocurrencies democratize finance, providing access to banking services for the unbanked and undermining traditional power structures. Critics, however, point to the concentration of wealth among early adopters and the environmental impact of proof-of-work systems as evidence that cryptocurrencies may be replicating, rather than solving, existing inequalities. https://ladybug-carillon-7k6n.squarespace.com/blog/slack-ai monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/67277e4e-5111-468f-ac93-021118ed4c12/facepalm-3.jpg Blog - Slack AI In an era where digital collaboration is the lifeblood of modern business, Slack has emerged as a titan of workplace communication. With over 12 million daily active users and adoption by 65% of Fortune 100 companies, Slack's impact on corporate communication is undeniable. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/af7ca5a0-d7de-4450-8e58-74bf76888277/virtual-15.jpg Blog - Slack AI The cybersecurity community has erupted in a flurry of debate and analysis. On forums like Hacker News, experts and novices alike grapple with the implications. One user's comment encapsulates the prevalent fear: "This vulnerability undermines the very foundation of trust in AI-driven platforms." Yet, amidst the concern, there are voices of measured optimism, viewing this as an opportunity for growth and improvement in AI security protocols. https://ladybug-carillon-7k6n.squarespace.com/blog/flightaware-data-breach monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ea756dcd-f338-4dc5-95bf-316e548bec88/engineer-12.jpg Blog - FlightAware Data Breach On August 19, 2024, TechCrunch reported a significant data breach at FlightAware, a leading flight tracking service. This incident exposed sensitive customer information, including names, addresses, pilot data, and Social Security numbers, due to a system misconfiguration. The breach serves as a critical reminder of the ongoing challenges in cybersecurity and data protection. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/810f01e9-d11d-4adb-aaf1-8f71420de79c/_91d3d3ec-343a-4b31-bcaa-55eec3007666.jpg Blog - FlightAware Data Breach - Considerations and Trust This breach raises significant questions about data stewardship and corporate responsibility. Companies entrusted with sensitive information have a moral and legal obligation to implement robust security measures. The incident at FlightAware underscores the potential consequences of failing to meet these obligations. https://ladybug-carillon-7k6n.squarespace.com/blog/swarmbotics monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/99216dbf-351d-43c0-90ab-680648e674fa/auditor-12.jpg Blog - Swarmbotics In the densely populated Gaza Strip, the potential impact is even more complex. Swarm robotics could offer precision in identifying and targeting militant positions, potentially reducing civilian casualties. However, in such a tightly packed urban environment, the risks of malfunction or misidentification could be catastrophic. The ability of these swarms to navigate the intricate maze of buildings and tunnels could provide a significant tactical advantage, but it also raises serious questions about privacy and the potential for abuse. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ee03431d-cf9a-4eca-970f-f005c03252ec/analyst-13.jpg Blog - Swarmbotics https://besacenter.org/the-coming-storm-of-autonomous-war-robots-and-the-wests-dangerous-phobias/ https://responsiblestatecraft.org/ai-technology-war/ https://fpif.org/swarming-our-world/ https://www.theguardian.com/technology/article/2024/jul/14/ais-oppenheimer-moment-autonomous-weapons-enter-the-battlefield https://breakingdefense.com/2024/07/for-israel-gaza-conflict-is-evolutionary-ground-for-robotic-vehicles/ https://www.nytimes.com/2023/12/21/opinion/gaza-war-terror-ukraine.html https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/bed0f50f-9082-4036-a781-b84aefd32561/lstripProtecting+Stored+Cardholder+Data.jpg Blog - Swarmbotics - The Double-Edged Sword of Innovation The duality of Swarmbotics' innovation mirrors the broader challenges we face in AI development. Much like the struggles of chatbots to master natural conversation while excelling at structured tasks, these robotic swarms showcase impressive capabilities in certain areas while raising concerns in others. https://ladybug-carillon-7k6n.squarespace.com/blog/gemini-live monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e87191b8-6762-4d5d-9b04-a49f4d1cacc4/analyst-22.jpg Blog - Gemini, Live! Google's entry into the advanced chatbot arena with Gemini Live, aimed at rivaling OpenAI's Advanced Voice Mode, has sparked both interest and skepticism. The experience is a blend of promise and disappointment, highlighting the challenges in creating truly engaging AI conversationalists . Let’s put it bluntly, at this stage in the game, Gemini is no Stephen Fry or Winston Churchill. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8c4bbcc7-19ac-4a7a-912d-b89b0d592774/_8235e00a-8d89-4a96-9174-d15df523a957.jpg Blog - Gemini, Live! The shortcomings of Gemini Live raise important questions. An AI that provides unreliable or inconsistent information risks more than user frustration; it could potentially spread misinformation and erode trust in AI platforms. In our current information landscape, the consequences of such unreliability could be far-reaching. Hallucinations, or even simply a brusque tone—even when we, the user, understand it is a machine speaking to us—has the ability to subtlety change the way information is absorbed. https://ladybug-carillon-7k6n.squarespace.com/blog/apt-group-to-watch-isoon monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e98229ef-0608-45a1-8d38-43e4e5ad84fe/panda-3.jpg Blog - APT Group to Watch: iSOON The Chinese hacking group known as iS00N (also referred to as Deep Panda, Shell_Crew, WebMasters, KungFu_Kittens, and PinkPanther) is a sophisticated Advanced Persistent Threat (APT) group believed to be associated with the Chinese government. Because of poor operational security, a number of documents about their services, clients, and targets were leaked on Github. https://ladybug-carillon-7k6n.squarespace.com/blog/the-ai-profit-puzzle-navigating-the-new-normal monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/97c18596-a391-487f-8a11-a87572fae0e4/auditor-2.jpg Blog - The AI Profit Puzzle: Navigating the New Normal - The AI Funding Landscape: Shifting Sands of Investment The AI industry is facing a seismic shift. Aidan Gomez, CEO of Cohere, recently dropped a bombshell: selling access to AI models is becoming a "zero margin business." This revelation sends shockwaves through an industry accustomed to high-profit potential, forcing a reevaluation of business models and strategies. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/2ba7f28b-66b3-442a-a930-a78b105aae42/Boundary+Defense.jpg Blog - The AI Profit Puzzle: Navigating the New Normal - Time-to-Profitability: Elongated Horizons We might see a trend similar to the biotech industry, where large pharmaceutical companies often invest in or partner with startups to spread risk and access innovation. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9971e30d-02b5-41dc-94b3-d56f5a95f048/bank-2.jpg Blog - The AI Profit Puzzle: Navigating the New Normal - Forecasted Capital Expenditure (CapEx): Strategic Allocation AI companies will need to be more strategic in their capital expenditures as they navigate the new landscape of compressed margins. This shift will require a delicate balance between investing for future growth and maintaining financial stability in the short term. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/752efa53-e7cb-4aee-a83e-fab1f534106e/virtual-2.jpg Blog - The AI Profit Puzzle: Navigating the New Normal Following the Netflix model of investing in content delivery networks, AI companies might create their own distributed inference networks. This could involve deploying smaller, more efficient AI models closer to end-users, reducing latency and bandwidth costs. A company might invest $100-200 million over several years to build out this network, potentially reducing their operating costs by 20-30% in high-usage regions. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/eb6189a9-4e44-4d35-861c-87083d013cd1/Encryption+and+Decryption.jpg Blog - The AI Profit Puzzle: Navigating the New Normal - The Margin Squeeze: A New Reality The current landscape is dominated by tech giants like OpenAI and Anthropic, who are pouring billions into advanced AI models. Their aggressive pricing strategies are compressing margins across the board, creating a challenging environment for smaller players and startups. This race to the bottom mirrors other industries that have faced similar disruptions. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d5593e8f-30b3-41e3-b61c-260d3af350fd/Access+Control.jpg Blog - The AI Profit Puzzle: Navigating the New Normal - The Road Ahead: Balancing Innovation and Sustainability The AI industry stands at a crossroads. The challenge is not just surviving the margin squeeze but doing so while maintaining ethical standards and driving innovation. Companies that can navigate this complex landscape - balancing cost efficiency, ethical responsibility, and cutting-edge development - will be best positioned for long-term success. https://ladybug-carillon-7k6n.squarespace.com/blog/the-honking-hullabaloo-halts-waymos-quiet-revolution monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7b7fe9ac-7491-4761-96fd-9b90ba2ffb74/heavy-metal-2.jpg Blog - The Honking Hullabaloo Halts: Waymo's Quiet Revolution This may be the greatest musical act to ever grace San Francisco —Fig. 1: Honkapocalype, concert tickets now on sale https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/826d05e3-a031-436a-bf98-0cad3c6f7892/_d2ad1b3f-f76b-4118-b960-9bd77cbab905.jpg Blog - The Honking Hullabaloo Halts: Waymo's Quiet Revolution - Quiet Consequences and Future Forecasts Waymo's successful solution could set a new standard for the autonomous vehicle industry, potentially leading to quieter urban environments across the board. Moreover, this incident may serve as a catalyst for improved relationships between tech companies and the communities they operate in, emphasizing the importance of transparent testing and swift problem-solving. https://ladybug-carillon-7k6n.squarespace.com/blog/datacenter-sustainability monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/4f6470e8-0e44-40f6-9160-9ebfb5c4f996/sun-tsu-3.jpg Blog - Datacenter Sustainability - Datacenter Considerations in the Tech Gold Rush The relentless pursuit of AI development is beginning to overshadow crucial discussions about environmental sustainability. Environmentalists argue that this digital gold rush shows little regard for its environmental impact. Linda Green, a prominent environmental advocate, warns, "Sacrificing our most precious resource for technological progress without an ethical compass is not only irresponsible but potentially catastrophic for future generations." https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e1a74cbd-b247-4052-affb-b724ec23143b/_1a5e8cca-3a28-4553-842a-5c769b50bddf.jpg Blog - Datacenter Sustainability - A Call for Balanced Progress The intersection of AI advancement and water usage presents a complex challenge that we're only beginning to understand. As our reliance on digital technology deepens, we must remain mindful of the unseen resources powering our digital conveniences. The AI boom holds exciting promise, but without a sustainable approach, we risk a Pyrrhic victory. https://ladybug-carillon-7k6n.squarespace.com/blog/amd-acquiring-zt-systems monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/65e8ac1d-1b50-4484-ae3d-60120f9dcf75/datacenter-2.jpg Blog - AMD Acquiring ZT Systems - Market Dynamics This acquisition raises critical ethical questions that demand our attention. The consolidation of power may potentially stifle innovation and reduce competition in the semiconductor and AI sectors. Regulatory bodies must scrutinize this acquisition to prevent disproportionate market influence. Moreover, mergers often result in workforce restructuring, and AMD must handle this transition with transparency and empathy to mitigate job insecurity among ZT Systems employees. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/826d07f5-3cc2-4b2f-a9fb-078a8c220ec7/datacenter-3.jpg Blog - AMD Acquiring ZT Systems - Preparing for the New Tech Landscape As AI and cloud technologies evolve, pursuing certifications and continuous learning in these areas will be crucial to remain competitive. Staying informed about AMD's next steps and competitors' responses will help anticipate shifts in the job market and investment opportunities. For investors, scrutinizing how this acquisition affects various entities in the sector and adjusting investment strategies accordingly will be essential in capitalizing on the changing market dynamics. https://ladybug-carillon-7k6n.squarespace.com/blog/nvidia-ai-and-rainy-with-a-chance-of-meatballs monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/25c54000-d74f-4166-8cb0-adcdba9566dd/weather-7.jpg Blog - Nvidia, AI, and Rainy with a chance of Meatballs - StormCast The advent of AI-driven weather prediction models like NVIDIA's StormCast is poised to revolutionize our relationship with weather forecasting. As we navigate this new landscape, we must grapple with the dual nature of these technologies: their unprecedented accuracy and the inevitable presence of AI hallucinations. This duality will fundamentally alter our perception and interaction with weather information. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/98fc00d9-f866-4da0-a237-dda1ca993ea6/weather-1.jpg Blog - Nvidia, AI, and Rainy with a chance of Meatballs The possibility of having to pay a 'tax' for the most critical, life-saving weather predictions is a troubling prospect. It raises ethical questions about the commodification of potentially life-saving information. Should access to the most accurate weather forecasts be a public good, freely available to all, or will it become a premium service? This could exacerbate existing inequalities, with vulnerable populations – often the most affected by extreme weather – potentially priced out of accessing the best predictive tools. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/6575ce9e-6c82-4bac-ab0d-93a2b5c5547b/weather-6.jpg Blog - Nvidia, AI, and Rainy with a chance of Meatballs The reliability of AI models and the potential for errors or "hallucinations" raises critical questions about responsibility and trust. As thought leaders, we need to push for clear accountability structures and validation processes. Who bears responsibility if a faulty prediction leads to poor decision-making with severe consequences? We must work towards establishing robust frameworks for assessing the accuracy and reliability of these models, as well as determining liability in cases of failure. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/463659fb-7213-40f2-b995-bb9b9096b9f4/weather-8.jpg Blog - Nvidia, AI, and Rainy with a chance of Meatballs In the realm of insurance and zoning laws, AI predictions that suggest increased risks in certain areas could lead to dramatic shifts in policy. If these models predict more frequent or severe weather events in specific regions, it could result in higher insurance premiums or stricter zoning laws. This could disproportionately affect lower-income communities, potentially forcing relocations or creating "uninsurable" zones. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0e6f070a-b7c3-4ca0-b074-7fda6070a84c/weather-2.jpg Blog - Nvidia, AI, and Rainy with a chance of Meatballs As thought leaders, we must also consider the long-term societal impact of widespread reliance on predictive technologies. How might this shape our relationship with nature and our understanding of our environment? We should encourage ongoing dialogue about maintaining a balance between technological advancement and our cultural and spiritual connections to weather and climate. https://ladybug-carillon-7k6n.squarespace.com/blog/effective-security-metrics-and-kpis-for-analysts monthly 0.5 2024-08-19 https://ladybug-carillon-7k6n.squarespace.com/blog/the-new-era-of-cybersecurity-regulations monthly 0.5 2024-08-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c0ee26c4-da26-4dc7-9672-9eb991044b53/auditor-8.jpg Blog - New Era of Cybersecurity Regulations - What You Need to Know, TLDR: New SEC rules. Public companies, consult legal, risk, and audit immediately. The EU. The Cyber Resilience Act (CRA) was enacted in March 2024. Any company working with the EU must know how it affects them, and quickly. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/52740156-24b7-4b63-bbb0-c043738a4f3d/_ee81693c-9b44-4e29-b7cd-3c8eb6a51f08.jpg Blog - New Era of Cybersecurity Regulations - Early Enforcement: A Wake-Up Call The SEC isn't just talking the talk – they're walking the walk. Tech giants and financial institutions are already feeling the heat: Microsoft LoanDepot SolarWinds These companies have faced scrutiny for inadequate disclosures, signaling the SEC's commitment to enforcement. https://ladybug-carillon-7k6n.squarespace.com/blog/basic-security-python-centric-approach monthly 0.5 2024-08-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c83e16da-efa6-4198-b371-dc6b869fd34c/_25fe13cf-e3c2-458b-9350-5deb92c6c7cb.jpg Blog - Basic Security, Python-Centric Approach - Database Security Database security is crucial, as evidenced by the 2019 Capital One data breach, which exposed personal information of over 100 million individuals due to a misconfigured database. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8bdc5356-7f06-4c43-8b19-d8e67d0cdb9a/virtual-16.jpg Blog - Basic Security, Python-Centric Approach - Secure Use of Libraries Third-party libraries can introduce vulnerabilities into your codebase. The 2017 Equifax breach, which exposed personal data of 147 million people, was caused by an unpatched vulnerability in the Apache Struts framework. Struts developers unavailable for comment. https://ladybug-carillon-7k6n.squarespace.com/blog/shadow-it monthly 0.5 2024-08-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e5a3f624-7242-47e3-b8ed-5b1aa65b0876/shadow-it-2.jpg Blog - Shadow IT (Information Technology) - What Is It? Shadow IT refers to the use of information technology systems, software, devices, or applications within an enterprise without the explicit approval, knowledge, or oversight of the organization's IT department. This practice typically arises when employees or departments adopt tools or services independently to meet their specific needs, often because they perceive the official IT offerings as insufficient, too slow, or overly restrictive. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/14a0acb3-3ebf-4756-9400-d663a56c56f0/shadow-it-1.jpg Blog - Shadow IT (Information Technology) - Real-World Example An example of Shadow IT could be a marketing department using a cloud-based project management tool that the IT department hasn’t approved. The tool might offer better collaboration features than the company’s standard software, but it could also bypass corporate security protocols, making sensitive data vulnerable. https://ladybug-carillon-7k6n.squarespace.com/blog/t-minus-3-2-1 monthly 0.5 2024-08-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a3696410-4fa8-4d7b-8f6b-3fd9a72f135d/Boundary+Defense.jpg Blog - T-Minus: 3, 2, 1… - We Have Liftoff This site, japhontech.com, the quiet brainchild of Jeremy Pickett, is going live. Not all at once. The site it is far from finished, however I firmly believe that incrementally rolling it out is A Good Thing. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/2107b9f4-c8e5-4a20-ae0c-dfa423e1265a/auditor-6.jpg Blog - T-Minus: 3, 2, 1… - The Blog This is where thoughts on industry, news, and discussions of technology/ethics/morals will largely live. It is important that Cybersecurity has a rational, ethical lens, otherwise the jokes about, “How do two people keep a secret?”, or securing servers with concrete and very deep lakes just keep popping up. The application of philosophy to technology is vitally important, and keeping technology grounded with ethical and moral codes is critical. Schedule: Business days, occasional weekends. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/886dacd7-3997-4cde-ad26-402510891589/Protect+Information.jpg Blog - T-Minus: 3, 2, 1… - The Library A key part of JaphOnTech is the Library. It is a living project, with content being created, curated, and collected in sections that largely conform with goals or duties of people. For example, regulations, and exactly how they apply to people such as Engineers, Analysts, Management/Leadership, Audit, Risk, and so on. This is a subscription service aimed towards in-the-weeds types, whether they are Individual Contributors or Leads who must understand at least the broad strokes of IC’s. Schedule: Every other business day starting in September. Every business day starting in October. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/2f1d1462-6725-4253-950a-b2f2f7dc054c/alt_2_PR.AT-5%253A+Contact+Information.jpg Blog - T-Minus: 3, 2, 1… - Playbooks Also sometimes called Runbooks or Workflows, these are downloadable artifacts used by Enterprise Security or governmental agencies to guide their security processes. They provide context, history, checklists, notes, and sensitive specific details relevant to many medium-large, regulated or audited businesses. While some entertainment value may exist for home users, ultimately they are designed for teams in complex Enterprise environments that require communication and interfacing with a variety of stakeholders with varied needs. This is a subscription service, and may be tailored to your needs. Schedule: Launching in November, with several new Playbooks released per week. Market conditions, news worthy events, emerging threats will influence the order and specific release schedule. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/64fd4187-fe6c-4a6f-b60d-1b8f54c84dce/docker-4.jpg Blog - T-Minus: 3, 2, 1… - Mixed Media Video, audio, animation, tools, code, image, and the list goes on. We aim to be a force-multiplier for you and your environments, helping the community to use the tools they want to use, in the best ways possible for them. And to do that, community communication is key. So, look forward to a wealth of modalities so that all ships rise together. https://ladybug-carillon-7k6n.squarespace.com/blog/incident-response-pt-1-sqli-and-insider-data-exfil monthly 0.5 2024-08-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9e1dc2c4-d4ea-41dc-84ad-a996b30e8bb5/_8ed68ab4-e86c-4089-9d78-2fc597dc4a5b.jpg Blog - Incidents pt. 1, SQLi and Insider Data Exfil In cybersecurity, two persistent threats continue to challenge organizations and test the mettle of incident response teams: SQL injection (SQLi) attacks and insider threat data exfiltration. SQLi, a vulnerability as old as dynamic web applications themselves, remains a potent weapon in the arsenal of external attackers, exploiting the intersection of user input and database queries to potentially compromise entire systems. https://ladybug-carillon-7k6n.squarespace.com/blog/cryptography-history monthly 0.5 2024-08-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d729f7b5-16dc-4866-91c6-0dcd4bcf86e0/cryptography-history.png Blog - Cryptography, History, and Best Practices - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/mitre-library/boot-or-logon-initialization-scripts monthly 0.5 2024-09-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722836284238-MLSMUV2LK0A7X66QT6OS/Boot+or+Logon+Initialization+Scripts.jpg MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/unsecured-credentials monthly 0.5 2024-09-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722711277031-4KU04UM4KIUA5K439ZON/Unsecured+Credentials.jpg MITRE ATT&CK Techniques - Unsecured Credentials (T1552.001) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/boot-or-logon-autostart-execution monthly 0.5 2024-09-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722836491927-UGBZR8CK0PM7CBULOH43/Boot+or+Logon+Autostart+Execution.jpg MITRE ATT&CK Techniques - Boot or Logon Autostart Execution (T1547) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/usage-triggered-execution monthly 0.5 2024-09-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722682973838-EHXSUMHZY5O7OHGTANMQ/Usage-Triggered+Execution.jpg MITRE ATT&CK Techniques - Usage-Triggered Execution (T1546.015) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/user-account-control monthly 0.5 2024-09-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722682948616-CKIFA5TCWB72OODEBQDS/User+Account+Control.jpg MITRE ATT&CK Techniques - —User Account Control (T1548.002) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/automated-collection monthly 0.5 2024-09-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722836954690-QXUIVLBI7EX1NH2KIF9L/Automated+Collection.jpg MITRE ATT&CK Techniques - AUTOMATED COLLECTION (T1119) - Overview Automated Collection (ATT&CK ID: T1119) is an ATT&CK technique where adversaries leverage automated means to gather information on a target system, enhancing the speed and scale of data collection. This technique fits within the "Collection" tactic of the MITRE ATT&CK framework. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - AUTOMATED COLLECTION (T1119) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - AUTOMATED COLLECTION (T1119) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/user-execution monthly 0.5 2024-09-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722682923718-GFEBD9L1RDNLT9FERMID/User+Execution.jpg MITRE ATT&CK Techniques - User Execution (T1204) - ATT&CK T1204 Understanding and mitigating User Execution is crucial for any comprehensive cybersecurity strategy. It requires a multi-faceted approach, combining robust technical controls with ongoing user education and awareness programs. By recognizing the techniques employed in User Execution attacks, organizations can better prepare their human firewall to resist these insidious threats. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a2e50294-2192-4751-b4a6-8d878be6dfa9/malware-3.jpg MITRE ATT&CK Techniques - User Execution (T1204) - Lazarus Group Nation-State Affiliation: North Korea Techniques: Cyber-espionage, ransomware (WannaCry), financial theft campaigns. User Execution Activities: Spear-phishing emails, malicious attachments, social engineering. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5b7feafc-750a-4c99-8e40-db809d10ef29/bear-10.jpg MITRE ATT&CK Techniques - User Execution (T1204) - APT28 (Fancy Bear) Nation-State Affiliation: Russia Techniques: Espionage; high-profile political hacking. User Execution Activities: Spear-phishing with malware-laden documents. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/24769650-acb3-48c9-ac82-11851c71f1c1/bear-3.jpg MITRE ATT&CK Techniques - User Execution (T1204) - Sandworm Team Nation-State Affiliation: Russia Techniques: Aggressive tactics and critical infrastructure targeting. User Execution Activities: Phishing emails to deliver malware like BlackEnergy and NotPetya. