2019 Update on frameworks, standards, and regulations for infosec

At the 2019 BSides Tampa Security conference I did a talk on 2019 Updates on frameworks, standards, and regulations for infosec. Over the last year several new and updated frameworks and regulations ...

Critical Security Controls v7 RELEASED

I have previously posted on the Critical Security Controls, which many still incorrectly called the "SANS Top 20" and the like, tho SANS hasn't been managing them for some time. The current ...

March Updates on Frameworks & Standards

Last month I posted some information on several information security framework/standards being updated and sense then there have been updated on all of them. So here we go:NIST CSF v1.1. The second ...

Framework/standard updates coming

Well, it's early 2018 and there are several information security framework/standards being updated:NIST CSF v1.1.  The second draft was released at the end of 2017, and we just wrapped up the comment ...

Secure Guardrails