TLDR; * Measure your current risk posture using existing tools. This helps in justification of the spend and budget planning. * Data privacy is a shared responsibility across all members in the organization. It’s not a tools problem. * MFA should be set up for all the apps and services as a
November 04, 2022
TLDR; * Security program should be risk driven rather than compliance driven. So risk assessment is the key for designing a good security program. * Continued reevaluation of the risks in your risk matrix is the key to prioritization. It also helps in addressing security depth. * Prior to using any open source
October 21, 2022
TLDR; * For risk management, have security baked in early in your SDLC process. This helps in your security debt prioritization as well. * Follow the Information Security triad, which is also known as CIA Triad. The confidentiality, integrity and availability. For Data Protection and Cyber security, apply the NIST framework for
October 07, 2022