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/74f5b985-f714-4299-9827-e2a3bf906566/malware-4.jpg MITRE ATT&CK Techniques - User Execution (T1204) - Syrian Electronic Army (SEA) Nation-State Affiliation: Syria Techniques: Defacement attacks, credential harvesting, phishing operations. User Execution Activities: Phishing campaigns targeting media, leveraging social engineering. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/826b9761-5679-4ee9-bcfe-d2fc8af681af/atom-1.jpg MITRE ATT&CK Techniques - User Execution (T1204) - Albert Gonzalez Affiliation: Unaffiliated (led a cybercrime syndicate) Notable For: Fin7 fraud, major data breaches. User Execution Activities: Phishing campaigns to steal credit card data. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/audio-capture monthly 0.5 2024-09-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722837168909-V1W6OHRZLDN8YD2QF5FS/Audio+Capture.jpg MITRE ATT&CK Techniques - Audio Capture (T1123) - Audio Capture Attacks MITRE ATT&CK Technique ID: T1123 Overview: The technique identified by MITRE ATT&CK as T1123 is known as "Audio Capture." This technique involves the adversary using malware or other malicious tools to intercept and record audio from a system's microphone. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8bdc5356-7f06-4c43-8b19-d8e67d0cdb9a/virtual-16.jpg MITRE ATT&CK Techniques - Audio Capture (T1123) - Targets The targets of this technique can vary widely, including individuals, businesses, and government entities. High-value targets often include executives, diplomats, activists, and anyone who might have sensitive or strategically important information. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/4c088034-c37f-4790-996e-dd7701a76a5f/atom-4.jpg MITRE ATT&CK Techniques - Audio Capture (T1123) - Operation Ke3chang / APT15 Timeline: Active since at least 2010 Details: Chinese group targeting European diplomatic and industrial entities with malware like RoyalCli and RoyalDNS to capture audio. Technical Implementation: Audio capture modules in malware Microphone control via encoded C2 commands https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9b042d8c-818a-4a7e-b653-da7a8733e749/malware-1.jpg MITRE ATT&CK Techniques - Audio Capture (T1123) - DarkHotel Timeline: Ongoing since at least 2007 Details: Targets high-value hotel guests with backdoors capable of audio spying. Technical Implementation: Backdoors with audio capture features aimed at targeted surveillance https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b56dd265-2b4e-4138-a13c-fcb01605464c/malware-2.jpg MITRE ATT&CK Techniques - Audio Capture (T1123) - Turla (Snake / Uroburos) Timeline: Active since at least 2008 Details: Russian group using sophisticated malware like Snake to record audio. Technical Implementation: Snake malware for audio recording and exfiltration Control via C2 infrastructure https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/25652a62-1be9-4e93-80f6-2c885e1e8bea/malware-4.jpg MITRE ATT&CK Techniques - Audio Capture (T1123) - FinFisher / FinSpy Timeline: Discovered around 2011 Details: Commercial spyware used by various government and law enforcement agencies with audio capture capabilities. Technical Implementation: FinSpy modules for audio capture Recordings sent to C2 servers https://ladybug-carillon-7k6n.squarespace.com/mitre-library/video-capture monthly 0.5 2024-09-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722682877606-H7VLVWH7K39CNBDRLDLH/Video+Capture.jpg MITRE ATT&CK Techniques - Video Capture (T1125) - Overview of Video Capture (T1125) Video Capture (T1125) is a technique where adversaries use video recording to gather sensitive information from a victim's environment, utilizing the device's built-in webcam or connected cameras. This can be used for intelligence gathering, recording user activities, and capturing on-screen sensitive information. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-1012-gr9tn-ezahs-f4m3w monthly 0.5 2024-08-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/43e9f32d-4f96-44a3-ab40-7b0ecb9d33d9/Boot+or+Logon+Autostart+Execution.jpg MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) The MITRE ATT&CK framework is a comprehensive knowledge base of adversary tactics and techniques based on real-world observations. The "Boot or Logon Initialization Scripts" technique falls under Persistence, involving scripts that run during system boot or user logon to maintain access upon reboots or logins. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7ecfd999-266b-4b99-9630-4a91598e0583/voodoo-bear-1.jpg MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) - 2017: APT28 (Fancy Bear) Campaign Details: Implemented scripts within network logon scripts, targeting enterprise environments. Actors: APT28, associated with Russian military intelligence (GRU). Impact: Facilitated political espionage and disruptive cyber attacks. Significance: Highlighted the use of logon scripts in sophisticated, state-sponsored campaigns. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ea9732e2-1df7-464d-83e7-b1c0f55b86e8/engineer-5.jpg MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) - For engineers For software and network engineers, understanding T1037 is crucial for designing and maintaining secure systems. These professionals need to be acutely aware of the potential vulnerabilities associated with boot and logon scripts, as their work directly influences the attack surface. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1a83c129-3bd2-4c5f-ab08-a88c764b4195/manager-3.jpg MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) - For Leadership Leaders should also understand the potential business impact of a successful attack using this technique, including data breaches, operational disruptions, and reputational damage. This understanding should inform risk assessments and guide decisions on security investments. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Boot or Logon Initialization Scripts (T1037) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-1012-gr9tn-ezahs-9zxbx monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722711333166-FTLDAEWT5XHQSBH67XYD/Uninstall+System+Defense+Software.jpg MITRE ATT&CK Techniques - Uninstall System Defense Software T1562.001 v2 T1562.001 is a technique within the MITRE ATT&CK framework that describes the act of disabling or modifying security tools, such as antivirus software, endpoint detection and response (EDR) systems, firewalls, or other protective mechanisms, to evade detection and facilitate further malicious activity. Attackers leverage this technique to weaken a target's defenses, making it easier for their malware or other malicious actions to go undetected. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Uninstall System Defense Software T1562.001 v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Uninstall System Defense Software T1562.001 v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-1012-gr9tn monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722836099893-8X11TFCI04U19VRQKI8W/Browser+Extensions.jpg MITRE ATT&CK Techniques - Browser Extensions (T1176) v2 The MITRE ATT&CK technique "Browser Extensions" (Technique ID: T1176) refers to the misuse of browser extensions to maintain persistence, execute malicious code, or exfiltrate data. This technique leverages high-level permissions within the user's browsing environment. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Browser Extensions (T1176) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Browser Extensions (T1176) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-1012 monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722711359961-K8839HGEIXGLS68FAVR1/Unauthorized+User+Scan.jpg MITRE ATT&CK Techniques - Unauthorized User Scan (T1012) v2 Unauthorized User Scan involves unauthorized users conducting scans to gather information or identify vulnerabilities in a target system or network. It is a reconnaissance technique often used by adversaries to map out a network and identify potential exploitation points, resource weaknesses, or open ports. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Unauthorized User Scan (T1012) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Unauthorized User Scan (T1012) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-1-lzkxn monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722835898599-JN4Z4IDOF75UXB8GUM84/Browser+Session+Hijacking.jpg MITRE ATT&CK Techniques - Browser Session Hijacking (T1185) v2 Browser Session Hijacking, also known as "Session Hijacking," is a type of cyber attack where an attacker takes over a user’s session without consent. This technique is categorized under the MITRE ATT&CK framework as "T1185" and involves stealing or manipulating active web sessions. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Browser Session Hijacking (T1185) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Browser Session Hijacking (T1185) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-bits-t1197 monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722836744247-XR8IRYCL12HQ15ZO5831/BITS+Jobs.jpg MITRE ATT&CK Techniques - BITS JOBS (T1197) v2 - BITS Job Attacks (T1197) BITS (Background Intelligent Transfer Service) Jobs is an abused Windows feature enabling asynchronous, prioritized, and throttled transfers between machines via HTTP or SMB. It's leveraged by adversaries for malicious activities including persistence and execution. This is categorized under T1197 in the MITRE ATT&CK framework. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - BITS JOBS (T1197) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - BITS JOBS (T1197) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/mitre-1621 monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722711388959-SBCGHLRFM7Y7QR182L91/Two-Factor+Authentication+Request+Generation.jpg MITRE ATT&CK Techniques - Two-Factor Fake Attempts (T1621) v2 Overview of T1078.004 - Two-Factor Authentication Request Generation. Two-Factor Authentication (2FA) Request Generation involves creating multiple 2FA requests to the target’s device or application. This is typically done to trick the target into approving a fraudulent authentication request or to overwhelm and disrupt legitimate authentication attempts. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Two-Factor Fake Attempts (T1621) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Two-Factor Fake Attempts (T1621) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/mitre-library/brute-force-2 monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/6df57cb1-a9fe-43c3-81bc-220ce31bcef5/Brute+Force.jpg MITRE ATT&CK Techniques - Brute Force (T1110) v2 - Brute Force Attacks (T1110) MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. One documented technique is Brute Force (ID T1110), which involves various methods to systematically guess account credentials to gain unauthorized access to systems. This technique has evolved significantly over the years, becoming more sophisticated and adapting to new security measures. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png MITRE ATT&CK Techniques - Brute Force (T1110) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png MITRE ATT&CK Techniques - Brute Force (T1110) v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1 daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/penetration-testing monthly 0.5 2024-11-05 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/incident-response-management monthly 0.5 2024-10-31 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/application-software-security monthly 0.5 2024-10-29 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/service-provider-management monthly 0.5 2024-10-24 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/security-awareness-and-skills-training monthly 0.5 2024-10-22 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/network-infrastructure-management monthly 0.5 2024-10-17 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/data-recovery monthly 0.5 2024-10-15 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/malware-defenses monthly 0.5 2024-10-10 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/audit-log-management monthly 0.5 2024-10-08 https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/email-and-web-browser-protections monthly 0.5 2024-10-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/06322669-dbfb-407d-9c12-dda04ede607e/virtual-16.jpg CIS Control Library - Email and Web Browser Protections - 1. Introduction This guide aims to enhance protections and detections for email and web browsing, following CIS (Center for Internet Security) best practices. It is designed for engineers, analysts, managers, and auditors to implement and maintain robust security measures in their organizations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fe637e0a-2174-49d3-baa8-55961f65380c/analyst-24.jpg CIS Control Library - Email and Web Browser Protections - 2.2 Enable Multi-Factor Authentication (MFA) Require MFA for all email accounts, especially those with administrative privileges. For Auditors: Regularly review MFA implementation and usage across the organization. Ensure compliance with industry standards and regulations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fc19fdcc-e976-4971-9cdd-dc73f5255f8a/accountant-7.jpg CIS Control Library - Email and Web Browser Protections - 3.1 Keep Browsers Updated For IT Teams: Implement automated update policies for all supported browsers in your organization. Fact: According to Google's Transparency Report, as of 2023, over 95% of Chrome users are on the latest version, significantly reducing exposure to known vulnerabilities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e6bea1d9-da10-4c81-892e-ca3cb2172b59/Incident+alert+thresholds+are+established.jpg CIS Control Library - Email and Web Browser Protections - 5. Monitoring and Incident Response 5.1 Implement SIEM Solutions Use Security Information and Event Management (SIEM) tools to centralize logging and alerting for email and web browsing activities. For Analysts: Develop custom rules and dashboards for quick identification of anomalies and potential threats. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8addcd1d-1fa1-42c0-b031-c2b869581058/auditor-8.jpg CIS Control Library - Email and Web Browser Protections - 6.1 Compliance, Regular Security Assessments Conduct periodic security assessments focusing on email and web browser configurations. For Managers and Auditors: Align assessments with relevant compliance standards (e.g., NIST, ISO 27001, GDPR) based on your industry and geographical location. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/continuous-vulnerability-management monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/33edc213-9ab3-4ffd-b3de-3043d1693674/_e7838f1b-2961-44ec-a97a-6110616f13a7.jpg CIS Control Library - Continuous Vulnerability Management - CIS Control: Continuous Vulnerability Management Guide Introduction CVM is a critical control that involves developing a program to continuously assess and track vulnerabilities on all systems in the enterprise's infrastructure. This guide provides insights for Engineers, Analysts, Managers, and Auditors to effectively implement this control. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fe2761da-e422-47ad-95bb-7694b39da892/engineer-16.jpg CIS Control Library - Continuous Vulnerability Management - Implementing Scanning Infrastructure Engineers are responsible for setting up and maintaining the vulnerability scanning infrastructure. This involves deploying scanners across the network, ensuring comprehensive coverage of all assets. Tools for this purpose include Nessus, Qualys, and OpenVAS. Engineers should configure these tools to perform both authenticated and unauthenticated scans, ensuring a thorough assessment. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/105d11fd-2339-4f31-b1df-cc071553e830/analyst-14.jpg CIS Control Library - Continuous Vulnerability Management - Vulnerability Prioritization Analysts play a crucial role in prioritizing vulnerabilities based on their potential impact and exploitability. They should use tools like Kenna Security or RiskSense to correlate vulnerability data with threat intelligence and asset criticality. This helps in focusing remediation efforts on the most critical issues first. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c01f3c26-4eec-41a6-bfd3-b5fc5cb93fe8/alt_2_Risk+Management+Strategy.jpg CIS Control Library - Continuous Vulnerability Management - Common Mistakes Frequently vulnerability management is as regarded a purely IT issue, rather than a business risk management process. Another is failing to align vulnerability management efforts with business objectives. Managers should establish a vulnerability management steering committee that includes representatives from IT, security, and business units. Implement a continuous improvement process to regularly review and update the vulnerability management program based on its effectiveness. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0c430f18-7aaf-4710-8674-d4af7e81c9fe/Audit+Controls.jpg CIS Control Library - Continuous Vulnerability Management - Program Assessment Auditors are tasked with assessing the effectiveness of the vulnerability management program. This involves reviewing scan coverage, remediation processes, and policy compliance. Tools like Auditboard or Galvanize can help in tracking and documenting these assessments. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/access-control-management monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/dcd49af0-8cc5-4ddb-9686-27cab233460c/access-1.jpg CIS Control Library - Access Control Management - Access Control Management Guide Access Control Management involves using processes and tools to create, assign, manage, and revoke access credentials for users, administrators, systems, networks, and applications. This control is crucial for maintaining the security and integrity of an organization's information assets. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/933c8fa7-4b50-44e4-9681-6b6fb3a9a843/engineer-3.jpg CIS Control Library - Access Control Management - Responsibilities Designing and implementing access control systems Configuring identity and access management (IAM) tools Integrating access control with existing infrastructure Automating access provisioning and deprovisioning processes Implementing multi-factor authentication (MFA) systems Monitoring and maintaining access control systems https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f2b090fb-6239-493f-9458-dbe864a55637/analyst-11.jpg CIS Control Library - Access Control Management - Analyst's Role Responsibilities Monitoring access logs and identifying anomalies Conducting access reviews and audits Analyzing access patterns to identify potential risks Recommending improvements to access control policies and procedures Investigating access-related security incidents Generating reports on access control metrics and compliance https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7b65e64a-79c0-4ec7-88f1-1d3fb0d4fc69/managers-2.jpg CIS Control Library - Access Control Management - Responsibilities Developing and maintaining access control policies and procedures Ensuring compliance with relevant regulations and standards Coordinating between different departments for access management Approving access requests for sensitive systems or data Overseeing access control audits and reviews Managing the budget for access control tools and resources https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c52609c6-33f9-4850-8d63-4a27c96a2d53/Audit+Log+Monitoring.jpg CIS Control Library - Access Control Management - Responsibilities Conducting regular audits of access control systems and processes Verifying compliance with internal policies and external regulations Testing the effectiveness of access control measures Identifying gaps in access control implementation Providing recommendations for improving access control management Reporting audit findings to management and relevant stakeholders https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/data-protection monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722970790871-OVJQLY0MZ353NB95S6BU/_908a9584-6db8-4893-9c82-ad0810187474.jpg CIS Control Library - Data Protection v2 - Guide for Engineers, Analysts, Managers, and Auditors In an era where data breaches make headlines almost daily, protecting sensitive information has never been more critical. The Colonial Pipeline ransomware attack in 2021, which disrupted fuel supplies across the Eastern United States, serves as a stark reminder of the potential consequences of inadequate data protection. This guide will walk you through the process of developing robust data protection measures, as outlined in the CIS Control for Data Protection. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/933c8fa7-4b50-44e4-9681-6b6fb3a9a843/engineer-3.jpg CIS Control Library - Data Protection v2 - For Engineers As an engineer, you're on the front lines of implementing and maintaining the technical aspects of data protection. Your role is crucial in turning policies into practical, effective solutions. You're responsible for designing and building secure systems, implementing encryption and access controls, and ensuring that data is protected throughout its lifecycle. Data protection is paramount. Your expertise is critical in safeguarding sensitive information from unauthorized access, breaches, and potential misuse. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9d1627da-2ea0-49ae-9603-960cf1aace8f/engineer-1.jpg CIS Control Library - Data Protection v2 Data Retention Implement automated data retention and archiving systems. Develop processes for securely transferring data to long-term storage when required. Data Disposal Implement secure data erasure tools and processes. Consider tools that comply with standards like DoD 5220.22-M or NIST 800-88. Develop protocols for physical destruction of storage media when necessary. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5ed98eb8-1f45-469f-99ee-f5f3fdaff48e/analyst-16.jpg CIS Control Library - Data Protection v2 - For Analysts As an analyst, your role involves interpreting data, identifying patterns, and providing insights that drive decision-making in data protection strategies. Data Identification Analyze the results of data discovery scans to identify trends and anomalies. Conduct regular audits of the data inventory to ensure accuracy and completeness. Develop metrics to measure the effectiveness of data identification processes. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7b65e64a-79c0-4ec7-88f1-1d3fb0d4fc69/managers-2.jpg CIS Control Library - Data Protection v2 - For Managers As a manager, your role involves overseeing the implementation of data protection strategies, ensuring compliance, and fostering a culture of data security within your organization. Data Identification Establish a data governance team to oversee the identification process. Ensure regular reviews of the data inventory. Allocate resources for data discovery and management tools. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c3795afa-9e3c-4109-9063-6aab51c77992/analyst-14.jpg CIS Control Library - Data Protection v2 - For Auditors As an auditor, your role is to independently verify that data protection measures are being implemented effectively and that the organization is complying with relevant policies and regulations. Data Identification Verify the completeness and accuracy of the data inventory. Check that data discovery processes are documented and followed. Review the data governance structure and its effectiveness. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/inventory-and-control-of-software-assets monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/aee17357-4a80-43da-b2a1-e3f2b0788ab2/Inventory+and+Control+of+Software+Assets.jpg CIS Control Library - Inventory and Control of Software Assets v2 - Introduction This guide outlines the implementation of a critical InfoSec control: actively managing all software on the network to ensure only authorized software is installed and can execute, while preventing unauthorized and unmanaged software from installation or execution. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8a694e43-5178-4af1-9516-f830f8a2a2f3/inventory-1.jpg CIS Control Library - Inventory and Control of Software Assets v2 - Key Components 1. Software Inventory Maintaining a comprehensive and up-to-date software inventory is the foundation of this control. It provides visibility into the organization's software landscape, enabling informed decision-making and risk management. Maintain a comprehensive list of all approved software. Include details such as version numbers, patches, and licensing information. Regularly update the inventory to reflect changes. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b4f825cd-1367-4e82-afbd-acc92810a8e8/software-3.jpg CIS Control Library - Inventory and Control of Software Assets v2 - 4. Software Installation Process A formal process for software requests and installations helps maintain control and ensures that all new software is properly vetted and approved before deployment. Develop a formal process for requesting and approving new software. Implement technical controls to restrict software installation to authorized personnel only. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/13ce5f51-8ce6-46c9-9504-37c8ac1da02a/analyst-8.jpg CIS Control Library - Inventory and Control of Software Assets v2 - Implementation Guide For Individual Contributors Individual contributors play a crucial role in maintaining software control by adhering to policies and being vigilant about unauthorized software. Familiarize yourself with the approved software list. Follow the established process for requesting new software. Report any unauthorized software you encounter. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/39b3cbfd-5280-4fe9-b402-d950597e440d/software-2.jpg CIS Control Library - Inventory and Control of Software Assets v2 - Month 1-2: Planning and Assessment The initial phase focuses on setting the foundation for the project, ensuring that the right resources and information are in place before implementation begins. Form a project team and define roles. Conduct a current state assessment. Select and procure necessary tools. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8ce0e11e-d533-4722-ae1a-618218795172/analyst-5.jpg CIS Control Library - Inventory and Control of Software Assets v2 - Month 7-8: Process Refinement This phase involves fine-tuning the processes based on initial implementation experiences and addressing any gaps identified. Refine the software request and approval process. Implement the patch management system. Develop and begin executing the unauthorized software removal process. