Now and then you come across a truly valuable presentation or piece of collateral. In this case, USTelecom, the organization that represents telecommunications businesses in the US, has put together a bit of both as a gift to the community at-large.
It was developed to help individuals and organizations better understand cybersecurity challenges and responses. The 50 slide PowerPoint show includes over 350 links to almost every security guideline imaginable – government, corporate, academic, analyst – and includes definitions, reports, best practices, and strategies.
- Details
- Written by David Ginsburg
- Category: Security Programs and ISMS
The CIS Benchmark for Kubernetes 1.8 release continues to bring security enhancements to the core orchestration platform. The CIS Kubernetes community has been busy working on refreshing the benchmark to align with the new released features and narrow the gap between the announcement of the GA version of the product and the benchmark release. Download your copy of the benchmark from the CIS website today (NOTE: Actual benchmark title aligned to the new release is ‘CIS Kubernetes Benchmark v1.2.0).
This version of the benchmark has undergone significant changes. The most awaited and subtle change is that the entire benchmark is re-factored to consider kubeadm based deployments. Kubeadm is increasingly becoming the developer’s choice of deployment rather than individual installation of various Kubernetes components. This standardization also helps any other deployment mechanisms to map and adopt the procedures easily.
- Details
- Category: Security Programs and ISMS
With regard to Critical Security Controls, CSC “…failure to implement all of the controls that apply to an organization’s environment constitutes a lack of reasonable security.”
Kamala Harris, Attorney General, CA
Breach Report 2016
- Details
- Category: Security Programs and ISMS
One might conclude that if a company achieves compliance, it is fundamentally secure. Unfortunately, this isn’t always the case. Most of us in the security industry talk at length about working to be truly secure while implementing compliance initiatives. Why do some organizations seem to be coming up short?
- Details
- Category: Security Programs and ISMS
With all of the recent high-profile data breaches, companies are scrambling to figure out ways to secure their IT infrastructure, including their public clouds. It can be confusing to sort through the morass of cloud-security solutions and vendors and emerge confidently with a selection.
- Details
- Category: Security Programs and ISMS
Subscribe
Tag Cloud
Categories
-
Continuous Security Assessment & Remediation (17)
-
Amazon Web Services (AWS) (4)
-
Regulatory Compliance (7)
-
DevOps (11)
-
Security Programs and ISMS (5)
-
Docker Container Security (8)
-
Security Compliance Platform (10)
-
Trending in Security (10)
-
Risk Management & Analytics (2)
-
CyberPosture (1)
-
Cloud Migration (6)