InfoSec Compliance & AI Governance For over 20 years, DISC InfoSec has been a trusted voice for cybersecurity professionals—sharing practical insights, compliance strategies, and AI governance guidance to help you stay informed, connected, and secure in a rapidly evolving landscape.
Feb 21 2020
Privilege Escalation FTW
httpv://www.youtube.com/watch?v=yXe4X-AIbps
Windows Privilege Escalation Techniques (Local)
httpv://www.youtube.com/watch?v=PC_iMqiuIRQ
Learn System Hacking E13: Windows 10 Privilege Escalation
httpv://www.youtube.com/watch?v=5Q6vEyLY7kY
Subscribe to DISC InfoSec blog by Email
Jan 29 2020
https://en.wikipedia.org/wiki/Tokenization_(data_security)
Source: Tokenization vs. Encryption vs. Aliasing – How to Truly Minimize Compliance Risk
The tokenization of things | Matthew Roszak | TEDxSanFrancisco
httpv://www.youtube.com/watch?v=Rto-earGcxg
Subscribe to DISC InfoSec blog by Email
Jan 19 2020
Source: NIST Releases Version 1.0 of Privacy Framework
The best practice guide for an effective privacy function
Open a PDF file NIST Releases Version 1.0 of Privacy Framework
Developing the NIST Privacy Framework – Part 1
httpv://www.youtube.com/watch?v=W-snx9jRFf4
Developing the NIST Privacy Framework – Part 2
httpv://www.youtube.com/watch?v=gZ7ED0t09zk
Developing the NIST Privacy Framework – Part 3
httpv://www.youtube.com/watch?v=x6lTHu1VbiM
Subscribe to DISC InfoSec blog by Email
Jan 03 2020
[pdf-embedder url=”https://blog.deurainfosec.com/wp-content/uploads/2020/01/WEF_Cybersecurity_Guide_for_Leaders.pdf”]
Open a PDF file The Cybersecurity Guide For Leaders in Today’s Digital World.
Annual Meeting on Cybersecurity 2019 | Enabling Leadership for a Secure Digital Future | World Economic Forum
Cybersecurity in a Digital World. The Future is Bright
httpv://www.youtube.com/watch?v=Tu1dkliqpHQ
Subscribe to DISC InfoSec blog by Email
Dec 30 2019
When evaluating the security of an application and data model ask the questions:
Data When threat modeling, consider the following common scenarios:
Source: Threat Modeling for Data Protection
Threat Modeling in 2019
httpv://www.youtube.com/watch?v=ZoxHIpzaZ6U
Subscribe to DISC InfoSec blog by Email
Dec 19 2019
ISO/IEC 27701 is the international standard that serves as an extension to an ISO 27001/ ISO 27002 #ISMS (information security management system). It provides guidelines for implementing, maintaining, and continually improving a #PIMS (privacy information management system).
Develop a privacy information management system as an extension to your ISO 27001-conformant ISMS with ISO/IEC 27701. Supports GDPR compliance.
SECURITY TECHNIQUES — EXTENSION TO ISO/IEC 27001 AND ISO/IEC 27002 FOR PRIVACY INFORMATION MANAGEMENT SYSTEM #PIMS
* The Standard includes mapping to the GDPR, ISO/IEC 29100, ISO/IEC 27018, and ISO/IEC 29151
* Integrates with other management system standards, including the information security standard, ISO/IEC 27001
* Provides PIMS-specific guidance for ISO/IEC 27002
* Specifies requirements and provides guidance for establishing, implementing, maintaining, and continually improving a PIMS
* Supports compliance with the GDPR and DPA 2018
* Provides guidance for data controllers and processors responsible for processing personal data
Achieve full compliance with ISO 27701:2019
The ISO 27701 Gap Analysis Tool has been created to help organizations identify whether they are meeting the requirements of the Standard and where they are falling short. Note that this tool assumes that you have a complete and functioning ISO 27001:2013 ISMS (information security management system).
It helps organizations prioritise work areas in order to expand an existing ISMS to take account of privacy. It also gives organizations direction, helping project managers identify where to start.
The tool is designed to work in any Microsoft environment. It does not need to be installed like software, and it does not depend on complex databases; it relies on human involvement.
ISO 27701 The New Privacy Extension for ISO 27001
httpv://www.youtube.com/watch?v=-NUfTDXlv30
Quick Guide to ISO/IEC 27701 – The Newest Privacy Information Standard
httpv://www.youtube.com/watch?v=ilw4UmMSlU4
General Data Protection Regulation (GDPR) | The California Consumer Privacy Act (CCPA)
Subscribe to DISC InfoSec blog by Email
Dec 15 2019
via CrowdStrike
Open a PDF file 2019 Global Threat Detection Report.