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/inventory-and-control-of-enterprise-assets monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722970342325-YOY2RJHSI9JZBZ9Z93E9/_194b726d-60f6-40c1-b7fd-d777f121245b.jpg CIS Control Library - Asset Inventory and Control v2 The CIS Control for Inventory and Control of Enterprise Assets is a fundamental and critical component of any robust cybersecurity program. This control focuses on actively managing (tracking, reporting on, and correcting) all enterprise assets connected to an organization's infrastructure, whether physically, virtually, remotely, or within cloud environments. The primary goal is to maintain an accurate, up-to-date inventory of all assets that connect to the network or process, store, or transmit data. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/add89219-4f59-420a-9e69-fd5c3645b52e/alt_1_Asset+Role+in+Organizational+Risk+Management.jpg CIS Control Library - Asset Inventory and Control v2 - 2. Implement Automated Discovery and Inventory Tools Actions: Deploy network discovery tools: Use Nmap for network scanning and OS fingerprinting Implement Wireshark for deep packet inspection and protocol analysis Implement asset management solutions: For on-premises: Microsoft System Center Configuration Manager (SCCM) or BMC Helix Discovery For cloud: AWS Config, Azure Resource Graph, or Google Cloud Asset Inventory https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1621ed3f-c31b-43ce-ada4-df3971fb735f/alt_2_Asset+Inventory.jpg CIS Control Library - Asset Inventory and Control v2 - 4. Implement Asset Tracking and Reporting Actions: Set up a centralized asset inventory database: Consider using a Configuration Management Database (CMDB) like ServiceNow Implement asset tagging: Use physical asset tags for hardware Implement virtual tagging (e.g., AWS tags, Azure tags) for cloud resources https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9cd7fb98-f8f7-4698-9e65-f720e0fa2e57/inventory-3.jpg CIS Control Library - Asset Inventory and Control v2 - 5. Establish Asset Control Measures Implement network access control: Deploy a NAC solution like Cisco ISE or Forescout CounterACT Configure policies to allow only authorized devices on the network Set up software asset management: Use tools like Microsoft Software Asset Management or Flexera to track software licenses and usage Implement application whitelisting to control software execution https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/aeda73b5-481f-47d6-adb1-ea4ad7c9badb/inventory-2.jpg CIS Control Library - Asset Inventory and Control v2 - 7. Data Asset Management Implement data discovery and classification: Use tools like Microsoft Information Protection or Varonis Data Classification Engine Establish data inventory processes: Catalog databases, file shares, and cloud storage Implement metadata tagging for data assets https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7c5fafa8-9cfb-4730-bdcc-37a681f43644/Beautiful.ai+-+Asset+Management+Implementation+Timeline+-+Slide+2.jpeg CIS Control Library - Asset Inventory and Control v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/secure-configuration-of-enterprise-assets-and-software monthly 0.5 2024-09-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722970224684-G66PRZ5MIGNX98GSHJOV/_ee81693c-9b44-4e29-b7cd-3c8eb6a51f08.jpg CIS Control Library - Secure Configuration of Enterprise Assets and Software v2 - Overview Harden your systems by applying secure configuration baselines to operating systems, applications, and network devices. Disable unnecessary services and protocols, close unused ports, and enforce strong passwords. Utilize configuration management tools to automate and standardize secure configurations across your environment. Regularly audit configurations for deviations from established baselines and promptly remediate any discrepancies. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b53cfcbe-44a1-4b43-be23-e907e2c55fbd/lstripFile-integrity+monitoring.jpg CIS Control Library - Secure Configuration of Enterprise Assets and Software v2 - For Engineers Implement Secure Baselines Develop and maintain secure configuration baselines for all types of systems (e.g., servers, workstations, network devices). Example: Create a hardened Windows Server template that disables unnecessary services, applies the latest security patches, and configures strong password policies. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b10ae521-436c-44f5-a436-6f0c1679718c/lstripChange+and+Configuration+Management.jpg CIS Control Library - Secure Configuration of Enterprise Assets and Software v2 - For Management Establish Clear Policies Develop and enforce clear policies for secure configurations across the organization. Example: Create a policy that mandates all new systems must be built from approved, secure baseline images before being connected to the network. https://ladybug-carillon-7k6n.squarespace.com/cis-control-library-1/mitre-1012-gr9tn-ezahs-gxeaz-3gkkk monthly 0.5 2024-08-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/22bc8633-01a0-42ee-9586-7521f646cfd0/accountant-2.jpg CIS Control Library - Account Management v2 - Guide for Engineers, Analysts, and Leadership Account management is a critical aspect of cybersecurity, serving as the first line of defense against unauthorized access. As Kevin Mitnick, the famous hacker turned security consultant, once said, "The weakest link in the cybersecurity chain is the human element." This guide will help you strengthen that link through effective account management practices. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b18a171e-f6b3-4759-8964-c6171a3d4e9c/Account+Management.jpg CIS Control Library - Account Management v2 - For analysts Security Analysts play a pivotal role in safeguarding an organization's digital assets through effective account management practices. Their responsibilities extend beyond mere monitoring, encompassing risk assessment, anomaly detection, and compliance monitoring. Here's a comprehensive guide for security analysts on implementing the CIS control for Account Management: https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8895cff2-1675-4a4d-a804-f07c7923bcbc/manager-12.jpg CIS Control Library - Account Management v2 - For Leadership Leadership and managers play a crucial role in shaping and supporting an organization's account management strategy. Their responsibilities encompass policy development, fostering a security-aware culture, and ensuring adequate resource allocation. Here's a comprehensive guide for leadership on implementing the CIS control for Account Management: https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723365675383-FGQ2FMBNP6WID43Q2DJ8/ID.AM-5%253A+Resources+%28e.g.%2C+hardware%2C+devices%2C+data%2C+and+software%29+are+prioritized+based+on+their+classification%2C+criticality%2C+and+business+value.jpg CIS Control Library - Account Management v2 - Resource Allocation Effective account management requires adequate resources, both in terms of technology and personnel. As a leader, it's your responsibility to ensure that these resources are available and properly allocated. Start by conducting a thorough assessment of your current account management capabilities and needs. This assessment should consider: https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png CIS Control Library - Account Management v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png CIS Control Library - Account Management v2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm-2wzsy-ts98p-zf77d-dtb7t-3bgd9-blmze monthly 0.5 2024-11-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723334835897-BB3LUP6WI9RFG9L90JNY/Encryption.jpg HIPAA Control Library - 164.312(e)(2)(ii): Encryption - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm-2wzsy-ts98p-zf77d-dtb7t monthly 0.5 2024-11-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723334717197-UYW75WO25CLU916TQFFH/Integrity+Controls.jpg HIPAA Control Library - 164.312(e)(2)(i): Integrity Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm-2wzsy-ts98p-zf77d-9xsab monthly 0.5 2024-11-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723334596608-6LEMNKN6X175RPYL10E7/Transmission+Security.jpg HIPAA Control Library - 164.312(e)(1): Transmission Security - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm-2wzsy-ts98p-zf77d monthly 0.5 2024-11-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723334438789-HIHOMHDCLSMCY3Q67H6O/Person+or+Entity+Authentication.jpg HIPAA Control Library - 164.312(d): Person or Entity Authentication - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm-2wzsy-ts98p monthly 0.5 2024-11-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723334290848-9WI6WOYEGYI5J79Q5D50/Mechanism+to+Authenticate+ePHI.jpg HIPAA Control Library - 164.312(c)(2): Mechanism to Authenticate ePHI - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm-2wzsy monthly 0.5 2024-11-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723334109676-7ZPVPQGQ697VO5LIIU9B/Integrity.jpg HIPAA Control Library - 164.312(c)(1): Integrity - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x-y2xtm monthly 0.5 2024-11-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c920e13f-2ab4-4711-b517-ac7573eb69f9/Audit+Controls.jpg HIPAA Control Library - 164.312(b): Audit Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls-4g36x monthly 0.5 2024-11-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333770921-T4YF4TSFJCGOK4WSOX1U/Encryption+and+Decryption.jpg HIPAA Control Library - 164.312(a)(2)(iv): Encryption and Decryption - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy-zffls monthly 0.5 2024-11-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333629311-I85X0JJZQPVBBVFPZ48Y/Automatic+Logoff.jpg HIPAA Control Library - 164.312(a)(2)(iii): Automatic Logoff - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e-f48gy monthly 0.5 2024-11-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333356657-NFXY9CO4HPXD7H97X1TP/Access+Control.jpg HIPAA Control Library - 164.312(a)(2)(i): Unique User Identification - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5-5cj9e monthly 0.5 2024-11-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333356657-NFXY9CO4HPXD7H97X1TP/Access+Control.jpg HIPAA Control Library - 164.312(a)(1): Access Control - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p-n79d5 monthly 0.5 2024-11-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333185131-1Y52UYOXMLUC5M6U1ZOQ/Data+Backup+and+Storage.jpg HIPAA Control Library - 164.310(d)(2)(iv): Data Backup and Storage - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys-f874p monthly 0.5 2024-11-01 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333046757-RBDCFMG83KBGJG6X7U4V/Accountability.jpg HIPAA Control Library - 164.310(d)(2)(iii): Accountability - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48-33wys monthly 0.5 2024-10-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723332799954-M1J44SCQTVOTE80J6A2Z/Media+Re-use.jpg HIPAA Control Library - 164.310(d)(2)(ii): Media Re-use - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg-b9t48 monthly 0.5 2024-10-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723332720658-JSYZAUNOIFJ7A8INXKL9/Disposal.jpg HIPAA Control Library - 164.310(d)(2)(i): Disposal - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9-wabwg monthly 0.5 2024-10-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723332477113-M95HOGZITDDV293WJ2IN/Device+and+Media+Controls.jpg HIPAA Control Library - 164.310(d)(1): Device and Media Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr-wbsd9 monthly 0.5 2024-10-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723332270193-7PY4ISQC7VS94467D1RH/Workstation+Security.jpg HIPAA Control Library - 164.310(c): Workstation Security - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2-y9cyr monthly 0.5 2024-10-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723327405040-M83DBFM4B9195YOVPXOK/Workstation+Use.jpg HIPAA Control Library - 164.310(b): Workstation Use - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh-e39b2 monthly 0.5 2024-10-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723327196155-LJ4L27S56M92W21NS19V/Maintenance+Records.jpg HIPAA Control Library - 164.310(a)(2)(iv): Maintenance Records - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h-ttafh monthly 0.5 2024-10-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723327096712-HDF3ED48LNRONSQFDFUP/Access+Control+and+Validation+Procedures.jpg HIPAA Control Library - 164.310(a)(2)(iii): Access Control and Validation Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac-ffy7h monthly 0.5 2024-10-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723326874825-IGTTTYCIDSYN8HDQ6OBL/Facility+Security+Plan.jpg HIPAA Control Library - 164.310(a)(2)(ii): Facility Security Plan - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9-hbeac monthly 0.5 2024-10-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723326699615-3GOI4XQ6G9JZ81JD6QW4/Contingency+Operations.jpg HIPAA Control Library - 164.310(a)(2)(i): Contingency Operations - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj-b5eh9 monthly 0.5 2024-10-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325898285-EX50PAV0LWJ9HDDXY7G6/Facility+Access+Controls.jpg HIPAA Control Library - 164.310(a)(1): Facility Access Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya-76nmj monthly 0.5 2024-10-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325775141-QIEFLX5F8SMOIZZOYU4I/Written+Contract+or+Other+Arrangement.jpg HIPAA Control Library - 164.308(b)(4): Written Contract or Other Arrangement - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/7ktckcdxebfalya monthly 0.5 2024-10-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325648304-J34GQQLK8XJXUGYASNVP/Business+Associate+Contracts+and+Other+Arrangements.jpg HIPAA Control Library - 164.308(b)(1): Business Associate Contracts and Other Arrangements - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca-a29c2-8lb8s-szek4-nrgrh-cpg6p-jdb5w monthly 0.5 2024-10-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325443844-2UB80AS44NPZF57B2UNE/Evaluation.jpg HIPAA Control Library - 164.308(a)(8): Evaluation - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca-a29c2-8lb8s-szek4-nrgrh-cpg6p monthly 0.5 2024-10-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325308616-UPAYF64ELZ3U4PFM3W78/Applications+and+Data+Criticality+Analysis.jpg HIPAA Control Library - 164.308(a)(7)(ii)(E): Applications and Data Criticality Analysis - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca-a29c2-8lb8s-szek4-nrgrh monthly 0.5 2024-10-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325034681-OZMMBA3VUZUOP1J9DXYR/Emergency+Mode+Operation+Plan.jpg HIPAA Control Library - 164.308(a)(7)(ii)(C): Emergency Mode Operation Plan (Copy) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca-a29c2-8lb8s-szek4 monthly 0.5 2024-10-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325034681-OZMMBA3VUZUOP1J9DXYR/Emergency+Mode+Operation+Plan.jpg HIPAA Control Library - 164.308(a)(7)(ii)(C): Emergency Mode Operation Plan - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca-a29c2-8lb8s monthly 0.5 2024-10-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723324763148-B9FA1L3E36G9481JGWIH/Disaster+Recovery+Plan.jpg HIPAA Control Library - 164.308(a)(7)(ii)(B): Disaster Recovery Plan - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca-a29c2 monthly 0.5 2024-10-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723324448394-7M5U4VAWXL6UA3MBDJ24/Data+Backup+Plan.jpg HIPAA Control Library - 164.308(a)(7)(ii)(A): Data Backup Plan - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278-87dca monthly 0.5 2024-10-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723324258154-BUFJY3QI7T0W75ZJ17CC/Contingency+Plan.jpg HIPAA Control Library - 164.308(a)(7)(i): Contingency Plan - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw-2c278 monthly 0.5 2024-10-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723323520707-TIXR8Z4YMEZMMQ9WOVDV/Response+and+Reporting.jpg HIPAA Control Library - 164.308(a)(6)(ii): Response and Reporting - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t-dhekw monthly 0.5 2024-10-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723323369502-LM8FYNOUKFAF6LENIZ93/Security+Incident+Procedures.jpg HIPAA Control Library - 164.308(a)(6)(i): Security Incident Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk-8fa4t monthly 0.5 2024-10-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723323150373-796VW8QYMAZKVQYZ4XCD/Password+Management.jpg HIPAA Control Library - 164.308(a)(5)(ii)(D): Password Management - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673-5gwkk monthly 0.5 2024-10-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723323025531-CANJRW8C2LPTLV8C91G9/Log-in+Monitoring.jpg HIPAA Control Library - 164.308(a)(5)(ii)(C): Log-in Monitoring - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj-3p673 monthly 0.5 2024-10-01 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723322787284-VOI3B2C27MMMHT6N3O2O/Protection+from+Malicious+Software.jpg HIPAA Control Library - 164.308(a)(5)(ii)(B): Protection from Malicious Software - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md-fhgkj monthly 0.5 2024-09-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723322276653-XA3W69B1GND8ZIJIWZ49/Security+Awareness+and+Training.jpg HIPAA Control Library - 164.308(a)(5)(ii)(A): Security Reminders - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3-dy2md monthly 0.5 2024-09-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723322276653-XA3W69B1GND8ZIJIWZ49/Security+Awareness+and+Training.jpg HIPAA Control Library - 164.308(a)(5)(i): Security Awareness and Training - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn-5d5h3 monthly 0.5 2024-09-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723322100676-E8PTM58VR2V53OMDQTB1/Access+Establishment+and+Modification.jpg HIPAA Control Library - —164.308(a)(4)(ii)(C): Access Establishment and Modification - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33-8k4rn monthly 0.5 2024-09-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723321960277-P0JJSH1U93IJT8A1N727/Access+Authorization.jpg HIPAA Control Library - —164.308(a)(4)(ii)(B): Access Authorization - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw-clc33 monthly 0.5 2024-09-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723321820720-J28I214CTQ0CKVLVW8DS/Isolating+Health+Care+Clearinghouse+Functions.jpg HIPAA Control Library - —164.308(a)(4)(ii)(A): Isolating Health Care Clearinghouse Functions - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32-hmahw monthly 0.5 2024-09-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723321550652-LMCOCAF93IE6JKU203QV/Information+Access+Management.jpg HIPAA Control Library - Information Access Management - 1. Introduction This guide focuses on the Information Access Management requirements of the Health Insurance Portability and Accountability Act (HIPAA), specifically addressing the Security Rule. It is designed to assist healthcare organizations, IT professionals, compliance officers, and auditors in implementing and maintaining robust access controls for protected health information (PHI). https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/dd6cff71-89bd-4684-b426-5287dd3d8a51/malware-4.jpg HIPAA Control Library - Information Access Management - 3. Key Components of Information Access Management https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/cb56e120-ed96-4043-be65-73a3a91a6639/malware-2.jpg HIPAA Control Library - Information Access Management - 4. Best Practices for Implementation https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b554cac7-5a98-4470-b025-16aa9773770b/atom-1.jpg HIPAA Control Library - Information Access Management - 7. Incident Response and Reporting https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e-h2e32 monthly 0.5 2024-09-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723321415221-TTD13EOEE4T6EW8CLQWE/Termination+Procedures.jpg HIPAA Control Library - Termination Procedures - Overview HIPAA Control 164.308(a)(3)(ii)(C) focuses on Termination Procedures. It requires covered entities and business associates to implement procedures for terminating access to electronic protected health information (ePHI) when the employment of a workforce member ends or when their role changes significantly. This control ensures that former employees or those who no longer require access cannot inappropriately access, modify, or disclose ePHI. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/856d6fbf-1108-498b-a958-795f14a41474/engineer-20.jpg HIPAA Control Library - Termination Procedures - Responsibilities Implementing automated account deactivation processes Configuring identity and access management (IAM) systems for quick access revocation Developing scripts or tools for bulk access removal across multiple systems Implementing monitoring systems to detect access attempts by terminated users Ensuring proper integration between HR systems and access control systems for timely terminations Implementing emergency access revocation procedures for high-risk terminations https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/21c6393d-bf79-4f16-9870-0e01464db483/analyst-22.jpg HIPAA Control Library - Termination Procedures - Responsibilities Monitoring the execution of termination procedures for completeness Analyzing logs to detect any post-termination access attempts Conducting regular audits of terminated accounts to ensure they remain inactive Identifying potential gaps or weaknesses in current termination procedures Recommending improvements to termination processes based on analysis Assisting in risk assessments related to termination procedures https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/165f9e44-4005-4737-9e01-cfee3e85418a/manager-9.jpg HIPAA Control Library - Termination Procedures - Responsibilities Developing and maintaining termination policies and procedures Ensuring compliance with HIPAA requirements for terminating ePHI access Coordinating between HR, IT, and department heads for smooth termination processes Overseeing the execution of termination procedures, especially for high-risk employees Ensuring regular review and update of termination procedures Handling escalated termination issues and making risk-based decisions https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/08cac99c-ad44-4886-b927-e2cf68964e36/auditor-8.jpg HIPAA Control Library - Termination Procedures - Responsibilities Conducting regular audits of termination processes and their outcomes Verifying compliance with HIPAA requirements for terminating ePHI access Testing the effectiveness of termination procedures through sample checks Identifying gaps in termination procedure implementation Providing recommendations for improving termination procedures Reporting audit findings to management and relevant stakeholders https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr-wrd9e monthly 0.5 2024-09-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723321183366-OYDSYB3VDN726PKRB56D/Workforce+Clearance+Procedure.jpg HIPAA Control Library - Workforce Clearance Procedure - Overview HIPAA Control 164.308(a)(3)(ii)(B) focuses on Workforce Clearance Procedure. It requires covered entities and business associates to implement procedures to determine that the access of a workforce member to electronic protected health information (ePHI) is appropriate. This control ensures that only personnel who need access to ePHI to perform their job functions are granted such access, adhering to the principle of least privilege. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9cfec2e5-5efd-46da-8bf3-be0d47f7482b/engineer-18.jpg HIPAA Control Library - Workforce Clearance Procedure - Responsibilities Implementing identity and access management (IAM) systems Configuring role-based access control (RBAC) systems Developing and maintaining access request and approval workflows Implementing tools for access certification and recertification Setting up systems for automated provisioning and de-provisioning Ensuring proper integration between HR systems and access control systems https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7ed75f55-d7ef-454a-a211-6e03b0c2cab4/analyst-23.jpg HIPAA Control Library - Workforce Clearance Procedure - Responsibilities Reviewing access requests and ensuring they align with job responsibilities Conducting regular access reviews and user entitlement audits Analyzing patterns in access requests and usage to identify potential risks Investigating discrepancies between assigned access and job functions Recommending improvements to workforce clearance procedures Assisting in risk assessments related to ePHI access https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/48462a68-4ef4-4a42-a774-d73cd5b97a7e/manager-13.jpg HIPAA Control Library - Workforce Clearance Procedure - Responsibilities Developing and maintaining workforce clearance policies and procedures Ensuring compliance with HIPAA requirements for appropriate ePHI access Coordinating between HR, IT, and department heads for access management Overseeing the access request and approval process Ensuring regular review and update of job descriptions to accurately reflect ePHI access needs Handling escalated clearance issues and making risk-based decisions https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e843b9a0-0f26-4274-b9e5-4a928271b6da/auditor-2.jpg HIPAA Control Library - Workforce Clearance Procedure - Responsibilities Conducting regular audits of workforce clearance processes Verifying compliance with HIPAA requirements for appropriate ePHI access Testing the effectiveness of clearance procedures and access controls Identifying gaps in workforce clearance implementation Providing recommendations for improving clearance procedures Reporting audit findings to management and relevant stakeholders https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w-33kfr monthly 0.5 2024-09-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723321076571-2YOG5T1HLEF955YIDOSB/Authorization+and+or+Supervision.jpg HIPAA Control Library - Authorization, Supervision - Overview HIPAA Control 164.308(a)(3)(ii)(A) focuses on Authorization and/or Supervision. It requires covered entities and business associates to implement procedures for the authorization and/or supervision of workforce members who work with electronic protected health information (ePHI). This control ensures that only authorized personnel have access to ePHI and that their activities are appropriately supervised. