Critical Security Controls
What Assumptions Are You Making?
If my security agents were not working correctly, then I would get an alert. Since no one said there is... The post What Assumptions Are You Making? appeared first on Security Ever ...
2019 Update on frameworks, standards, and regulations for infosec
At the 2019 BSides Tampa Security conference I did a talk on 2019 Updates on frameworks, standards, and regulations for infosec. Over the last year several new and updated frameworks and regulations ...
Critical Security Controls v7 RELEASED
I have previously posted on the Critical Security Controls, which many still incorrectly called the "SANS Top 20" and the like, tho SANS hasn't been managing them for some time. The current ...
SecurityEverAfter 2018-02-22 19:41:00
I recently posted the below on the SANS Internet Storm Center.The Center for Internet Security (CIS) has been working diligently to update the CIS Controls (formerly known as the Critical Security Controls) ...
Framework/standard updates coming
Well, it's early 2018 and there are several information security framework/standards being updated:NIST CSF v1.1. The second draft was released at the end of 2017, and we just wrapped up the comment ...

