- Blog
- Profile
-
Laws related to Information Security
18 U.S.C. § 1029. Fraud and related activity in connection with access devices 18 U.S.C. § 2701 et seq. Stored Wire and electronic communications and transactional records access 18 U.S.C. […]
-
Security Training
Security job skills training SSCP exam A series of university courses in general information security Security awareness training A series of newsletters, with general information security Business-unit walk-through
-
Computer fallacies
Fallacy vs. Principle Fallacy Principle Information wants to be free People are in control of what information is released or shared Laws are clear about the legality of all actions […]
-
Risk Response Types
Risk avoidance: shutdown of servers when there is suspicion of virus infection Risk transfer: hardware insurance to theft, loss and fire damage Risk acceptance: let employees receive private emails in […]
-
Stages of Risk Assessment Process
Risk Determination quantify the probability of attack, it’s impact, and the adequacy of current or planned controls. Control recommendations considers the effectiveness, performance impacts, safety and reliability of control options. Likelihood […]
-
Types of Risk Assessment
Qualitative The financial officer’s estimate that password scanning attacks are highly probable. The IT manager’s opinion on what impact a flood would have on the server room. Quantitative The cost […]
-
Importance of Risk Management
Risk Management is important, because it: enables identification and protection of all critical assets helps ensure legal compliance
-
Risk assessment process
Threat identification is the review of technical and technical events that may damage a system System characterization is the review of system and data criticality and sensitivity Control analysis is […]
-
Spanning-Tree Analysis
Maps all possible threats to an information system according to general risk categories.
-
SOMAP
Security Officers Management and Analysis Project. A Swiss non-profit organization.