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/6d00ac74-36fa-427d-b440-f566bed7e389/engineer-20.jpg HIPAA Control Library - Authorization, Supervision - Responsibilities Implementing role-based access control (RBAC) systems Configuring user provisioning and de-provisioning processes Setting up logging and monitoring systems for user activities Implementing tools for supervisory oversight (e.g., screen recording, activity monitoring) Ensuring secure remote access for authorized users Implementing segregation of duties in technical systems https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e5abba82-6749-495a-a4d3-1f06555b2092/analyst-17.jpg HIPAA Control Library - Authorization, Supervision - Responsibilities Monitoring user access patterns and identifying anomalies Conducting regular access reviews and user entitlement audits Analyzing the effectiveness of current authorization and supervision procedures Investigating potential unauthorized access or misuse of ePHI Recommending improvements to authorization and supervision policies Assisting in risk assessments related to ePHI access https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a72c87eb-7609-4ac3-a320-9cb41906c1fc/manager-10.jpg HIPAA Control Library - Authorization, Supervision - Responsibilities Developing and maintaining authorization and supervision policies and procedures Ensuring compliance with HIPAA requirements for ePHI access Coordinating between different departments for access management Overseeing training programs for proper ePHI handling and access Managing the approval process for ePHI access requests Handling escalated authorization and supervision issues https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/2107b9f4-c8e5-4a20-ae0c-dfa423e1265a/auditor-6.jpg HIPAA Control Library - Authorization, Supervision - Responsibilities Conducting regular audits of authorization and supervision processes Verifying compliance with HIPAA requirements for ePHI access Testing the effectiveness of access controls and supervision procedures Identifying gaps in authorization and supervision implementation Providing recommendations for improving access management Reporting audit findings to management and relevant stakeholders https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz-hz77w monthly 0.5 2024-09-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723320971771-AW2A0B4LJOBQB2B0Y8PR/Workforce+Security.jpg HIPAA Control Library - Workforce Security - Control 164.308(a)(3)(i) HIPAA Control 164.308(a)(3)(i) focuses on Workforce Security. It requires covered entities and business associates to implement policies and procedures to ensure that all members of the workforce have appropriate access to electronic protected health information (ePHI) and to prevent those who do not have access from obtaining it. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/41a8294f-86d0-4fef-8d24-e24c0325bbf5/engineer-17.jpg HIPAA Control Library - Workforce Security - Responsibilities Implementing access control systems Configuring role-based access control (RBAC) Setting up and maintaining identity and access management (IAM) systems Implementing and managing multi-factor authentication (MFA) Configuring and maintaining audit logs for access attempts Implementing network segmentation to restrict access to ePHI https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f71d0886-8d79-4545-aba6-58660e685837/analyst-16.jpg HIPAA Control Library - Workforce Security - Responsibilities Monitoring access logs and identifying potential security incidents Conducting regular access reviews Analyzing workforce security trends and patterns Assessing the effectiveness of current workforce security measures Recommending improvements to workforce security policies and procedures Assisting in risk assessments related to workforce security https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/93f2d6ae-5d58-4261-832c-209714b981d8/alt_2_Asset+management.jpg HIPAA Control Library - Workforce Security - Responsibilities Developing and maintaining workforce security policies and procedures Ensuring compliance with HIPAA workforce security requirements Coordinating between different departments for workforce security management Overseeing workforce security training programs Managing the budget for workforce security tools and resources Handling escalated workforce security issues https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/41c65fd6-f1f7-4dd5-ab11-702b1a3b20eb/analyst-8.jpg HIPAA Control Library - Workforce Security - Responsibilities Conducting regular audits of workforce security systems and processes Verifying compliance with HIPAA workforce security requirements Testing the effectiveness of workforce security controls Identifying gaps in workforce security implementation Providing recommendations for improving workforce security management Reporting audit findings to management and relevant stakeholders https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj-nx9cz monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723320747694-AXZGIVR1H418SPGANJIY/Information+System+Activity+Review.jpg HIPAA Control Library - Assigned Security Responsibility - Control 164.308(a)(2): Assigned Security Responsibility Guide for Engineers, Analysts, Management, and Auditors HIPAA control 164.308(a)(2) mandates that covered entities and business associates explicitly "Identify the security official responsible for the development and implementation of the policies and procedures required by this subpart." https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/98cdec95-d43e-4894-a4c7-af5454882544/healthcare-3.jpg HIPAA Control Library - Assigned Security Responsibility - Why This Control Matters The assignment of a dedicated security official, often referred to as a Chief Information Security Officer (CISO) or Security Officer, is crucial for several reasons: It establishes clear accountability for information security. It ensures that security initiatives have high-level support and direction. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c8bafdcd-fd34-48ca-9ea0-73dc86123187/healthcare-5.jpg HIPAA Control Library - Assigned Security Responsibility - For Management Responsibilities: Must appoint a qualified individual as the security official. Should ensure the security official has sufficient authority and resources. Must clearly define and document the security official's roles and responsibilities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fc8a30cd-11b9-4bdc-a50f-7341e9096140/engineer-16.jpg HIPAA Control Library - Assigned Security Responsibility - For Engineers Responsibilities: Must work closely with the security official to implement technical security measures. Should provide technical expertise to support the security official's initiatives. Must ensure all systems and applications comply with security policies and procedures. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d04dd913-6383-49ad-85f6-de8e506a70c1/analyst-7.jpg HIPAA Control Library - Assigned Security Responsibility - For Analysts Responsibilities: Must support the security official in risk assessments and security analyses. Should monitor and analyze security metrics and trends. Must assist in developing and refining security policies and procedures. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c52609c6-33f9-4850-8d63-4a27c96a2d53/Audit+Log+Monitoring.jpg HIPAA Control Library - Assigned Security Responsibility - For Auditors Responsibilities: Must verify the appointment and effectiveness of the security official. Should review the documentation of the security official's roles and responsibilities. Must assess the implementation of security policies and procedures. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e091f5e7-1a93-43ad-9919-a2119e84eaa4/people-2.jpg HIPAA Control Library - Assigned Security Responsibility - Noteworthy Statistics According to a 2021 HIPAA Journal report, 70% of healthcare organizations have appointed a dedicated CISO or equivalent. The 2020 HIMSS Cybersecurity Survey found that 89% of healthcare organizations conduct annual risk assessments, a key responsibility of the security official. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/495d4938-2087-4623-9354-23d4030f6c79/accountant-5.jpg HIPAA Control Library - Assigned Security Responsibility Financial Impact of Breaches A 2021 Ponemon Institute study revealed that healthcare data breaches cost an average of $9.23 million per incident, the highest of any industry. The 2022 IBM Cost of a Data Breach Report showed this cost rising to $10.10 million per incident for healthcare organizations. Breach Incidents and Trends The U.S. Department of Health and Human Services reported 714 healthcare data breaches of 500 or more records in 2021, affecting more than 45 million individuals. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ac948969-ed35-4cf6-8cc3-692d7f15d18a/analyst-2.jpg HIPAA Control Library - Assigned Security Responsibility Cybersecurity Workforce Challenges The (ISC)² Cybersecurity Workforce Study 2021 estimated a global shortage of 2.72 million cybersecurity professionals. Global shortage: The (ISC)² Cybersecurity Workforce Study 2021 estimated a global deficit of 2.72 million cybersecurity professionals. Healthcare talent gap: A 2020 Herjavec Group report found that 82% of healthcare organizations struggle to find and retain qualified cybersecurity professionals. Increased demand/competition: The growing reliance on digital technologies and the increasing frequency and sophistication of cyberattacks in the healthcare sector are driving up the demand for cybersecurity expertise. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5e745649-0db0-4334-8ba7-fca2a97ce1f4/healthcare-7.jpg HIPAA Control Library - Assigned Security Responsibility Emerging Threats High rate of security incidents: The HIMSS 2021 Healthcare Cybersecurity Survey found that 67% of healthcare organizations experienced significant security incidents within the past year. Ransomware surge: A Sophos report indicates that ransomware attacks targeting healthcare organizations saw a dramatic 94% increase in 2021 compared to the previous year. Exploitation of vulnerabilities: Cybercriminals are increasingly targeting vulnerabilities in healthcare systems and medical devices to gain unauthorized access to sensitive patient data. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j-627cj monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723320747694-AXZGIVR1H418SPGANJIY/Information+System+Activity+Review.jpg HIPAA Control Library - Information System Activity Review - Control 164.308(a)(1)(ii)(D) HIPAA control 164.308(a)(1)(ii)(D) mandates that covered entities and business associates "Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports." This guide will help you understand and implement this crucial security measure. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a06bfa49-360c-4938-bdd4-d3c9f459fa03/hospital-5.jpg HIPAA Control Library - Information System Activity Review - Regular review of system activity is essential for: Detecting unauthorized access to PHI Identifying potential security incidents early Ensuring compliance with HIPAA regulations Maintaining the integrity and confidentiality of patient data https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5fdeb218-5fa2-4ad1-8782-0c79349e482c/analyst-15.jpg HIPAA Control Library - Information System Activity Review - 1. Audit Logs Audit logs are the digital footprints of your information system, recording who did what, when, and where within your network. These logs capture crucial details such as user IDs, timestamps, actions performed, and data accessed or modified. Properly configured audit logs are essential for tracking user activity, detecting unauthorized access attempts, and reconstructing the sequence of events during a security incident. To implement effective audit logging, ensure your systems generate detailed, tamper-evident logs and retain them for at least six years to comply with HIPAA requirements. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/16d1e55e-4147-46e6-86dd-f99437208fb5/analyst-13.jpg HIPAA Control Library - Information System Activity Review - 2. Access Reports Access reports are vital tools in the HIPAA compliance arsenal, providing a detailed account of who has accessed Protected Health Information (PHI) and when. These reports should capture both successful and failed access attempts, offering a comprehensive view of PHI interaction. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/db3f42cc-a3b1-4e51-a338-2fc0d391a16f/analyst-12.jpg HIPAA Control Library - Information System Activity Review - 3. Security Incident Tracking Reports Implementation steps: Establish a system for logging all security incidents Include details such as date/time, nature of the incident, systems affected, and resolution steps Regularly review these reports to identify trends or recurring issues Best practice: Conduct a root cause analysis for each significant security incident to prevent recurrence. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1722048640322-7NOCC6KI46FU6Y7C5RYZ/big_23b4e766-075d-4888-8f21-b2f83f66113a.jpg HIPAA Control Library - Information System Activity Review - Challenges and Solutions Challenge: Large volume of log data Solution: Implement log aggregation and analysis tools to help manage and prioritize data Challenge: Distinguishing between normal and suspicious activity Solution: Establish baselines for normal activity and use anomaly detection techniques Challenge: Keeping up with evolving threats Solution: Regularly update review criteria based on current threat intelligence https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc-f9j5j monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723320610340-UTRW0D07MDJW85V3QEIW/Sanction+Policy.jpg HIPAA Control Library - Sanction Policy - Control 164.308(a)(1)(ii)(C) The HIPAA Sanction Policy is a crucial component of an organization's overall HIPAA compliance strategy. It outlines the consequences for workforce members who fail to adhere to the established security policies and procedures designed to protect patient health information. This policy is not merely a punitive measure, but rather a multifaceted tool that plays a vital role in maintaining the integrity of an organization's information security framework. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3e0d62c2-dbb8-4884-a55c-898de68e1b24/hospital-1.jpg HIPAA Control Library - Sanction Policy - Key Components of a Sanction Policy Scope Define who is covered by the policy and under what circumstances it applies. All workforce members, including employees, volunteers, trainees, and contractors Applies to all security policy violations, whether intentional or unintentional https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/2a6beb9e-b90f-4445-a7bc-1cff16b5c46b/_688332f9-3dcb-4e6a-9e86-990d99906754.jpg HIPAA Control Library - Sanction Policy - 4. Investigation Process Describe the procedure for investigating potential violations. Initial report and documentation Preservation of evidence Interview process Review by appropriate personnel (e.g., HR, Legal, Compliance Officer) https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d08c35a4-77ad-46ac-b81a-6b834ae8aae8/managers-3.jpg HIPAA Control Library - Sanction Policy - Implementation Guide For Management Develop a comprehensive sanction policy that aligns with your organization's culture and HIPAA requirements. Ensure the policy is reviewed and approved by legal counsel. Integrate the policy with existing HR procedures and information security policies. Establish a review process to periodically update the policy. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c0264239-b65a-48c4-a78f-6177f349985e/analyst-12.jpg HIPAA Control Library - Sanction Policy - Best Practices Consistency: Apply sanctions uniformly across the organization. Proportionality: Ensure the severity of the sanction matches the level of the violation. Documentation: Maintain thorough records of all violations, investigations, and sanctions. Education: Use policy violations as opportunities for organization-wide learning and improvement. Regular Review: Assess the effectiveness of the policy annually and update as necessary. Transparency: Communicate the policy clearly to all workforce members. Legal Compliance: Ensure the policy complies with all applicable laws, including labor laws. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw-53egc monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325519241-N0RSLTX42XRON4KOA05U/Risk+Management.jpg HIPAA Control Library - Risk Management - Control 164.308(a)(1)(ii)(B) HIPAA 164.308(a)(1)(ii)(B) requires covered entities and business associates to: "Implement security measures sufficient to reduce risks and vulnerabilities to a reasonable and appropriate level to comply with [the Security Rule]." This guide provides specific guidance for engineers, analysts, and management to effectively implement this requirement. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723359410304-0DB6LI5E58N144BGNOLB/Data+Protection.jpg HIPAA Control Library - Risk Management - For Engineers 1. Technical Risk Assessment Conduct regular vulnerability scans using tools like Nessus, Qualys, or OpenVAS. Perform penetration testing at least annually, focusing on critical systems and external-facing applications. Implement continuous monitoring tools to detect anomalies and potential security incidents in real-time. Example: Configure a Security Information and Event Management (SIEM) system like Splunk or ELK Stack to aggregate logs from all systems containing ePHI. Set up alerts for suspicious activities such as multiple failed login attempts or unusual data access patterns. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/daba7809-00ac-4da4-9497-22452e452722/analyst-1.jpg HIPAA Control Library - Risk Management - For Analysts 1. Risk Analysis Conduct a comprehensive risk analysis at least annually, or when significant changes occur in the environment. Use a risk assessment framework like NIST SP 800-30 to guide the process. Maintain a risk register documenting identified risks, their likelihood, potential impact, and mitigation strategies. Example: Create a risk heat map to visually represent the organization's risk landscape, helping prioritize mitigation efforts for high-impact, high-likelihood risks. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/97963d79-19af-40ac-ab70-11c1c3b8fd4d/managers-3.jpg HIPAA Control Library - Risk Management - For Management 1. Risk Governance Establish a formal risk management committee with representatives from IT, security, legal, and business units. Define the organization's risk appetite and tolerance levels for different types of risks. Ensure adequate resources (budget, personnel, tools) are allocated for risk management activities. Example: Implement a quarterly risk review process where the risk management committee assesses the current risk landscape, reviews mitigation progress, and adjusts strategies as needed. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process-9t7bw monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723320266376-8TK0PE4FC1XNKO8REFA8/Risk+Analysis.jpg HIPAA Control Library - Risk Analysis - Control 164.308(a)(1)(ii)(A) The HIPAA Security Rule 164.308(a)(1)(ii)(A) requires covered entities and business associates to: "Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information held by the covered entity or business associate.” This rule is a crucial component of the Security Management Process and forms the foundation for implementing appropriate security measures to protect ePHI. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/6f455571-8d5a-46d9-85db-b36725eebf0e/physician-2.jpg HIPAA Control Library - Risk Analysis - 2. Data Collection Gather relevant data about ePHI flows, current security measures, and system capabilities. Example: The clinic's IT team conducts interviews with department heads and system administrators, reviews system documentation, and uses network scanning tools to map data flows. They discover: The EHR system exchanges data with the LIS and RIS via HL7 interfaces Physicians regularly email test results to patients, sometimes from personal devices The cloud backup system is configured to store data in encrypted form, but the encryption key management process is informal https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ebcec035-420b-4293-8ce4-9f2d401f0dbd/physician-3.jpg HIPAA Control Library - Risk Analysis - 4. Assess Current Security Measures Example: The clinic reviews its current security measures: Firewall and antivirus software are in place and regularly updated Two-factor authentication is used for remote access to the EHR Annual HIPAA training is provided to all staff Encryption is used for data backups However, they find that: Network segmentation is minimal, with all medical devices on the same network as general workstations Audit logging is enabled but logs are not regularly reviewed There's no formal process for managing USB devices, which could be used to exfiltrate data https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/164308a1i-security-management-process monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7063d82b-88bd-47ec-9e5e-cbee22e8b471/Security+Management+Process.jpg HIPAA Control Library - Security Management Process - Control 164.308(a)(1)(i) For Engineers Deploy firewalls, intrusion detection/prevention systems (IDS/IPS), and anti-malware solutions. Example: Configure a next-generation firewall to monitor and control all incoming and outgoing traffic, with specific rules to protect electronic Protected Health Information (ePHI). https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723333770921-T4YF4TSFJCGOK4WSOX1U/Encryption+and+Decryption.jpg HIPAA Control Library - Security Management Process - Logging and Monitoring Set up comprehensive logging and monitoring systems to detect security incidents. Example: Configure a Security Information and Event Management (SIEM) system to collect and analyze logs from all systems that handle ePHI, with alerts set up for suspicious activities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325519241-N0RSLTX42XRON4KOA05U/Risk+Management.jpg HIPAA Control Library - Security Management Process - For Management Risk Analysis Conduct and document regular risk analyses. Example: Perform an annual comprehensive risk analysis that identifies threats and vulnerabilities to ePHI, assessing the likelihood and potential impact of each risk. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369378175-SZ1MZR7CSF0FA9EMF1BH/Participate+in+the+development+of+awareness+strategies.jpg HIPAA Control Library - Security Management Process - Training and Awareness Implement a robust security awareness and training program. Example: Conduct annual HIPAA security training for all employees, with additional role-specific training for IT staff and those with access to ePHI. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/electronic-health-record-ehr-system monthly 0.5 2024-08-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c7ec56fe-8470-49e9-ba31-01b317d688cf/ehr-4.jpg HIPAA Control Library - Electronic Health Record (EHR) system - Electronic Health Record (EHR) An Electronic Health Record (EHR) system is a comprehensive, digital version of a patient's paper chart, designed to streamline workflow in healthcare settings and improve patient care. Modern EHR systems, such as Epic, Cerner, or Allscripts, are sophisticated software platforms that go beyond basic medical and treatment histories. They are integrated, patient-centered records that contain a wealth of information from all clinicians involved in a patient's care. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0cccb577-80fb-4479-b1cd-f9965a6219c0/ehr-2.jpg HIPAA Control Library - Electronic Health Record (EHR) system - The system's interoperability features allow it to communicate with other healthcare IT systems, such as laboratory information systems (LIS) or radiology information systems (RIS). This interoperability enables seamless data exchange, ensuring that a patient's complete medical history is available regardless of where they receive care within a connected healthcare network. For example, if a patient has blood work done at an outpatient lab, the results can be automatically populated in their EHR, ready for review by their primary care physician or specialist. EHR systems also incorporate robust security measures to protect sensitive patient information. These typically include role-based access controls, audit trails, and encryption for data at rest and in transit. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/999aebe8-d996-4d4c-a17a-e00dc726e8fe/ehr-3.jpg HIPAA Control Library - Electronic Health Record (EHR) system - Laboratory technicians use the EHR's integration with the LIS to receive test orders and report results back to ordering providers. Radiologists and imaging technicians interact with the EHR through its integration with the RIS and PACS (Picture Archiving and Communication System) to access orders, document findings, and share imaging results. Billing and coding specialists use the EHR to access clinical documentation for accurate coding and to process insurance claims. They might use specific billing modules integrated with the main EHR system. Health Information Management (HIM) professionals use the EHR to manage and maintain patient records, ensure compliance with documentation standards, and fulfill requests for medical records. https://ladybug-carillon-7k6n.squarespace.com/hippa-control-library/electronic-protected-health-information-ephi monthly 0.5 2024-08-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723367288202-KLX4ZQWCE97RL6QPHFFH/Integrity+and+Confidentiality.jpg HIPAA Control Library - Electronic Protected Health Information (ePHI) - Definition Electronic Protected Health Information (ePHI) refers to any protected health information (PHI) that is created, stored, transmitted, or received in any electronic format or media. PHI is any information about health status, provision of health care, or payment for health care that can be linked to a specific individual. This includes a wide range of health information, along with common identifiers like name, address, birth date, and Social Security Number. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723325648304-J34GQQLK8XJXUGYASNVP/Business+Associate+Contracts+and+Other+Arrangements.jpg HIPAA Control Library - Electronic Protected Health Information (ePHI) - Where ePHI is Commonly Found in HIPAA-Compliant Businesses ePHI, or electronic Protected Health Information, is sensitive data subject to HIPAA regulations and can be found in various areas within covered entities and business associates. It might be stored in electronic health records (EHRs), patient management systems, billing and claims databases, email communications, or even on mobile devices used by healthcare professionals. Common places include: https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a06bfa49-360c-4938-bdd4-d3c9f459fa03/hospital-5.jpg HIPAA Control Library - Electronic Protected Health Information (ePHI) - Steps to Take if ePHI is Found to be Out of Compliance with HIPAA If ePHI is found to be out of compliance with HIPAA, the following steps should be taken: Immediate Containment: Immediately secure the ePHI to prevent further unauthorized access or disclosure. Example: If ePHI is found on an unsecured server, immediately restrict access to that server. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs-hwwcb-yf3nf-yrhs9-fxgb7-wbmxz-p9ck5 monthly 0.5 2025-03-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723374626768-BPBDHNM5I74TFXZ794VI/lstripIDPS+%28Intrusion+Detection+and+Prevention+System%29+Configuration.jpg ISO 27001 Library - A.18.2.3: Technical Compliance Review - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs-hwwcb-yf3nf-yrhs9-fxgb7-wbmxz monthly 0.5 2025-03-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723374431244-58DUL9M96U5OOOAFVB9S/Vulnerability+Management.jpg ISO 27001 Library - A.18.2.2: Compliance with Security Policies and Standards - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs-hwwcb-yf3nf-yrhs9-fxgb7 monthly 0.5 2025-03-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723374259299-XUKYYUNR3LUDGM2Z9LC7/Unauthorized+mobile+code.jpg ISO 27001 Library - A.18.2.1: Independent Review of Information Security - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs-hwwcb-yf3nf-yrhs9 monthly 0.5 2025-03-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723374061264-6GYIT7I3X7AZCPJUZZZN/Supply+Chain+Risk+Management.jpg ISO 27001 Library - A.18.1.5: Regulation of Cryptographic Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs-hwwcb-yf3nf monthly 0.5 2025-02-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723373827268-TUOUR7HVP33ZYOB0TOPQ/Supply+Chain+Risk+Management+Strategy.jpg ISO 27001 Library - A.18.1.4: Privacy and Protection of Personally Identifiable Information - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs-hwwcb monthly 0.5 2025-02-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723373580364-W95BUEGOF7RKK2P3RXKN/Supply+Chain+Risk+Management+Processes.jpg ISO 27001 Library - A.18.1.3: Protection of Records - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9-mmmhs monthly 0.5 2025-02-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723373438241-XMYOKU80MNAYK410JSD2/Supply+Chain+Risk+Management+Policy+and+Procedures.jpg ISO 27001 Library - A.18.1.2: Intellectual Property Rights - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj-9xpk9 monthly 0.5 2025-02-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723373145863-G5BMAXET96FSNT5TPZX5/Supply+Chain+Protection.jpg ISO 27001 Library - A.18.1.1: Identification of Applicable Legislation and Contractual Requirements - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp-mhttj monthly 0.5 2025-02-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723373011989-1E8QKUJF9RUO7VCG62NB/Supply+Chain+Dependencies+and+Critical+Partners.jpg ISO 27001 Library - A.17.2.1: Availability of Information Processing Facilities - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb-nmhlp monthly 0.5 2025-02-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723372874930-FWNF23OJF5DH53O23M32/Senior+Executive+Support.jpg ISO 27001 Library - A.17.1.3: Verify, Review and Evaluate Information Security Continuity - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr-k8pzb monthly 0.5 2025-02-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723372717094-CCY8ME5NO78MP199PN0L/Security+Continuous+Monitoring.jpg ISO 27001 Library - A.17.1.2: Implementing Information Security Continuity - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl-z68sr monthly 0.5 2025-02-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723372532134-ILDJLD5H7G0M2LYSJ9ON/Security+Awareness+and+Training.jpg ISO 27001 Library - A.17.1.1: Planning Information Security Continuity - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba-exdtl monthly 0.5 2025-02-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723372354716-4YKJLQQ8MT9PA4AVQCWT/Security+and+privacy+protection.jpg ISO 27001 Library - A.16.1.7: Collection of Evidence - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc-dcyba monthly 0.5 2025-02-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723372208767-YBQYO2MDG6ZA3M00KHMQ/RS.IM-2%253A+Incident+Recovery+Plans.jpg ISO 27001 Library - A.16.1.6: Learning from Information Security Incidents - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b-ml5gc monthly 0.5 2025-02-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723372078373-R01YKD482C6GUXQFBP18/Risk+Management+Strategy.jpg ISO 27001 Library - A.16.1.5: Response to Information Security Incidents - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z-j583b monthly 0.5 2025-02-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723371892722-859BYZA2OL63RDYNPBEO/Risk+Management+Process.jpg ISO 27001 Library - A.16.1.4: Assessment of and Decision on Information Security Events - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct-nf25z monthly 0.5 2025-02-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723371742784-FXKPG7NBL4A2ZY7A0L3Z/Risk+Assessment.jpg ISO 27001 Library - A.16.1.2: Reporting Information Security Events - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr-9kbct monthly 0.5 2025-02-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723371583366-FDJY5EZSP9RWUKBS5H44/Response+plans.jpg ISO 27001 Library - A.16.1.1: Responsibilities and Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6-ztlmr monthly 0.5 2025-02-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723371425132-509BXM5E4LRIPF97TSQP/Response+Planning.jpg ISO 27001 Library - A.15.2.2: Managing Changes to Supplier Services - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd-fgte6 monthly 0.5 2025-02-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723371296194-UXNUH7TCTSARJJ9AKJRU/Response+plan.jpg ISO 27001 Library - A.15.2.1: Monitoring and Review of Supplier Services - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/xegcpsj5r749mdd monthly 0.5 2025-02-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723371093479-5KGD9O66IC80C3HFGVN4/Response+Plan+Execution.jpg ISO 27001 Library - A.15.1.3: Information and Communication Technology Supply Chain - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8-3ybk9-zgfb5-2xd3y-d8kyt-6kmhc-a43pm monthly 0.5 2025-02-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723370878583-QDSNY6H5T6N2CWW9VBDY/Remote+Access.jpg ISO 27001 Library - A.15.1.2: Addressing Security in Supplier Agreements - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8-3ybk9-zgfb5-2xd3y-d8kyt-6kmhc monthly 0.5 2025-02-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723370704882-FFW7U2PBNVMNPL766N64/Recovery+plans+incorporate+lessons+learned.jpg ISO 27001 Library - A.15.1.1: Information Security Policy for Supplier Relationships - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8-3ybk9-zgfb5-2xd3y-d8kyt monthly 0.5 2025-02-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723370535254-KNQXXYAYPFS8WQ8HZULU/Recovery+plans+incorporate+lessons+learned..jpg ISO 27001 Library - A.14.3.1: Protection of Test Data - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8-3ybk9-zgfb5-2xd3y monthly 0.5 2025-01-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723370385463-N8AJ156TGF2CRIYECM09/Recovery+Planning.jpg ISO 27001 Library - A.14.2.9: System Acceptance Testing - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8-3ybk9-zgfb5 monthly 0.5 2025-01-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723370245067-IP9WWWRS6Q81678PMKNB/Recovery+Communications.jpg ISO 27001 Library - A.14.2.8: System Security Testing - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8-3ybk9 monthly 0.5 2025-01-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723370116434-ZB6XNQ9IMUSMEFLZFFBM/Recovery+activities+are+updated.jpg ISO 27001 Library - A.14.2.7: Outsourced Development - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs-h2br8 monthly 0.5 2025-01-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369983651-3O0H4HH3ZP5VQZWIAYTN/Protective+Technology.jpg ISO 27001 Library - A.14.2.6: Secure Development Environment - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna-r5djs monthly 0.5 2025-01-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369855671-YMJQOVDR8PUUN03TWTQG/Preventive+Maintenance.jpg ISO 27001 Library - A.14.2.5: Secure System Engineering Principles - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w-tftna monthly 0.5 2025-01-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369722207-HRV957XXWQAQ9H6OSNPS/PR.IP-1%253A+Baseline+Configuration.jpg ISO 27001 Library - A.14.2.4: Restrictions on Changes to Software Packages - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc-bk24w monthly 0.5 2025-01-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369595860-K3QMM5YPI9A7QD3WZOY3/PR.AT-5%253A+Contact+Information.jpg ISO 27001 Library - A.14.2.3: Technical Review of Applications After Operating Platform Changes - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl-p9wlc monthly 0.5 2025-01-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369378175-SZ1MZR7CSF0FA9EMF1BH/Participate+in+the+development+of+awareness+strategies.jpg ISO 27001 Library - A.14.2.2: System Change Control Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34-gprnl monthly 0.5 2025-01-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369211593-HTC5VMTKDD2BU9WQXG15/Monitoring.jpg ISO 27001 Library - A.14.2.1: Secure Development Policy - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we-m9y34 monthly 0.5 2025-01-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723369025778-D18ZPIPVBN1N4ZLZO8QS/Monitoring+and+review.jpg ISO 27001 Library - A.14.1.3: Protecting Application Services Transactions - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w-4h2we monthly 0.5 2025-01-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723368893659-G586D5BDBSAKQ7SQIDTV/Mitigation.jpg ISO 27001 Library - A.14.1.2: Securing Application Services on Public Networks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn-wlf5w monthly 0.5 2025-01-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723368556037-4QAXM7OH8NEB3QGIZ3P3/Mitigate+risk+of+system+failures.jpg ISO 27001 Library - A.14.1.1: Information Security Requirements Analysis and Specification - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99-bj7sn monthly 0.5 2025-01-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723368370351-9DAA0A5YFEBY9F4E0V3A/Mitigate+an+Attack.jpg ISO 27001 Library - A.13.2.4: Confidentiality or Non-Disclosure Agreements - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp-ldw99 monthly 0.5 2025-01-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723368130134-LNERAH4F2GG4KA6EE85T/Mimimize+Knowledge+Sharing.jpg ISO 27001 Library - A.13.2.3: Electronic Messaging - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf-3wskp monthly 0.5 2025-01-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723367951188-8WQ1ZRIKMBJUYLU60PYO/Malicious+Code+Protection.jpg ISO 27001 Library - A.13.2.1: Information Transfer Policies and Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg-6d2gf monthly 0.5 2025-01-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723367768574-LLOQHV2Z1FM7M6OWKBRK/Malicious+Code+Detection.jpg ISO 27001 Library - A.13.1.3: Segregation in Networks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l-6hhsg monthly 0.5 2025-01-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723367540358-S4RD1EY3TO83A1DD8CPM/Maintenance+of+Protective+Technology.jpg ISO 27001 Library - A.13.1.2: Security of Network Services - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts-ghpjn-za45l monthly 0.5 2025-01-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723367288202-KLX4ZQWCE97RL6QPHFFH/Integrity+and+Confidentiality.jpg ISO 27001 Library - A.13.1.1: Network Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds-mbdts monthly 0.5 2025-01-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723367098884-X7NYLROJHWAIQWPGBHF6/Information+shared+with+local+authorities.jpg ISO 27001 Library - A.12.6.2: Restrictions on Software Installation - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j-dmkds monthly 0.5 2025-01-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723366933809-PYCBZ7CP4PTK7LZTPTCE/Information+security+policy.jpg ISO 27001 Library - A.12.6.1: Management of Technical Vulnerabilities - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z-gzm3j monthly 0.5 2025-01-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723366774897-TGB3WR630BWFWGB43TQ3/Indicators+shared+with+appropriate+parties.jpg ISO 27001 Library - A.12.5.1: Installation of Software on Operational Systems - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9-p8c9z monthly 0.5 2025-01-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723366593524-ZSWI58K6XJYRYQPTAYTQ/Incident+alert+thresholds+are+established.jpg ISO 27001 Library - A.12.4.4: Clock Synchronization - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5-27ml9 monthly 0.5 2024-12-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723366454714-AS4KDVXCKGUNCYNXCCI1/Improvement.jpg ISO 27001 Library - A.12.4.3: Administrator and Operator Logs - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h-h2lz5 monthly 0.5 2024-12-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723366248417-US8YRF7KN5U15FYOGOXC/Identity+Management.jpg ISO 27001 Library - A.12.4.2: Protection of Log Information - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3-9t35h monthly 0.5 2024-12-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723366082370-4RN03C4T1N8UME56VLM2/Identity+Management%2C+Authentication+and+Access+Control.jpg ISO 27001 Library - A.12.4.1: Event Logging - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp-p4rx3 monthly 0.5 2024-12-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723365871201-DIY5OJSRAQZHJKTPCB99/ID.BE-5%253A+Dependencies+and+critical+functions+for+delivery+of+critical+services+are+established.jpg ISO 27001 Library - A.12.3.1: Information Backup - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/apynrsgm54ggkmp monthly 0.5 2024-12-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723365675383-FGQ2FMBNP6WID43Q2DJ8/ID.AM-5%253A+Resources+%28e.g.%2C+hardware%2C+devices%2C+data%2C+and+software%29+are+prioritized+based+on+their+classification%2C+criticality%2C+and+business+value.jpg ISO 27001 Library - A.12.2.1: Controls Against Malware - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5-nxyyt-dtkyk-ksla9-hdj8t-7faat-j9dhd monthly 0.5 2024-12-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723365531991-YI51R552I8F5RCZV4XJO/Governance+and+Risk+Management.jpg ISO 27001 Library - A.12.1.4: Separation of Development, Testing, and Operational Environments - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5-nxyyt-dtkyk-ksla9-hdj8t-7faat monthly 0.5 2024-12-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723365200432-DDKXIGEUNATYQ1SEH9YA/External+service+provider+activity+is+monitored.jpg ISO 27001 Library - A.12.1.3: Capacity Management - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5-nxyyt-dtkyk-ksla9-hdj8t monthly 0.5 2024-12-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723365200432-DDKXIGEUNATYQ1SEH9YA/External+service+provider+activity+is+monitored.jpg ISO 27001 Library - A.12.1.2: Change Management - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5-nxyyt-dtkyk-ksla9 monthly 0.5 2024-12-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723364299574-9NMXMT2QX04C6HNJYVK3/Event+Data+are+Correlated.jpg ISO 27001 Library - A.12.1.1: Documented Operating Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5-nxyyt-dtkyk monthly 0.5 2024-12-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723364114246-I1UJ76W5YW6JY6TGKHSZ/Enhanced+Response+Capability.jpg ISO 27001 Library - A.11.2.9: Clear Desk and Clear Screen Policy - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5-nxyyt monthly 0.5 2024-12-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723363772649-IHC3S9T3GTUT27U5QU5X/Detection+processes+are+tested.jpg ISO 27001 Library - A.11.2.8: Unattended User Equipment - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z-5hbz5 monthly 0.5 2024-12-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723362644023-VD5J8MARF0OBE75FJENJ/Detection+activities+are+adjusted.jpg ISO 27001 Library - A.11.2.7: Secure Disposal or Re-Use of Equipment - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e-6l34z monthly 0.5 2024-12-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723362263225-KL82IVH9FSNVE62J3HGZ/Detected+Events.jpg ISO 27001 Library - A.11.2.6: Security of Equipment and Assets Off-Premises - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z-a2j2e monthly 0.5 2024-12-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723362090757-13QWG4ZCYQ65LP6D5CJZ/DE.CM-5%253A+Monitoring+for+Unauthorized+Personnel%2C+Connections%2C+Devices%2C+and+Software.jpg ISO 27001 Library - A.11.2.5: Removal of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls-2fj4z monthly 0.5 2024-12-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723360492814-ADG8HB61QVDH8T7YPWM8/Data-in-transit+protection.jpg ISO 27001 Library - A.11.2.4: Equipment Maintenance - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h-re3ls monthly 0.5 2024-12-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723359860812-XR1D3BN5FI5ZCII1CK4Y/Data-at-rest+is+protected.jpg ISO 27001 Library - A.11.2.3: Cabling Security - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah-r525h monthly 0.5 2024-12-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723359410304-0DB6LI5E58N144BGNOLB/Data+Protection.jpg ISO 27001 Library - A.11.2.1: Equipment Siting and Protection - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c-3wrah monthly 0.5 2024-12-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723359245521-37OOCKUCYHD8DLJPHP4R/Data+Loss+Prevention.jpg ISO 27001 Library - A.11.1.6: Delivery and Loading Areas - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx-r5g5c monthly 0.5 2024-12-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723359075081-XDV1CB9X0OEDNZ91CI3B/Data+Disposal.jpg ISO 27001 Library - A.11.1.5: Working in Secure Areas - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5-3wznx monthly 0.5 2024-12-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723358874759-XZEHWP6UTGFAAZ3GXCGB/Data+at+Rest+Protection.jpg ISO 27001 Library - A.11.1.4: Protecting Against External and Environmental Threats - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka-ex7w5 monthly 0.5 2024-12-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723358684691-8NKZJ678T59NBXIFYZVG/Cybersecurity+Roles+and+Responsibilities.jpg ISO 27001 Library - A.11.1.3: Securing Offices, Rooms, and Facilities - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88-2z2ka monthly 0.5 2024-11-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723358291749-BJPJEQHDW21DTCN1I0Z6/Cybersecurity+roles+and+responsibilities+for+the+entire+workforce+and+third-party+stakeholders+are+established.jpg ISO 27001 Library - A.11.1.2: Physical Entry Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp-t5j88 monthly 0.5 2024-11-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723358113419-R77M0MZY2E5EZG26ZLTO/Cyber+Incident+Response+Coordination.jpg ISO 27001 Library - A.11.1.1: Physical Security Perimeter - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw-erdgp monthly 0.5 2024-11-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723357865577-8QKPMP7W2EIEVR2W882K/Configuration+Change+Control.jpg ISO 27001 Library - A.10.1.2: Key Management - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty-t25aw monthly 0.5 2024-11-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723357613120-ERBNZVJ4R83D6FTHZMSU/Communications+are+coordinated+with+stakeholders.jpg ISO 27001 Library - A.10.1.1: Policy on the Use of Cryptographic Controls - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na-xk8ty monthly 0.5 2024-11-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723357399692-HN49NL3P4FG6SJ0643II/Communications+and+Control+Networks.jpg ISO 27001 Library - A.9.4.5: Access Control to Program Source Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78-n88na monthly 0.5 2024-11-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723356815548-VJ8F05VJN67XYZ9LHB1B/Communication.jpg ISO 27001 Library - A.9.4.4: Use of Privileged Utility Programs - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw-ybl78 monthly 0.5 2024-11-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723356623268-S74NO6F7OJZ7J3BXWOQW/Audit+Log+Monitoring.jpg ISO 27001 Library - A.9.4.3: Password Management System - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6-af8jw monthly 0.5 2024-11-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723355683496-1LZIT79BJU6NW88KQ21K/Asset+Role+in+Organizational+Risk+Management.jpg ISO 27001 Library - A.9.4.2: Secure Log-on Procedures - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw-5bwz6 monthly 0.5 2024-11-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723355346689-4Q34Y1EY6B6L60A38Q02/Asset+management.jpg ISO 27001 Library - A.9.4.1: Information Access Restriction - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx-c6cpw monthly 0.5 2024-11-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723355183424-3UX5VW9S84XQQS1VCD3L/Asset+Inventory.jpg ISO 27001 Library - A.9.3.1: Use of Secret Authentication Information - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8-pmwcx monthly 0.5 2024-11-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723355024147-4T6S1UT24XCN7R7IHSZO/Analysis+Purpose.jpg ISO 27001 Library - A.9.2.6: Removal or Adjustment of Access Rights - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws-3zwx8 monthly 0.5 2024-11-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723354906719-IW8RWY4CANTTNDQ7ZS7H/Analysis+of+Anomalies.jpg ISO 27001 Library - A.9.2.5: Review of User Access Rights - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry-9t4ws monthly 0.5 2024-11-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723354699485-TLH8D0DDQ5UC61QLOCJK/Adequate+cybersecurity+policies+and+governance.jpg ISO 27001 Library - A.9.2.4: Management of Secret Authentication Information of Users - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd-ffyry monthly 0.5 2024-11-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723354548671-TQS24B79ROWTUEHHLARM/Access+Control.jpg ISO 27001 Library - A.9.2.3: Management of Privileged Access Rights - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/7w49my6twfzbkyd monthly 0.5 2024-11-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723354334279-6OI44HEQYL6L1C5CPUF3/User+Execution.jpg ISO 27001 Library - A.9.2.2: User Access Provisioning - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23-jzgtl-al737-f95nr-ywnk4-m4md8-jtj3x monthly 0.5 2024-11-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723354140630-R75NN9BSCP2KB8N90R0T/Hidden+Users.jpg ISO 27001 Library - A.9.2.1: User Registration and De-registration - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23-jzgtl-al737-f95nr-ywnk4-m4md8 monthly 0.5 2024-11-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723353954845-PFD4OHQ9VZ0OFJA93EI4/Communications+and+Control+Networks.jpg ISO 27001 Library - A.9.1.2: Access to Networks and Network Services - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23-jzgtl-al737-f95nr-ywnk4 monthly 0.5 2024-11-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723353539404-O83UX9BGDHVCUY5TFWOZ/Access+Control+and+Validation+Procedures.jpg ISO 27001 Library - A.9.1.1: Access Control Policy - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23-jzgtl-al737-f95nr monthly 0.5 2024-11-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723353367750-9UU42TPFT1DBMIUEPQLA/Data+from+Removable+Media.jpg ISO 27001 Library - A.8.3.3: Physical Media Transfer - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23-jzgtl-al737 monthly 0.5 2024-11-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723352407198-PZP99FR9NO1P8NKIR8C3/Media+Re-use.jpg ISO 27001 Library - A.8.3.2: Disposal of Media - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23-jzgtl monthly 0.5 2024-11-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723351063144-9WBMET8GFN7DNXB8XW1E/Device+and+Media+Controls.jpg ISO 27001 Library - A.8.3.1: Management of Removable Media - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw-nkb23 monthly 0.5 2024-11-01 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723344026200-YSNDTBVRZJ584UWFQJT0/Exploitation+of+Remote+Services.jpg ISO 27001 Library - A.8.2.3: Handling of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm-2skjw monthly 0.5 2024-10-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723343672302-DBQ6GXQSHLV6DIDP1CHJ/Data-at-rest+is+protected.jpg ISO 27001 Library - A.8.2.2: Labeling of Information - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj-4h6hm monthly 0.5 2024-10-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723343350275-8UVIXL5KI46H1O7AJAGJ/ID.AM-5%253A+Resources+%28e.g.%2C+hardware%2C+devices%2C+data%2C+and+software%29+are+prioritized+based+on+their+classification%2C+criticality%2C+and+business+value.jpg ISO 27001 Library - A.8.2.1: Classification of Information - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc-g6esj monthly 0.5 2024-10-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723342012072-75T6V8BRURMWAOTQUY3F/Supply+Chain+Risk+Management+Processes.jpg ISO 27001 Library - A.8.1.4: Return of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk-ydjcc monthly 0.5 2024-10-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723341720288-4UFQA96QA5AZ0178G0ZJ/Asset+Role+in+Organizational+Risk+Management.jpg ISO 27001 Library - A.8.1.3: Acceptable Use of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme-9elrk monthly 0.5 2024-10-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723341581494-8097I5J7IE9K26W6QZP4/Asset+management.jpg ISO 27001 Library - A.8.1.3: Acceptable Use of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6-8gkme monthly 0.5 2024-10-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723341108905-D7WZH9OBKI8TLV2J6L0J/Office+Application+Startup.jpg ISO 27001 Library - A.8.1.2: Ownership of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd-x9sw6 monthly 0.5 2024-10-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723340345790-6K5OOWDKFJA961GT9T9O/Asset+Inventory.jpg ISO 27001 Library - A.8.1.1: Inventory of Assets - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79-gakcd monthly 0.5 2024-10-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723339302406-XB8TP8W9MTWQOE041POA/Configuration+change+control+processes.jpg ISO 27001 Library - A.7.2.3: Disciplinary Process - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h-6zk79 monthly 0.5 2024-10-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723338930809-5B7K5X0UPBQGFEDL7UOV/Security+Awareness+and+Training.jpg ISO 27001 Library - —A.7.2.2: Information Security Awareness, Education, and Training - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe-lrf7h monthly 0.5 2024-10-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723338608927-JIBBBA4M3JF33AV075RM/Risk+Management.jpg ISO 27001 Library - —A.7.2.1: Management Responsibilities - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp-lw4pe monthly 0.5 2024-10-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723338067480-0KNVRE2WCJRI4TPXI257/Workforce+Security.jpg ISO 27001 Library - —A.7.1.2: Terms and Conditions of Employment - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9-3remp monthly 0.5 2024-10-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723337480819-HYPXNDXN91EPEL39Z33R/Identity+Management.jpg ISO 27001 Library - A.7.1.1: Screening - 1. Introduction ISO 27001 is an international standard for information security management systems (ISMS). Control A.7.1.1 focuses on screening, which is a crucial part of human resource security. This guide will provide detailed information on implementing this control, with specific focus on the roles of engineers, analysts, management, and auditors. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7c2d9ffd-4442-46f7-9c9c-0e7d23d63c29/analyst-11.jpg ISO 27001 Library - A.7.1.1: Screening - 3.1 For Management Establish and approve screening policies and procedures Ensure compliance with legal and ethical standards Allocate resources for screening processes Review and approve screening results for high-risk positions Best Practice: Implement a tiered screening approach based on role sensitivity and access levels. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/20744076-3c61-4caa-9786-c13d433040c8/analyst-21.jpg ISO 27001 Library - A.7.1.1: Screening - 4.1 Pre-Employment Screening Identity verification Employment history verification Education verification Professional qualifications check Criminal record check Credit check (for financially sensitive positions) Social media screening https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/62009ed7-2c60-46b6-95b3-7e7d58e088d6/engineer-11.jpg ISO 27001 Library - A.7.1.1: Screening - 5.1 For Engineers Implement secure systems for storing and accessing screening data Develop APIs for integrating screening results with HR and IAM systems Create automated alerts for screening expirations or policy violations https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/225a4461-554a-4f5b-91e1-9bd8c874c494/atom-4.jpg ISO 27001 Library - A.7.1.1: Screening - 8.1 Key Performance Indicators (KPIs) Time-to-completion for screening processes Percentage of candidates failing initial screening Number of security incidents related to inadequate screening Cost per screening Screening policy compliance rate https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9-7nrj9 monthly 0.5 2024-10-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723337248500-KNWQ1M04VPBX3QD3EVJM/Remote+Access.jpg ISO 27001 Library - Teleworking - Overview Control A.6.2.2 focuses on developing a policy and supporting security measures to protect information accessed, processed, or stored at teleworking sites. This guide provides comprehensive strategies for implementation, measurement, and refinement of the control, tailored for engineers, analysts, managers, and auditors. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/289bdad8-a6c4-4d4e-ad0e-045b1161e2d7/analyst-9.jpg ISO 27001 Library - Teleworking - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1a83c129-3bd2-4c5f-ab08-a88c764b4195/manager-3.jpg ISO 27001 Library - Teleworking - For Managers Why This Control Matters As a manager, this control is essential because it ensures business continuity while protecting the organization's data and reputation in a distributed work environment. A comprehensive teleworking policy helps maintain productivity, ensures compliance, and reduces the risk of security incidents related to remote work. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l-2w7s9 monthly 0.5 2024-10-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723337098786-AYGVONQ1IZCWDMPA7PUC/Unauthorized+mobile+code.jpg ISO 27001 Library - Mobile Device Policy - Overview ISO 27002 A.6.2.1 focuses on implementing a mobile device policy and supporting security measures to manage the risks introduced by using mobile devices in the context of business operations. This guide provides comprehensive strategies for engineers, analysts, managers, and auditors. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/58e247c1-065e-4793-9971-cc8e293e324c/engineer-12.jpg ISO 27001 Library - Mobile Device Policy - Why This Control Matters As an engineer, this control is crucial because mobile devices represent a significant attack surface. They often contain or have access to sensitive corporate data and can easily be lost, stolen, or compromised. Implementing strong technical controls helps prevent data breaches, unauthorized access, and ensures the integrity of your organization's information assets. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1452a6d2-9cd0-4fc7-8d39-25bdff07a75f/analyst-19.jpg ISO 27001 Library - Mobile Device Policy - Why This Control Matters As an analyst, this control is vital because it provides visibility into mobile device usage and associated risks. Effective analysis of mobile device data helps identify potential security breaches, usage patterns, and areas for improvement in the organization's mobile security posture. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e3f2912e-5f0f-4b81-bb7f-c542265496aa/manager-14.jpg ISO 27001 Library - Mobile Device Policy - Why This Control Matters As a manager, this control is essential because it helps protect the organization's data and reputation while enabling the productivity benefits of mobile devices. A robust mobile device policy ensures that employees use mobile devices responsibly and securely, reducing the risk of data breaches and compliance violations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/022b7c75-64da-4f3b-8bee-3438b634f955/auditor-9.jpg ISO 27001 Library - Mobile Device Policy - Why This Control Matters As an auditor, this control is crucial because it ensures that the organization's mobile device usage aligns with its overall information security strategy and compliance requirements. Effective auditing of this control helps identify gaps in policy implementation and areas for improvement. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r-yry4l monthly 0.5 2024-10-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723336832592-UWHP7JWMBJ5QXELZOKDM/Risk+Management+Strategy.jpg ISO 27001 Library - Information Security in Project Management - Guide for Project Managers, Security Professionals, Developers, and Auditors ISO 27001 control A.6.1.5 states: "Information security shall be addressed in project management, regardless of the type of the project." This control ensures that security is not an afterthought but an integral part of every project from inception to completion. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0d5bdb38-9674-48a5-aa40-c6947755127a/alt_1_Asset+Role+in+Organizational+Risk+Management.jpg ISO 27001 Library - Information Security in Project Management - For Project Managers Responsibilities Ensure security requirements are included in project scope and objectives Facilitate communication between the project team and security professionals Manage security-related risks throughout the project lifecycle https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f71d0886-8d79-4545-aba6-58660e685837/analyst-16.jpg ISO 27001 Library - Information Security in Project Management - For Security Professionals Responsibilities Provide security expertise and guidance throughout the project lifecycle Conduct security risk assessments and recommend mitigation strategies Review and approve security designs and implementations https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/697b07bd-0b6c-43f8-8972-988e5a534732/engineer-11.jpg ISO 27001 Library - Information Security in Project Management - For Developers Responsibilities Implement security requirements in code and system designs Conduct peer code reviews with a security focus Stay updated on secure coding practices and common vulnerabilities https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/efc38e5b-9cab-49a5-8297-32de404bf76a/auditor-10.jpg ISO 27001 Library - Information Security in Project Management - For Auditors Responsibilities Verify compliance with ISO 27001 A.6.1.5 requirements Assess the effectiveness of security integration in project management Provide recommendations for improving security practices in projects https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g-sdd2r monthly 0.5 2024-10-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723336681420-SR0QB1WJ58L6CY6PY8QH/PR.AT-5%253A+Contact+Information.jpg ISO 27001 Library - Contact with Special Interest Groups - Overview Control A.6.2.1 focuses on establishing and implementing a policy and supporting security measures to manage the risks introduced by using mobile devices. This guide provides best practices for implementation, measurement, and refinement of the control, tailored for engineers, analysts, managers, and auditors. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c7d6b888-3b48-409f-8e28-1be98d27c169/engineer-16.jpg ISO 27001 Library - Contact with Special Interest Groups - Why This Control Matters As an engineer, this control is crucial because mobile devices represent a significant attack surface. They often contain sensitive corporate data and can easily be lost or stolen. Implementing strong technical controls helps prevent data breaches, unauthorized access, and ensures the integrity of your organization's information assets. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d15b4bf6-a04c-4e34-b102-52bdaa3b5b34/analyst-18.jpg ISO 27001 Library - Contact with Special Interest Groups - Why This Control Matters This control is crucial for maintaining visibility into mobile device usage and the associated risks. Mobile devices often serve as entry points for cyber threats due to their portability and frequent connection to external networks. By monitoring and analyzing mobile device data, an analyst can identify unusual patterns, potential security breaches, and vulnerabilities that may compromise the organization's information security. This continuous monitoring aligns with ISO 27001's requirements for ongoing risk assessment and mitigation, ensuring that mobile devices are not weak links in the organization's security framework. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8895cff2-1675-4a4d-a804-f07c7923bcbc/manager-12.jpg ISO 27001 Library - Contact with Special Interest Groups - Why This Control Matters As a manager, ensuring the protection of the organization's data and reputation is paramount, and this control plays a critical role in achieving that. A well-defined and enforced mobile device policy helps mitigate the risks associated with the use of personal and company-owned mobile devices in the workplace. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/dccc25a7-6b0d-415a-8732-7e1a35358dd2/auditor-8.jpg ISO 27001 Library - Contact with Special Interest Groups - Why This Control Matters As an auditor, this control is crucial because it ensures that the organization's mobile device usage aligns with its overall information security strategy and compliance requirements. Effective auditing of this control helps identify gaps in policy implementation and areas for improvement. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b-nrs6g monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723336504031-VF7PSNWLJQQDFBY3F3MX/Information+shared+with+local+authorities.jpg ISO 27001 Library - Contact with Authorities - ISO Control A.6.1.3: Guide for Engineers, Analysts, Managers, and Auditors ISO Control A.6.1.3 mandates that organizations “Maintain appropriate contacts with relevant authorities.” This control underscores the importance of establishing and nurturing relationships with regulatory bodies, law enforcement agencies, and other relevant entities in the cybersecurity landscape. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b08f16a9-2133-4138-a68a-5bca4348478e/engineer-15.jpg ISO 27001 Library - Contact with Authorities - For Engineers Engineers play a crucial role in implementing the technical aspects of maintaining contact with authorities. Responsibilities include: Implement secure communication channels for contacting authorities Ensure systems can generate the necessary data for authority reporting Maintain the technical infrastructure to support information sharing https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b7a00619-be41-4f40-94e2-2047eb41cf89/analyst-10.jpg ISO 27001 Library - Contact with Authorities - For Analysts Security analysts are often at the forefront of interpreting and acting on information shared with authorities. Responsibilities: Monitor and analyze security events that may require authority notification Prepare detailed reports for submission to authorities Interpret and apply threat intelligence received from authorities https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/649d269f-ee0f-454e-97cf-20adca1a8a55/manager-8.jpg ISO 27001 Library - Contact with Authorities - For Managers Managers are responsible for overseeing the strategic aspects of authority contact and ensuring organizational compliance. Responsibilities: Establish and maintain relationships with key authority figures Ensure the organization has clear policies for authority contact Allocate resources for maintaining effective authority communication https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/58383d11-f093-497c-bfe3-5147584a89e7/Audit+Controls.jpg ISO 27001 Library - Contact with Authorities - For Auditors Auditors play a crucial role in ensuring that the organization's practices for authority contact meet required standards. Responsibilities: Verify compliance with ISO Control A.6.1.3 Assess the effectiveness of authority contact procedures Identify areas for improvement in authority communication https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye-s9w9b monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723336399357-L6UYTD875RHG80WXIWUI/Enhanced+Response+Capability.jpg ISO 27001 Library - Segregation of Duties - ISO Control A.6.1.2: Guide for Engineers, Analysts, Managers, and Auditors Segregation of duties (SoD) is a critical internal control concept that aims to prevent fraud, errors, and abuse of systems by distributing tasks and associated privileges among multiple people. ISO 27001 control A.6.1.2 specifically requires that "conflicting duties and areas of responsibility shall be segregated to reduce opportunities for unauthorized or unintentional modification or misuse of the organization's assets." https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fab4b02b-7ec0-4154-99e3-a010a85ef5a6/engineer-4.jpg ISO 27001 Library - Segregation of Duties - For Engineers As an engineer, your role is crucial in implementing the technical aspects of SoD. Access Control Implementation Design and implement role-based access control (RBAC) systems. Ensure that system privileges align with job responsibilities. Implement the principle of least privilege in all systems. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f2b090fb-6239-493f-9458-dbe864a55637/analyst-11.jpg ISO 27001 Library - Segregation of Duties - For Analysts Analysts play a key role in identifying risks and opportunities related to SoD. Risk Assessment Conduct regular risk assessments to identify potential conflicts in duties. Analyze user access rights across systems to identify any violations of SoD principles. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/40918d7f-06c8-4741-8fa4-fef4f93f9dc5/manager-6.jpg ISO 27001 Library - Segregation of Duties - For Managers Managers are responsible for overseeing the implementation of SoD and fostering a culture of security. Policy Development Develop and maintain a clear SoD policy. Ensure the policy is communicated and understood across the organization. Resource Allocation Ensure sufficient staffing to allow for proper segregation of duties. Allocate budget for necessary tools and training. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/cb20293e-2dd0-4b96-b897-62268bf9731f/analyst-6.jpg ISO 27001 Library - Segregation of Duties - For Auditors Auditors play a crucial role in verifying the effectiveness of SoD implementation. What to Audit Review SoD policies and procedures for completeness and effectiveness. Examine access rights and user privileges across critical systems. Review logs and reports of SoD violations. Check change management processes for proper segregation. Verify that compensating controls are in place where perfect segregation is not feasible. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3-abmye monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f30bef2b-449d-46b6-af54-ab537f6dc26b/Cybersecurity+Roles+and+Responsibilities.jpg ISO 27001 Library - Information Security Roles and Responsibilities - Control A.6.1.1 ISO 27001 is an international standard for information security management systems (ISMS). Control A.6.1.1 focuses on defining and allocating information security roles and responsibilities within an organization. This guide will help organizations understand and implement this crucial control effectively. Clearly defined roles and responsibilities are the foundation of a robust security posture. They ensure that every aspect of information security is accounted for and that everyone knows their part in protecting the organization's assets. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/dc1f74c4-d390-42ca-bb09-a98c83877395/people-4.jpg ISO 27001 Library - Information Security Roles and Responsibilities - 1. Definition of Roles Identify and define all roles relevant to information security within the organization. Information Security Officer (ISO) or Chief Information Security Officer (CISO) IT Security Manager Data Protection Officer (DPO) System Administrators Network Security Specialists Incident Response Team Members Regular Employees (as users of information systems) Defining roles is about more than just assigning titles; it's about creating a comprehensive security ecosystem where every function is accounted for. This approach ensures no critical security aspects fall through the cracks. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0d5bdb38-9674-48a5-aa40-c6947755127a/alt_1_Asset+Role+in+Organizational+Risk+Management.jpg ISO 27001 Library - Information Security Roles and Responsibilities - 3. Documentation of Roles and Responsibilities Formally document all roles and their associated responsibilities. Job descriptions Information security policies and procedures Organizational charts RACI (Responsible, Accountable, Consulted, Informed) matrices Documentation is the key to consistency and clarity. It provides a reference point for everyone in the organization, reducing confusion and conflicts while promoting a unified approach to security. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/031bc3a6-2325-4304-90c2-0630059abb02/managers-2.jpg ISO 27001 Library - Information Security Roles and Responsibilities - Implementation Guide For Top Management Demonstrate commitment to information security through visible leadership and resource allocation. Approve the overall information security strategy and major policies. Ensure information security is integrated into organizational processes and objectives. Review and approve the allocation of key information security roles. Top management sets the tone for the entire organization. Their visible commitment and strategic decisions create the foundation for a strong security culture and effective implementation of roles and responsibilities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/43b007c2-284e-4336-802a-b3e9153b34d6/Third-Party+Security+Management.jpg ISO 27001 Library - Information Security Roles and Responsibilities - For Department Managers Understand and communicate information security responsibilities relevant to their department. Ensure team members are aware of and comply with their information security duties. Collaborate with the information security team on departmental security initiatives. Report security incidents and concerns promptly. Department managers are the bridge between high-level security strategies and ground-level implementation. Their leadership and example set the standard for security practices within their teams. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security-dh2y3 monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723336007772-8JJJGMY34ATVSMOADURU/Monitoring+and+review.jpg ISO 27001 Library - Policy Review for Information Security - ISO Control A.5.1.2 ISO 27001 control A.5.1.2 requires that "The policies for information security shall be reviewed at planned intervals or if significant changes occur to ensure their continuing suitability, adequacy, and effectiveness." This guide provides specific guidance for engineers, analysts, and management to effectively implement this requirement, along with real-world examples of the fallout when this control is not properly implemented. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fb887e2c-8700-4605-b4d4-62b43b3eb5d4/alt_2_Configuration+Change+Control.jpg ISO 27001 Library - Policy Review for Information Security - Make it stand out Automation of Policy Review Tracking Implement a document management system (e.g., SharePoint, Atlassian Confluence) to track policy versions and review dates. Set up automated reminders for upcoming policy reviews using tools like Microsoft Power Automate or Zapier. Technical Impact Analysis Develop scripts or use tools to analyze system configurations and compare them against current policies. Implement continuous monitoring tools to detect deviations from policy-defined baselines. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723373438241-XMYOKU80MNAYK410JSD2/Supply+Chain+Risk+Management+Policy+and+Procedures.jpg ISO 27001 Library - Policy Review for Information Security Policy Review Schedule Develop a master schedule for policy reviews, ensuring each policy is reviewed at least annually or after significant changes. Create a risk-based approach to prioritize more frequent reviews for critical policies. Change Impact Assessment Establish a process to assess the impact of organizational or technological changes on existing policies. Develop a checklist of external factors (e.g., new regulations, industry standards) that might trigger an out-of-cycle policy review. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1721850706013-WMGMQFP3TQTWQASH2WA5/governments.jpg ISO 27001 Library - Policy Review for Information Security For Management Governance Structure Establish a policy review committee with representatives from IT, Security, Legal, HR, and key business units. Define roles and responsibilities for policy review, approval, and dissemination. Resource Allocation Ensure adequate resources (time, personnel, tools) are allocated for regular policy reviews. Consider engaging external consultants for periodic independent policy reviews. https://ladybug-carillon-7k6n.squarespace.com/iso-27001-library/a511-policies-for-information-security monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/40096034-97de-4e0a-be5a-5621dba00016/Adequate+cybersecurity+policies+and+governance.jpg ISO 27001 Library - Policies for Information Security - ISO Control A.5.1.1 ISO 27001 control A.5.1.1, at its core, mandates that organizations create a structured set of policies to direct and support their information security initiatives. These policies aren't just a formality; they serve as the backbone of an organization's defense against cyber threats, ensuring that everyone from top-level management to frontline employees understands their roles in safeguarding sensitive data. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/fab4b02b-7ec0-4154-99e3-a010a85ef5a6/engineer-4.jpg ISO 27001 Library - Policies for Information Security - For Engineers 1. Contribute to Policy Development Action: Provide technical input and feasibility assessments for proposed policies. Example contributions: Advise on technical controls for the Access Control Policy Provide input on secure development practices for the Software Development Policy Assess the technical feasibility of proposed data classification schemes https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/eb74f6f9-d77d-46b1-afa0-cfd19a296db4/engineer-2.jpg ISO 27001 Library - Policies for Information Security - 3. Develop Procedures and Guidelines Action: Create technical procedures and guidelines that support the implementation of information security policies. Example documents: Secure Configuration Guidelines for different operating systems Incident Response Procedures Patch Management Procedures Secure Coding Guidelines https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/4fbc9d49-b024-408d-9b2e-8431db4a75c8/managers-2.jpg ISO 27001 Library - Policies for Information Security - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f17bc76a-7341-47e3-97f6-08edacdc1448/managers-1.jpg ISO 27001 Library - Policies for Information Security - 2. Develop the Top-level Information Security Policy Action: Draft a comprehensive ISP that sets the overall direction for information security in your organization. Example contents: Purpose and scope of the policy Information security objectives Commitment from top management Framework for setting control objectives Risk assessment approach Legal, regulatory, and contractual requirements https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/474e1da9-e6a8-4daa-9ce0-a2b87bca663f/managers-3.jpg ISO 27001 Library - Policies for Information Security - 4. Implement a Policy Management Process Action: Establish a process for managing the lifecycle of information security policies. Example process: Annual review and update cycle Version control system Approval workflow Distribution and acknowledgment tracking Exception handling process https://ladybug-carillon-7k6n.squarespace.com/nist-control-library daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z-73n48-xxnl5-t9wy3-p9n3h-cl95z-xza52 monthly 0.5 2025-03-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723447921349-BSQR3YX0ZRXT9M4FWY28/inventory-1.jpg NIST Control Library - RC.CO-3: Communications - RC.CO-3: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z-73n48-xxnl5-t9wy3-p9n3h-cl95z monthly 0.5 2025-03-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723447757129-1I3MCAS71WYM79W1ELWG/External+service+provider+activity+is+monitored.jpg NIST Control Library - RC.CO-2: Communications - RC.CO-2: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z-73n48-xxnl5-t9wy3-p9n3h monthly 0.5 2025-02-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723447611867-LFS3OAQQ3V8UTXUUWMRX/Event+Data+are+Correlated.jpg NIST Control Library - RC.CO-1: Communications - RC.CO-1: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z-73n48-xxnl5-t9wy3 monthly 0.5 2025-02-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723447454854-OGBEM3WHENQLMGW2TX2L/Enhanced+Response+Capability.jpg NIST Control Library - RC.IM-2: Improvements - RC.IM-2: Improvements Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z-73n48-xxnl5 monthly 0.5 2025-02-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723447277680-N3W3GEP0ZQ0FEYEFV3RX/Detection+processes+are+tested.jpg NIST Control Library - RC.IM-1: Improvements - RC.IM-1: Improvements Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z-73n48 monthly 0.5 2025-02-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723447073709-T0018QY1AF0OTKVGNVI1/Detection+activities+are+adjusted.jpg NIST Control Library - RC.RP-1: Recovery Planning - RC.RP-1: Recovery Planning Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es-phj8z monthly 0.5 2025-02-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723446777208-J4BX5EASG0CLZ6KEFI2Z/Detected+Events.jpg NIST Control Library - RS.IM-1: Improvements - RS.IM-1: Improvements Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw-rr8es monthly 0.5 2025-02-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723446545424-AAYWAVDS1N48BQWCE6Z0/DE.CM-5%253A+Monitoring+for+Unauthorized+Personnel%2C+Connections%2C+Devices%2C+and+Software.jpg NIST Control Library - RS.MI-3: Mitigation - RS.MI-3: Mitigation Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj-5djdw monthly 0.5 2025-02-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723446326734-G3NGCM741RYHCB8W4YG8/Data-in-transit+protection.jpg NIST Control Library - RS.MI-2: Mitigation - RS.MI-2: Mitigation Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3-f7gwj monthly 0.5 2025-02-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723445982344-FV2KHQCN0I01VJZNI74P/Data+Protection.jpg NIST Control Library - RS.MI-1: Mitigation - RS.MI-1: Mitigation Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8-a5cc3 monthly 0.5 2025-02-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723445441463-3I47YB4KKRPPC91RJY98/Data+Loss+Prevention.jpg NIST Control Library - RS.AN-5: Analysis - RS.AN-5: Analysis Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc-wj2c8 monthly 0.5 2025-02-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723445284862-E047GJNK0E17J7YWCKAR/Data+Disposal.jpg NIST Control Library - RS.AN-4: Analysis - RS.AN-4: Analysis Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl-j6fkc monthly 0.5 2025-02-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723445167113-9AZ3CWVVTM2AWJTUXJBB/Cybersecurity+Roles+and+Responsibilities.jpg NIST Control Library - RS.AN-3: Analysis - RS.AN-3: Analysis Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/kx8n42zss4swcnl monthly 0.5 2025-02-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723445033341-JDCS03A3ZU340K5UCJN6/Cybersecurity+roles+and+responsibilities+for+the+entire+workforce+and+third-party+stakeholders+are+established.jpg NIST Control Library - RS.AN-2: Analysis - RS.AN-2: Analysis Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx-r5zn5-z87ne-xghbz-48rp5-tbz9t-5wsf7 monthly 0.5 2025-02-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723444874151-D3A7NEDFRE8JF7F20WR1/Cyber+Incident+Response+Coordination.jpg NIST Control Library - RS.AN-1: Analysis - RS.AN-1: Analysis Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx-r5zn5-z87ne-xghbz-48rp5-tbz9t monthly 0.5 2025-02-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723444728727-V7EF783R1S0144HIXJ8L/Continuous+Improvement+Plan.jpg NIST Control Library - RS.CO-5: Communications - RS.CO-5: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx-r5zn5-z87ne-xghbz-48rp5 monthly 0.5 2025-02-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723444586888-I73HLB6XHT91ISQSM63G/Configuration+change+control+processes.jpg NIST Control Library - RS.CO-4: Communications - RS.CO-4: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx-r5zn5-z87ne-xghbz monthly 0.5 2025-02-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723444391492-Z1KQ4ZJJT1D2ABYLQAXR/Communications+are+coordinated+with+stakeholders.jpg NIST Control Library - RS.CO-3: Communications - RS.CO-3: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx-r5zn5-z87ne monthly 0.5 2025-02-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723444200853-O7LP3WNNBBOK2OPPBI7I/Communications+and+Control+Networks.jpg NIST Control Library - RS.CO-2: Communications - RS.CO-2: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx-r5zn5 monthly 0.5 2025-02-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723443695077-Z5DLYR9FL1TY02WW2UI1/Communication.jpg NIST Control Library - RS.CO-1: Communications - RS.CO-1: Communications Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj-3xemx monthly 0.5 2025-02-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723443397827-4BJVPX8S05OJ2M3VES0A/Audit+Log+Monitoring.jpg NIST Control Library - RS.RP-1: Response Planning - RS.RP-1: Response Planning Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj-6xffj monthly 0.5 2025-02-01 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723443232910-2J158MC7SOZ0KL5Q2AUN/Asset+Role+in+Organizational+Risk+Management.jpg NIST Control Library - DE.DP-5: Detection Processes - DE.DP-5: Detection Processes Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r-nhexj monthly 0.5 2025-01-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723441759740-II97OGA8QFX2HQBFP2EO/Asset+management.jpg NIST Control Library - DE.DP-4: Detection Processes - DE.DP-4: Detection Processes Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr-e7c4r monthly 0.5 2025-01-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723441496898-YMMWKPS29IHJKEL0SCUO/Analysis+Purpose.jpg NIST Control Library - DE.DP-3: Detection Processes - DE.DP-3: Detection Processes Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2-45nfr monthly 0.5 2025-01-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723441346171-LACKS57OPDG7WPHU7YR9/Analysis+of+Anomalies.jpg NIST Control Library - DE.DP-2: Detection Processes - DE.DP-2: Detection Processes Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5-z84t2 monthly 0.5 2025-01-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723441138837-WEVCBQXF9MORBB0PXB1B/alt_2_Vulnerability+Management.jpg NIST Control Library - DE.DP-1: Detection Processes - DE.DP-1: Detection Processes Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8-cedj5 monthly 0.5 2025-01-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723440965473-HRQ4XNWY961QM840VEA5/alt_2_Supply+Chain+Risk+Management.jpg NIST Control Library - DE.CM-8: Security Continuous Monitoring - DE.CM-8: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc-dftm8 monthly 0.5 2025-01-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723440271921-WEJBW0TKE32QUHRPETDI/alt_2_Supply+Chain+Risk+Management+Strategy.jpg NIST Control Library - DE.CM-7: Security Continuous Monitoring - DE.CM-7: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b-jrphc monthly 0.5 2025-01-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723440071535-YZ2VALNITCVZTNYI8V3U/alt_2_Supply+Chain+Risk+Management+Policy+and+Procedures.jpg NIST Control Library - DE.CM-6: Security Continuous Monitoring - DE.CM-6: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w-bfj3b monthly 0.5 2025-01-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723439848346-PCQA8A8IFXQH6UR8EWGQ/alt_2_Supply+Chain+Protection.jpg NIST Control Library - DE.CM-5: Security Continuous Monitoring - DE.CM-5: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d-baj3w monthly 0.5 2025-01-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723439700056-MT1Q5USFKJBH374559HE/alt_2_Supply+Chain+Dependencies+and+Critical+Partners.jpg NIST Control Library - DE.CM-4: Security Continuous Monitoring - DE.CM-4: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m-3e47d monthly 0.5 2025-01-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723439527687-CPNC2B44JEQUY7JHTV7G/alt_2_Senior+Executive+Support.jpg NIST Control Library - DE.CM-3: Security Continuous Monitoring - DE.CM-3: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88-fnp7m monthly 0.5 2025-01-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723439337306-WVUMD16V7FGI8FOOL4ZW/alt_2_Security+Awareness+and+Training.jpg NIST Control Library - DE.CM-2: Security Continuous Monitoring - DE.CM-2: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93-e3w88 monthly 0.5 2025-01-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723439114666-GCKQSEBDX1B9E8IYRDFJ/alt_2_Risk+Management+Strategy.jpg NIST Control Library - DE.CM-1: Security Continuous Monitoring - DE.CM-1: Security Continuous Monitoring Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk-j6c93 monthly 0.5 2025-01-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723438977826-4CJHNQVE72V1XCRU1I49/alt_2_Risk+Management+Process.jpg NIST Control Library - DE.AE-5: Anomalies and Events - DE.AE-5: Anomalies and Events Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c-jt9kk-jbnsk monthly 0.5 2025-01-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723438833509-KA534C55UHP2SWC7VI4I/alt_2_Risk+Assessment.jpg NIST Control Library - DE.AE-4: Anomalies and Events - DE.AE-4: Anomalies and Events Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr-lc49c monthly 0.5 2025-01-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723436126959-0SMPAPM4TY3SADT5WH8N/alt_2_Response+plan.jpg NIST Control Library - DE.AE-3: Anomalies and Events - DE.AE-3: Anomalies and Events Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz-3j3gr monthly 0.5 2025-01-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723435936297-7Z3BF9HCB8L8A2PS2AJU/alt_2_Remote+Access.jpg NIST Control Library - DE.AE-2: Anomalies and Events - DE.AE-2: Anomalies and Events Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k-agjxz monthly 0.5 2025-01-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723435733397-SCP0HABB0H713FGDI8US/alt_2_Protective+Technology.jpg NIST Control Library - DE.AE-1: Anomalies and Events - DE.AE-1: Anomalies and Events Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz-b5a9k monthly 0.5 2025-01-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723435380354-ACE6JN957HPFE4ANXG94/alt_2_Preventive+Maintenance.jpg NIST Control Library - PR.PT-4: Protective Technology - PR.PT-4: Protective Technology Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna-rzcpz monthly 0.5 2025-01-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723435120102-OEHZP7X9OTANXOIMHVNH/alt_2_PR.IP-1%253A+Baseline+Configuration.jpg NIST Control Library - PR.PT-3: Protective Technology - PR.PT-3: Protective Technology Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8-gyjna monthly 0.5 2025-01-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723428837596-BWH3V5SD61MJ8A5C66O7/alt_2_PR.AT-5%253A+Contact+Information.jpg NIST Control Library - PR.PT-2: Protective Technology - PR.PT-2: Protective Technology Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23-wskp8 monthly 0.5 2025-01-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723428601877-X8CZ0011GTESFN8D7DNR/alt_2_Participate+in+the+development+of+awareness+strategies.jpg NIST Control Library - PR.PT-1: Protective Technology - PR.PT-1: Protective Technology Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/dyan3zhy98hhf23 monthly 0.5 2025-01-01 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723428288697-TNWAYXR957MRM1KL31S2/alt_2_Mitigate+risk+of+system+failures.jpg NIST Control Library - PR.MA-2: Maintenance - PR.MA-2: Maintenance Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc-rbjgc-9a887-a64g6-l6zbz-mybfh-dyx4m monthly 0.5 2024-12-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723427990879-P86KKPDGRJHOWEG5JQC0/alt_2_Malicious+Code+Protection.jpg NIST Control Library - PR.MA-1: Maintenance - PR.MA-1: Maintenance Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc-rbjgc-9a887-a64g6-l6zbz-mybfh monthly 0.5 2024-12-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723427659704-MGNPGHQ1BKTS9VUCGNCR/alt_2_Maintenance+of+Protective+Technology.jpg NIST Control Library - PR.IP-12: Information Protection Processes and Procedures - PR.IP-12: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc-rbjgc-9a887-a64g6-l6zbz monthly 0.5 2024-12-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723427304787-8LUW1V1IBWDG6U6YHDZ7/alt_2_Integrity+and+Confidentiality.jpg NIST Control Library - PR.IP-11: Information Protection Processes and Procedures - PR.IP-11: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc-rbjgc-9a887-a64g6 monthly 0.5 2024-12-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723427130954-F6MRA3GDNV4W4PFVXPI6/alt_2_Identity+Management.jpg NIST Control Library - PR.IP-10: Information Protection Processes and Procedures - PR.IP-10: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc-rbjgc-9a887 monthly 0.5 2024-12-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723426929894-HV3TKYJL8FD259WAVPKZ/alt_2_Identity+Management%2C+Authentication+and+Access+Control.jpg NIST Control Library - PR.IP-9: Information Protection Processes and Procedures - PR.IP-9: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc-rbjgc monthly 0.5 2024-12-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723426767524-Q2AZKQAUSZDKZ669GN00/alt_2_ID.AM-5%253A+Resources+%28e.g.%2C+hardware%2C+devices%2C+data%2C+and+software%29+are+prioritized+based+on+their+classification%2C+criticality%2C+and+business+value.jpg NIST Control Library - PR.IP-8: Information Protection Processes and Procedures - PR.IP-8: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd-ex4lc monthly 0.5 2024-12-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723426543134-FPS52Z1W3FH67D1R01HG/alt_2_Governance+and+Risk+Management.jpg NIST Control Library - PR.IP-7: Information Protection Processes and Procedures - PR.IP-7: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj-4ptzd monthly 0.5 2024-12-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723412250265-34M6FMBUBXXGOMD0OZ4T/alt_2_Formerly+used+technology+is+managed.jpg NIST Control Library - PR.IP-6: Information Protection Processes and Procedures - PR.IP-6: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx-9r2jj monthly 0.5 2024-12-17 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723412096604-188ATLX8RBZ103T1CXTT/alt_2_External+information+systems+are+catalogued..jpg NIST Control Library - PR.IP-5: Information Protection Processes and Procedures - PR.IP-5: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk-83ggx monthly 0.5 2024-12-16 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723411944962-WIDX3PV9BSJWI2N1EFEE/alt_2_Data-in-transit+protection.jpg NIST Control Library - PR.IP-4: Information Protection Processes and Procedures - PR.IP-4: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd-mw3gk monthly 0.5 2024-12-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723411771299-MG1AAFWQ4NP674CCMSL2/alt_2_Data-at-rest+is+protected.jpg NIST Control Library - PR.IP-3: Information Protection Processes and Procedures - PR.IP-3: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf-mr8hd monthly 0.5 2024-12-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723411577264-KJ2AMEY0LDB0M15LEMY9/alt_2_Data+Loss+Prevention.jpg NIST Control Library - PR.IP-2: Information Protection Processes and Procedures - PR.IP-2: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp-yh4wf monthly 0.5 2024-12-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723411430382-P9BHGYSHO6PA0NK5HLE2/alt_2_Data+Disposal.jpg NIST Control Library - PR.IP-1: Information Protection Processes and Procedures - PR.IP-1: Information Protection Processes and Procedures Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88-am2yp monthly 0.5 2024-12-10 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723411262874-LU4VC1IXSYQSROJ0EO9U/alt_2_Cybersecurity+Roles+and+Responsibilities.jpg NIST Control Library - PR.DS-8: Data Security - PR.DS-8: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r-wrb88 monthly 0.5 2024-12-09 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723411094175-VIU610WWYGWQ23OZQ5X3/alt_2_Cybersecurity+roles+and+responsibilities+for+the+entire+workforce+and+third-party+stakeholders+are+established.jpg NIST Control Library - PR.DS-7: Data Security - PR.DS-7: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc-jkb9r monthly 0.5 2024-12-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410937741-GJL2B80MM4KJTMNW9F0W/alt_2_Corporate+knowledge+is+shared+with+all+appropriate+stakeholders.jpg NIST Control Library - PR.DS-6: Data Security - PR.DS-6: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx-h4bgc monthly 0.5 2024-12-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410765317-WQTRDDNU8EAY0UNGW5M2/alt_2_Continuous+Improvement+Plan.jpg NIST Control Library - PR.DS-5: Data Security - PR.DS-5: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx-wr3bx monthly 0.5 2024-12-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410609774-6S6CI1UR79HD54VBLFZU/alt_2_Configuration+Change+Control.jpg NIST Control Library - PR.DS-4: Data Security - PR.DS-4: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat-akrnx monthly 0.5 2024-12-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410437223-87I4I0JL4DW5GNDNSWFT/alt_2_Configuration+change+control+processes.jpg NIST Control Library - PR.DS-3: Data Security - PR.DS-3: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg-3jwat monthly 0.5 2024-12-02 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410297162-S4I9JY4LLBKMSFACZEWB/alt_2_Communications+and+Control+Networks.jpg NIST Control Library - PR.DS-2: Data Security - PR.DS-2: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp-pt5fg monthly 0.5 2024-11-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410166229-DXP7D0WW1LKP0S73G5WM/alt_2_Asset+Role+in+Organizational+Risk+Management.jpg NIST Control Library - PR.DS-1: Data Security - PR.DS-1: Data Security Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy-69gnp monthly 0.5 2024-11-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723410017347-5OP4BKQDCQXD8G5UEZT0/alt_2_Asset+management.jpg NIST Control Library - PR.AT-5: Awareness and Training - PR.AT-5: Awareness and Training Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp-ykzzy monthly 0.5 2024-11-27 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409806663-DR4GDAELC2M9A0APE3QX/alt_2_Asset+Inventory.jpg NIST Control Library - PR.AT-4: Awareness and Training - PR.AT-4: Awareness and Training Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky-2c8xp monthly 0.5 2024-11-26 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409557696-6YTW5JM9AWJ4PD2BE2BX/alt_2_Adequate+cybersecurity+policies+and+governance.jpg NIST Control Library - PR.AT-3: Awareness and Training - PR.AT-3: Awareness and Training Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8-b9sky monthly 0.5 2024-11-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409458026-D7G01L2RSVTI3TG4M6OR/alt_2_Access+Control.jpg NIST Control Library - PR.AT-2: Awareness and Training - PR.AT-2: Awareness and Training Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb-gc3t8 monthly 0.5 2024-11-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409323921-BFSJPZJQAPENR49CJ7F4/alt_1_Vulnerability+Management.jpg NIST Control Library - PR.AT-1: Awareness and Training - PR.AT-1: Awareness and Training Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj-xl6xb monthly 0.5 2024-11-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409132412-TACQFWDDF70YZ6LJAP4O/alt_1_Supply+Chain+Risk+Management.jpg NIST Control Library - PR.AC-5: Identity Management, Authentication and Access Control - PR.AC-5: Identity Management, Authentication and Access Control Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf-8gdsj monthly 0.5 2024-11-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723409016938-NUPNRXD8KR1LR2ASTDIG/alt_1_Supply+Chain+Risk+Management+Strategy.jpg NIST Control Library - PR.AC-4: Identity Management, Authentication and Access Control - PR.AC-4: Identity Management, Authentication and Access Control Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn-98hnf monthly 0.5 2024-11-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723408848258-9GLBMD4SZJ74BJ02XM0R/alt_1_Supply+Chain+Risk+Management+Processes.jpg NIST Control Library - PR.AC-3: Identity Management, Authentication and Access Control - PR.AC-3: Identity Management, Authentication and Access Control Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg-cklhn monthly 0.5 2024-11-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723408585997-XGSWFRUMB0VHBZB7ENQD/alt_1_Supply+Chain+Risk+Management+Policy+and+Procedures.jpg NIST Control Library - PR.AC-2: Identity Management, Authentication and Access Control - PR.AC-2: Identity Management, Authentication and Access Control Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/6bdfrrb8fljarhg monthly 0.5 2024-11-15 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723408376059-9GQL38EX305FBZSEOYVO/alt_1_Supply+Chain+Protection.jpg NIST Control Library - PR.AC-1: Identity Management, Authentication and Access Control - PR.AC-1: Identity Management, Authentication and Access Control Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k-kkw4t-jdps6-4y26s-c4p3y-d7ncn-9f7tk-fm98c monthly 0.5 2024-11-14 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723408107607-ZTBYYMLCUOE6QQ9TBDZS/alt_1_Supply+Chain+Dependencies+and+Critical+Partners.jpg NIST Control Library - ID.SC-5: Supply Chain Risk Management - ID.SC-5: Supply Chain Risk Management Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k-kkw4t-jdps6-4y26s-c4p3y-d7ncn-9f7tk monthly 0.5 2024-11-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723408009786-PNO4Y0UCXDJ6WAUT3XBU/alt_1_Senior+Executive+Support.jpg NIST Control Library - ID.SC-4: Supply Chain Risk Management - ID.SC-4: Supply Chain Risk Management Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k-kkw4t-jdps6-4y26s-c4p3y-d7ncn monthly 0.5 2024-11-12 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723407771002-CAPBP8UINNMN4HFS8T82/alt_1_Security+Awareness+and+Training.jpg NIST Control Library - ID.SC-3: Supply Chain Risk Management - ID.SC-3: Supply Chain Risk Management Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k-kkw4t-jdps6-4y26s monthly 0.5 2024-11-11 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723407624656-77J3NGMPC0YVAH9OJUHE/alt_1_Risk+Management+Strategy.jpg NIST Control Library - ID.SC-2: Supply Chain Risk Management - ID.SC-2: Supply Chain Risk Management Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k-kkw4t-jdps6 monthly 0.5 2024-11-08 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723407520657-JQRMIV3J9M76HFDNASZE/alt_1_Risk+Management+Process.jpg NIST Control Library - ID.SC-1: Supply Chain Risk Management - ID.SC-1: Supply Chain Risk Management Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k-kkw4t monthly 0.5 2024-11-07 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723406968054-UOUKRUUQ445171P0GNNI/alt_1_Risk+Assessment.jpg NIST Control Library - ID.RM-3: Risk Management Strategy - ID.RM-3: Risk Management Strategy Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4-lkl9k monthly 0.5 2024-11-06 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723405898765-2FGH8ZXVHP4UPZCM4YX8/alt_1_Remote+Access.jpg NIST Control Library - ID.RM-2: Risk Management Strategy - ID.RM-2: Risk Management Strategy Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r-nxzr4 monthly 0.5 2024-11-05 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723405736827-MURLARREW21PLMCZ0YNS/alt_1_Protective+Technology.jpg NIST Control Library - ID.RM-1: Risk Management Strategy - ID.RM-1: Risk Management Strategy Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d-jf24r monthly 0.5 2024-11-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723405563329-LU8AB9T3UFBFGJJ9DQWC/alt_1_PR.IP-1%253A+Baseline+Configuration.jpg NIST Control Library - ID.RA-6: Risk Assessment - ID.RA-6: Risk Assessment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539-e2z9d monthly 0.5 2024-11-01 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723405417848-Q42OEMEM8U7DI937SBXN/alt_1_PR.AT-5%253A+Contact+Information.jpg NIST Control Library - ID.RA-5: Risk Assessment - ID.RA-5: Risk Assessment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx-h9539 monthly 0.5 2024-10-31 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723405261358-UPHTTRLB956BY60GPAU2/alt_1_Participate+in+the+development+of+awareness+strategies.jpg NIST Control Library - ID.RA-4: Risk Assessment - ID.RA-4: Risk Assessment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j-499kx monthly 0.5 2024-10-30 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723405100176-3NK98EUXTQAWUVDYFHKC/alt_1_Integrity+and+Confidentiality.jpg NIST Control Library - ID.RA-3: Risk Assessment - ID.RA-3: Risk Assessment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn-x482j monthly 0.5 2024-10-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404962826-NLXBFNG1KRDLDJVPBHNB/alt_1_Identity+Management.jpg NIST Control Library - ID.RA-2: Risk Assessment - ID.RA-2: Risk Assessment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z-s2zbn monthly 0.5 2024-10-28 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404817789-VDG1UDAWDAW57RHIADJS/alt_1_Identity+Management%2C+Authentication+and+Access+Control.jpg NIST Control Library - ID.RA-1: Risk Assessment - ID.RA-1: Risk Assessment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em-pzp8z monthly 0.5 2024-10-25 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404589690-HEGWNIFBHA0TFI9ARZN0/alt_1_ID.AM-5%253A+Resources+%28e.g.%2C+hardware%2C+devices%2C+data%2C+and+software%29+are+prioritized+based+on+their+classification%2C+criticality%2C+and+business+value.jpg NIST Control Library - —ID.GV-4: Governance - ID.GV-4: Governance Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36-fy6em monthly 0.5 2024-10-24 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404589690-HEGWNIFBHA0TFI9ARZN0/alt_1_ID.AM-5%253A+Resources+%28e.g.%2C+hardware%2C+devices%2C+data%2C+and+software%29+are+prioritized+based+on+their+classification%2C+criticality%2C+and+business+value.jpg NIST Control Library - —ID.GV-3: Governance - ID.GV-3: Governance Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x-pxm36 monthly 0.5 2024-10-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404473680-SN9GJ2RECKLKBVOAS4N3/alt_1_Governance+and+Risk+Management.jpg NIST Control Library - —ID.GV-2: Governance - ID.GV-2: Governance Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n-6y92x monthly 0.5 2024-10-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404361842-FP8WGCILA60E9VRGWKSW/alt_1_Data-in-transit+protection.jpg NIST Control Library - —ID.GV-1: Governance - ID.GV-1: Governance Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y-tgn7n monthly 0.5 2024-10-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404183203-MRAU6EKJFJ2TLWLXV45O/alt_1_Data+Disposal.jpg NIST Control Library - —ID.BE-5: Business Environment - ID.BE-5: Business Environment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h-bzk8y monthly 0.5 2024-10-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723404049442-MAW93BIEWIQL72DEUSUE/alt_1_Cybersecurity+Roles+and+Responsibilities.jpg NIST Control Library - —ID.BE-4: Business Environment - ID.BE-4: Business Environment Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla-dn96h monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723403837388-RAQTBH644602J8I38BHM/alt_1_Cybersecurity+roles+and+responsibilities+for+the+entire+workforce+and+third-party+stakeholders+are+established.jpg NIST Control Library - ID.BE-3: Business Environment - 1. Introduction This guide focuses on the NIST Cybersecurity Framework control ID.BE-3: Business Environment, which states: "Priorities for organizational mission, objectives, and activities are established and communicated." This control is crucial for aligning cybersecurity efforts with business goals and ensuring that all stakeholders understand the organization's priorities. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/464865f0-cf3e-4b46-9d14-7d29163a19f4/managers-3.jpg NIST Control Library - ID.BE-3: Business Environment - 3.1 For Management Document the organization's mission, objectives Establish a clear prioritization framework Ensure alignment between business goals and cybersecurity efforts Best Practice: Implement a Balanced Scorecard approach to align and communicate organizational priorities across different perspectives (financial, customer, internal processes, learning and growth). https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/674d8ce0-a310-4a7c-9c1f-3375bdacf556/Data+at+Rest+Protection.jpg NIST Control Library - ID.BE-3: Business Environment - 4.1 Establishing Priorities Conduct a mission and vision review Perform a SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis Identify key stakeholders and their expectations Define short-term and long-term organizational objectives Prioritize objectives using a structured method (e.g., MoSCoW method: Must have, Should have, Could have, Won't have) https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d7a72251-7773-4b99-8c4d-701eadf79640/engineer-4.jpg NIST Control Library - ID.BE-3: Business Environment - 8.1 Key Performance Indicators (KPIs) Percentage of employees who can accurately state top organizational priorities Number of projects/initiatives directly aligned with stated priorities Time taken to adapt priorities in response to significant business changes Employee engagement scores related to understanding of organizational direction https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk-95fla monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723403513851-TEZ82HKDUD5ADL3UAO32/alt_1_Asset+Role+in+Organizational+Risk+Management.jpg NIST Control Library - ID.BE-2 Business Environment-2 - NIST ID.BE-2: Business Environment NIST ID.BE-2 specifically emphasizes the importance of identifying and effectively communicating an organization's position within the broader context of critical infrastructure as well as its specific industry sector. This comprehensive guide is designed to offer valuable and detailed insights for Engineers, Analysts, Managers, and Auditors alike, enabling them to successfully implement this crucial control in their respective organizations. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c029e1a0-75ed-402d-8322-c084301b108d/Communications+are+coordinated+with+stakeholders.jpg NIST Control Library - ID.BE-2 Business Environment-2 - Implementing Communication Systems A key responsibility for engineers is to implement robust communication systems that can relay critical information about the organization's status and role in the industry. This might involve setting up secure data sharing platforms, implementing APIs for real-time information exchange with industry partners, or developing dashboards that visualize the company's position in the larger ecosystem. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d15b4bf6-a04c-4e34-b102-52bdaa3b5b34/analyst-18.jpg NIST Control Library - ID.BE-2 Business Environment-2 - Analyst's Role Sector Analysis and Benchmarking Analysts are responsible for conducting thorough research on the organization's industry sector and its role in critical infrastructure. This involves analyzing industry trends, regulatory requirements, and market positions. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a72c87eb-7609-4ac3-a320-9cb41906c1fc/manager-10.jpg NIST Control Library - ID.BE-2 Business Environment-2 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3ae5bb8c-89d7-4810-b5e3-dc50c544f206/auditor-3.jpg NIST Control Library - ID.BE-2 Business Environment-2 - Gap Analysis A key responsibility for auditors is to identify gaps between the organization's current practices and industry standards or regulatory requirements. This might involve comparing the company's self-identification and communication practices with those of similar organizations or against frameworks like the NIST Cybersecurity Framework. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc-emtpk monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723408376059-9GQL38EX305FBZSEOYVO/alt_1_Supply+Chain+Protection.jpg NIST Control Library - Identity Management, Authentication and Access Control - NIST PR.AC-1: A Hands-On Guide to Identity Management, Authentication and Access Control https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/c2f5bb52-a744-43ec-a552-45b88bee321f/alt_1_Identity+Management.jpg NIST Control Library - Identity Management, Authentication and Access Control - 2. Identity Management 2.1 User Account Creation Linux Example To create a new user account: https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj-gxlzc monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723403066539-0JFQ0SWLFLVBE7840B76/lstripSecurity+Policy+and+Procedures.jpg NIST Control Library - Asset Management-6 - NIST Control ID.AM-6 1. Introduction: The Ensemble Cast of Cybersecurity NIST ID.AM-6 focuses on defining cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7190dab2-a81a-4ce3-9fbf-a174d7bbec4b/planets-2.jpg NIST Control Library - Asset Management-6 - 2.2 The Inner Planets: Core Security Roles Chief Information Security Officer (CISO): Mercury, swift and central Security Architects: Venus, crafting beauty and structure Security Operations Center (SOC) Earth, the living, breathing heart of daily operations Incident Response Team: Mars, always ready for battle https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3d00e0f3-9c38-4b0c-931a-e9edc483a09d/asteroids-4.jpg NIST Control Library - Asset Management-6 - 2.5 The Comets: Third-Party Stakeholders Vendors: Periodic visitors bringing resources Consultants: Bright tails of expertise streaking through Managed Service Providers: Long-period comets, always in orbit https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0c27481d-156e-461f-ac32-11c9f8e191ab/atom-4.jpg NIST Control Library - Asset Management-6 - 3. The Quantum Entanglement of Roles and Responsibilities 3.1 Superposition of Duties Cross-functional teams: Where roles exist in multiple states simultaneously Task forces: Temporary collapse of role wavefunctions to address specific issues https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/697eae37-a6bf-4711-95ca-7309819319ee/galaxies-2.jpg NIST Control Library - Asset Management-6 - 5. The Multiverse of Perspectives 5.1 The Engineer's Dimension Viewing security as a technical challenge Building robust systems and fail-safes https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/f703ebfb-4ee4-42cf-816f-150910e614d7/planets-9.jpg NIST Control Library - Asset Management-6 - 7. The Ecosystem of Accountability 7.1 Symbiotic Relationships How roles support and depend on each other The delicate balance of shared responsibilities https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb-rnhlj monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723402925891-561XZ3G7X3GUA9O6XKJH/lstripSensitive+System+Isolation.jpg NIST Control Library - Asset Management-5 - The Art and Science of Asset Management: A Comprehensive Guide to NIST ID.AM-5 An essential resource that delves deeply into the intricacies and methodologies of effective asset management practices. This guide provides thorough insights into the principles outlined in the NIST Cybersecurity Framework, specifically focusing on the Asset Management domain. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/d1147ba7-3f82-4234-ae69-08d3b849ce2c/virtual-1.jpg NIST Control Library - Asset Management-5 Each of these hardware components requires meticulous inventory management, including details like serial numbers, MAC addresses, and physical locations. Software assets are equally crucial, comprising operating systems (e.g., Windows Server 2019, Red Hat Enterprise Linux 8), commercial applications (such as Microsoft Office 365 or Adobe Creative Suite), and custom-developed code repositories (managed through version control systems like Git). https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a9a9af89-9caf-4280-b27d-2998d51e299b/auditor-6.jpg NIST Control Library - Asset Management-5 - Human Capital and Relationship Assets The human element in cybersecurity cannot be overstated, and NIST ID.AD-5 recognizes this by including human capital as a critical asset category. Skills and expertise within an organization represent a collective knowledge base that must be nurtured and protected. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74-lllxb monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723402811150-C2S9H5VSILSJC5MLKCEL/lstripVulnerability+Scanning.jpg NIST Control Library - Asset Management-4 - NIST Control ID.AM-4: Asset Management External information systems are cataloged. A Guide for Engineers, Analysts, Managers, and Auditors. NIST Control ID.AM-4, which states "External information systems are catalogued," is a fundamental element within the Asset Management category of the NIST Cybersecurity Framework's Identify function. This control emphasizes the importance of maintaining an accurate and up-to-date inventory of all external information systems that interact with or impact an organization's network and data. This includes cloud services, third-party vendors, and any other systems that may process, store, or transmit sensitive information. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/7f39a939-e39f-4805-b0b4-3d694a666933/engineer-14.jpg NIST Control Library - Asset Management-4 - For Engineers Engineers are at the forefront of implementing and maintaining the technical aspects of external system cataloguing. Responsibilities: Develop and maintain tools for discovering and cataloguing external systems Implement secure interfaces with external systems Ensure proper segmentation between internal and external systems https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/6fca37e7-3e79-45a9-9736-d8a606e87d2e/analyst-9.jpg NIST Control Library - Asset Management-4 - For Analysts Security analysts play a crucial role in assessing the risks associated with external information systems. Responsibilities: Conduct risk assessments of external systems: Evaluate the potential risks associated with third-party vendors, cloud providers, and other external systems that interact with the organization's network and data. This includes identifying vulnerabilities, assessing the likelihood and impact of potential threats, and recommending appropriate security controls. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/bd73316b-1140-4a79-8ccd-58806ea69445/manager-4.jpg NIST Control Library - Asset Management-4 - For Managers Responsibilities: Develop policies for external system management: Establish comprehensive policies and guidelines that govern the selection, onboarding, and ongoing management of external systems. These policies should address security requirements, data handling, access controls, and incident response procedures. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8c49a5da-47a0-47a1-82c2-13d7e91fde5b/_672240e6-dab0-408c-a9ee-9dc8909c13bc.jpg NIST Control Library - Asset Management-4 - For Auditors Auditors ensure that the organization's practices for external system cataloguing meet required standards and best practices. Responsibilities: Verify compliance with NIST Control ID.AM-4 Assess the completeness and accuracy of the external system catalogue Evaluate the effectiveness of external system management processes https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k-jlp74 monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723402640252-0WZUQ5SDKMKGLTWX6TLX/alt_1_Asset+management.jpg NIST Control Library - Asset Management - NIST Control ID.AM-3 Focus on Organizational Comms and Data Flows NIST Control ID.AM-3 states: "Organizational communication and data flows are mapped." This control is a critical component of the Asset Management (AM) category within the Identify (ID) function of the NIST Cybersecurity Framework. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ad8226ff-8cbc-4233-a08e-8a5bf8bef40a/data-flow-8.jpg NIST Control Library - Asset Management - 1. Data Flow Mapping Create visual representations of how data moves through your organization. Implementation steps: Identify all data sources and destinations Document the types of data being transferred Map out the paths data takes between systems Note the protocols and methods used for data transfer Best practice: Use data flow diagrams (DFDs) to visualize complex data movements. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/27c70733-4ee7-41e6-afec-42fbe70d1729/data-flow-1.jpg NIST Control Library - Asset Management - 3. System Interdependency Analysis Understand how different systems and processes interact with each other. Implementation steps: Identify dependencies between systems Document the nature of these dependencies (e.g., data sharing, API calls) Assess the impact of system failures on dependent systems Best practice: Create a system dependency map to visualize these relationships. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management-am87k monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1723402503673-BJ95YR5F8A8H8NFTAEQ8/alt_1_Asset+Inventory.jpg NIST Control Library - Asset Management-2 - NIST Control ID.AM-2 Control ID.AM-2, which falls under the Identify function of the framework, specifically focuses on Asset Management. Asset Management is the process of identifying, inventorying, and tracking an organization's assets, including hardware, software, data, and people. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/93f2d6ae-5d58-4261-832c-209714b981d8/alt_2_Asset+management.jpg NIST Control Library - Asset Management-2 The recommendation is that organizations develop and maintain a comprehensive inventory of software platforms and applications, including information such as the name, version, vendor, and purpose of each software asset. This inventory should be regularly updated to ensure that it is accurate and complete. Additionally, organizations should implement processes to identify and track changes to their software assets, such as new installations, updates, and removals. By implementing Control AM-2, organizations can improve their visibility into their software assets and better manage cybersecurity risks associated with software vulnerabilities. This can help to prevent successful cyberattacks and protect sensitive information and critical systems. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/3ab63c76-4550-44be-ab0e-015bd73065ef/Inventory+and+Control+of+Software+Assets.jpg NIST Control Library - Asset Management-2 - 1. Scope Definition Clearly define what constitutes software platforms and applications in your organization. Operating systems Commercial off-the-shelf (COTS) applications Custom-developed applications Cloud-based services and applications Mobile applications Embedded software in IoT devices Defining the scope is about drawing the boundaries of your digital ecosystem. It ensures that no software falls through the cracks, from the most visible applications to the hidden scripts running critical processes. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b24335c5-a011-4bc0-9640-e05c693fdb31/alt_2_Preventive+Maintenance.jpg NIST Control Library - Asset Management-2 - 4. Maintenance and Updates Implement procedures for keeping the inventory current. Regular review and verification of inventory data Process for adding new software Procedures for retiring or removing software Integration with change management processes An outdated inventory is almost as dangerous as no inventory at all. Regular maintenance ensures your map stays accurate, allowing you to navigate your digital terrain with confidence. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/9ae25650-4519-48a6-80d1-307b5941a122/people-3.jpg NIST Control Library - Asset Management-2 - Implementation For IT Management Establish the overall strategy for software inventory management. Allocate resources for inventory tools and processes. Ensure integration with other IT and security processes. Review regular reports on the state of software assets. IT management sets the course for the entire software inventory journey. Their strategic decisions and resource allocations determine the effectiveness of the entire process. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/bccbbe17-448f-40e4-86e5-881420cff4a6/_b6ed3709-8eec-41fa-a242-f23a95cac060.jpg NIST Control Library - Asset Management-2 - For Procurement Team Ensure all software purchases are recorded in the inventory. Provide license and vendor information for the inventory. Use the inventory to optimize software licensing and purchases. The procurement team ensures that every new piece of software is properly documented from the moment it enters the organization. They're the gatekeepers of your digital ecosystem. https://ladybug-carillon-7k6n.squarespace.com/nist-control-library/idam-1-asset-management monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/276cce0e-633f-4d30-be16-8d6285071a4d/Asset+Inventory.jpg NIST Control Library - Implementation Guide-1 - Physical Device and System Inventory This guide provides an actionable approach to implementing NIST ID.AM-1: "Physical devices and systems within the organization are inventoried." It outlines specific steps and best practices for organizations to effectively inventory their physical devices and systems. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/df0eb6c9-6cb9-431e-9f85-58395010b9a9/inventory-2.jpg NIST Control Library - Implementation Guide-1 1. Establish Inventory Scope and Objectives Define what constitutes a "physical device" and "system" for your organization. This may include: Servers, workstations, and laptops Network devices (routers, switches, firewalls) Mobile devices (smartphones, tablets) IoT devices, Industrial control systems Printers and multifunction devices https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/89549ff9-40a6-43ea-a4c5-1159fab439e9/inventory-4.jpg NIST Control Library - Implementation Guide-1 - 3. Conduct Initial Inventory Perform a comprehensive initial scan using the chosen automated tools. Conduct a physical walk-through of all facilities to identify devices that may not be network-connected. Review procurement records and asset registers to cross-reference and identify any missing items. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/dcd49af0-8cc5-4ddb-9686-27cab233460c/access-1.jpg NIST Control Library - Implementation Guide-1 - 5. Establish Access Controls and Monitoring Implement role-based access controls for the inventory system, set up logging and auditing for all changes to the inventory. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a8fd44fe-8b78-46bb-b9d7-f428a996d166/access-2.jpg NIST Control Library - Implementation Guide-1 - 7. Reporting and Metrics Actions: Develop key performance indicators (KPIs) for the inventory process, such as: Inventory coverage (% of devices accounted for) Inventory accuracy (% of entries verified as correct) Average time to add new devices to inventory Generate monthly reports on inventory status and KPIs. Provide dashboard views for management to easily assess the current state of the inventory. Use inventory data to support other security processes (e.g., vulnerability management, incident response). https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/421bcf12-7522-4bc7-9984-ac1972ca2d15/Beautiful.ai+-+Comprehensive+Inventory+Management+Roadmap+-+Slide+3.jpeg NIST Control Library - Implementation Guide-1 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/pci-control-library daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/pci-control-library/control-firewall-pci-1 monthly 0.5 2024-08-22 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/00ec6ca8-0627-495b-a7df-1187007ba582/Installation+of+Security+Patches.jpg PCI Control Library - Install and Maintain a Firewall Configuration (PCI-1) Firewalls are your first line of defense in the PCI DSS battlefield, standing guard between your precious cardholder data and the wild west of external networks. Properly implemented and vigilantly maintained, they're not just a compliance checkbox—they're the digital fortification that could mean the difference between secure transactions and a headline-making data breach. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ff72c281-498a-4049-bbe6-11e83066d18d/on-prem-logos.png PCI Control Library - Install and Maintain a Firewall Configuration (PCI-1) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b82d2c4a-1246-49cd-aa3b-398d70f81c6e/cloud-logos.png PCI Control Library - Install and Maintain a Firewall Configuration (PCI-1) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/pci-control-library/coming-soon monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5f4d72fc-3350-4a55-8eda-bbdf5e291314/_6cd6ee4d-fa2c-4c89-b20a-19b879f0a378.jpg PCI Control Library - Coming Soon - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/the-crypt daily 0.75 2024-08-18 https://ladybug-carillon-7k6n.squarespace.com/the-crypt/coming-soon monthly 0.5 2024-08-14 https://ladybug-carillon-7k6n.squarespace.com/the-crypt/type-1-bare-metal-hypervisors monthly 0.5 2024-08-18 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/2238b246-009e-4fa3-970d-577c2658d121/Enterprise+Virtualization+Market+Share+-+Slide+2.jpeg The Crypt - Type 1: Bare Metal Hypervisors - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/threats daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/threats/magento-ecommerce-attacks-in-progress monthly 0.5 2024-09-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0cde9484-25eb-47d3-966a-0030a2357929/phish-1.jpg Threats - Magento, eCommerce Attacks in Progress Reported by Alienvault, https://otx.alienvault.com/pulse/66c851335edada0eac344044?utm_userid=jeremy.pickett&utm_medium=InProduct&utm_source=OTX&utm_content=Email&utm_campaign=new_pulse_from_following and Malwarebytes https://ladybug-carillon-7k6n.squarespace.com/threats/qilin-ransomeware-is-back monthly 0.5 2024-08-23 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/24f17784-411a-4d5f-8988-97dcd06f6b61/general-4.jpg Threats - Qilin Ransomeware is Back - Qilin Ransoms and Healthcare In June 2024, they targeted Synnovis, a pathology services provider, which led to significant disruptions in several key NHS hospitals in London. The group demanded a $50 million ransom, which was not paid. https://ladybug-carillon-7k6n.squarespace.com/threats/mirai-botnet monthly 0.5 2024-08-21 https://ladybug-carillon-7k6n.squarespace.com/threats/apt41-double-dragon monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1724274246030-JMHI8Z2YJA60XHTJGNAD/dragon-4.jpg Threats - APT41, Double Dragon - Description APT41, also known as Double Dragon, is a sophisticated Chinese cyber threat group that has gained notoriety for its dual engagement in state-sponsored espionage and financially motivated cybercrime operations. Here are some key points about APT41: https://ladybug-carillon-7k6n.squarespace.com/threats/span-classsqsrte-text-color-whiteevilginx2span monthly 0.5 2024-08-21 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/0cde9484-25eb-47d3-966a-0030a2357929/phish-1.jpg Threats - Evilginx 2 Evilginx2 is an open-source phishing framework developed between 2018 and 2021 as a successor to the original EvilGinx tool. This advanced framework is designed to create and manage phishing sites that can bypass two-factor authentication (2FA) by acting as a man-in-the-middle proxy, capturing not only login credentials but also session cookies and 2FA tokens, making it a potent tool for both security researchers and malicious actors. https://ladybug-carillon-7k6n.squarespace.com/threats/microsoft-vulnerabilities monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b7072ed6-7180-410a-8faa-0f039d6286e8/datacenter-4.jpg Threats - Microsoft Vulnerabilities - Microsoft August 2024 Patch Tuesday: 102 Vulnerabilities Addressed https://ladybug-carillon-7k6n.squarespace.com/threats/72-adobe-vulnerabilities monthly 0.5 2024-09-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b5ae4113-081f-4ece-a62b-bf74c4dc5a6c/artist-4.jpg Threats - 72 Adobe Vulnerabilities - Adobe Patches 72 Security Vulnerabilities Adobe has recently released patches for 72 security vulnerabilities across multiple products, including Adobe Illustrator, Dimension, Photoshop, InDesign, Acrobat, and more. These vulnerabilities could lead to arbitrary code execution, memory leaks, and denial-of-service attacks. Here are some key details: https://ladybug-carillon-7k6n.squarespace.com/threats/ivanti-avalanche-vulnerabilities-remote-code-execution-risk monthly 0.5 2024-08-20 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1724110513899-GUUVSXWUUQKPXNIJSWGO/Third-Party+Security+Management.jpg Threats - Ivanti Avalanche Vulnerabilities: Remote Code Execution Risk - Overview Multiple vulnerabilities have been discovered in Ivanti Avalanche, a mobile device management system. The most severe of these vulnerabilities could allow for remote code execution. Successful exploitation could enable an attacker to install programs, view, change, or delete data, depending on the privileges associated with the system (Ivanti Forums). https://ladybug-carillon-7k6n.squarespace.com/threats/lockbit-the-ransomware-juggernaut monthly 0.5 2024-08-19 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/a2e50294-2192-4751-b4a6-8d878be6dfa9/malware-3.jpg Threats - LockBit: The Ransomware Juggernaut The RaaS model pioneered by LockBit has revolutionized cybercrime economics. By providing tools and infrastructure to affiliates, LockBit has created a decentralized network of attackers, complicating attribution and law enforcement efforts. While specific names of LockBit members are not publicly known due to the group's operational security, law enforcement operations have occasionally revealed aliases. https://ladybug-carillon-7k6n.squarespace.com/gdpr daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/gdpr/coming-soon monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1724300808186-I2DV7HTMWORXY03U31YT/sun-tsu-3.jpg GDPR Library - Coming Soon - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/psd2 daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/psd2/coming-soon monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1724300808186-I2DV7HTMWORXY03U31YT/sun-tsu-3.jpg PSD2 (Payment Services Directive 2) Library - Coming Soon - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/amlkyc daily 0.75 2024-09-04 https://ladybug-carillon-7k6n.squarespace.com/amlkyc/coming-soon monthly 0.5 2024-08-29 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/1724300808186-I2DV7HTMWORXY03U31YT/sun-tsu-3.jpg AML&KYC Library - Coming Soon - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://ladybug-carillon-7k6n.squarespace.com/home daily 1.0 2024-09-13 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/e207a23a-a728-4115-9d55-55eafc8b6123/blog-1-sm.jpg https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/5c3cca68-329c-4f92-a389-6acaef66b85f/flow-1-sm.jpg https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/8f2e99be-5201-464e-91bd-203e3300d578/custom-1-sm.jpg https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/ba3a4354-c2ff-4245-a122-23d774c5eb8e/custom-1-med.jpg https://ladybug-carillon-7k6n.squarespace.com/about daily 0.75 2024-09-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/51270d11-c81c-4c8d-9aaf-6c637c3a5e40/selfie-1.jpg https://ladybug-carillon-7k6n.squarespace.com/_qa daily 0.75 2024-08-05 https://ladybug-carillon-7k6n.squarespace.com/coming-soon daily 0.75 2024-08-06 https://ladybug-carillon-7k6n.squarespace.com/license daily 0.75 2024-09-03 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/aeda73b5-481f-47d6-adb1-ea4ad7c9badb/inventory-2.jpg https://ladybug-carillon-7k6n.squarespace.com/rules daily 0.75 2024-09-04 https://images.squarespace-cdn.com/content/v1/66917f5034445f30aac0938d/b18a171e-f6b3-4759-8964-c6171a3d4e9c/Account+Management.jpg https://ladybug-carillon-7k6n.squarespace.com/blog-idea-plans daily 0.75 2024-08-29