2019 Global Threat Report- The 1-10-60 Rule
httpv://www.youtube.com/watch?v=y70R2vUbvls
World Economic Forum Global Risks Report 2019
httpv://www.youtube.com/watch?v=kwQMsBWd-jo
Subscribe to DISC InfoSec blog by Email
Dec 13 2019
By Ena Kadribasic on Security
The fintech sector has brought consumers an endless stream of modern offerings that have enabled them to ditch several outdated banking and lending products.
Companies now have advanced B2B payment solutions at their fingertips, and online financial solutions have never been more convenient – largely thanks to the progress made by fintech startups.
But, despite being on the cutting edge of digital financial products, young fintech companies are at a disadvantage in a wildly important arena: data security.
With limited resources, growing compliance regulations around the world, and a constantly-evolving list of increasingly dangerous cyber threats, fintech startups face a uniquely difficult uphill battle.
And, with data breaches continuing to leer as an ever-present security threat, fintech firms are turning to new and advanced approaches to data privacy.
But, first, what do we mean when we talk about data security for startups?
Source: Data Security Solutions for Fintech Startups
Subscribe to DISC InfoSec blog by Email
Dec 07 2019
[pdf-embedder url=”https://blog.deurainfosec.com/wp-content/uploads/2019/12/NIST_ISO_Green_Paper_NEW_V3___Final_Edits.pdf”]
How to get started with the NIST Cybersecurity Framework (CSF) – Includes Preso
Written Information Security Program (WISP) – ISO 27002, NIST Cybersecurity Framework & NIST 800-53
httpv://www.youtube.com/watch?v=B8QjwD6f4rc
What is ISO 27001?
httpv://www.youtube.com/watch?v=AzSJyfjIFMw
Virtual Session: NIST Cybersecurity Framework Explained
httpv://www.youtube.com/watch?v=nFUyCrSnR68
Nov 30 2019
infographic via Rafeeq Rehman
Cybersecurity CISO Secrets with Accenture and ISACA
Cybersecurity Talk with Gary Hayslip: Aspiring Chief Information Security Officer? Here are the tips
Our most recent articles in the CISO category.
Explore latest Chief Information Security Officer titles
Nov 21 2019
https://www.sans.org/media/critical-security-controls/Poster_CIS-Security-Controls_2018.pdf
The best practice guide for an effective infoSec function
Open a PDF file Five Keys for Building a Security Program.
Nov 18 2019
Read how a virtual chief information security officer (vCISO) can help you uplift a struggling information security program.
Source: CISO or vCISO? The Benefits of a Contractor C-level Security Role
Webinar: vCISO vs CISO – Which is the right path for you?
httpv://www.youtube.com/watch?v=HIvuIIQob7o
CISO as a Service or Virtual CISO
httpv://www.youtube.com/watch?v=X8XSe3ialNk
The Benefits of a vCISO
httpv://www.youtube.com/watch?v=jQsG-65wxyU
Subscribe to DISC InfoSec blog by Email
Oct 21 2019
Do you know which of your vulnerabilities are critical, those which can wait a day, vs ones that are just noise? Read this handy guide to get the 6 essential pillars for comprehensive InfoSec prioritization:
The Five Laws of Cybersecurity | Nick Espinosa | TEDxFondduLac
httpv://www.youtube.com/watch?v=_nVq7f26-Uo
Your 5 Year Path: Success in Infosec
httpv://www.youtube.com/watch?v=Uv-AfK7PkxU
Top 20 Security Controls for a More Secure Infrastructure
Subscribe to DISC InfoSec blog by Email
Oct 16 2019
This report examines the general state of security within business today, exploring the hurdles that are preventing companies from an ideal security posture and suggesting the steps that can lead to improved security in the digital economy.
As the technology industry enters the next phase of maturity, there are more questions about the implications of emerging trends operating on a global scale. Aside from social impact ramification, utmost reliance on digital data and the sweeping collection of personal information are highlighting the critical nature of information security and privacy.
Digital Transformation: From AI and IoT to Cloud, Blockchain, and Cybersecurity | MIT PE
httpv://www.youtube.com/watch?v=NwwazhND9BA
Inside the CenturyLink Security Operations Center: Securing Your Digital Business
httpv://www.youtube.com/watch?v=_UyhYPOnNcY
The Convergence (and Divergence) of IT and OT Cyber Security
Subscribe to DISC InfoSec blog by Email
Oct 14 2019
The best practice guide for an effective infoSec function: iTnews has put together a bit of advice from various controls including ISO 27k and NIST CSF to guide you through what’s needed to build an effective information security management system (ISMS) within your organization.
This comprehensive report is a must-have reference for executives, senior managers and folks interested in the information security management area.
Open a PDF file The best practice guide for an effective infoSec function.
How to Build a Cybersecurity Program based on the NIST Cybersecurity Framework
httpv://www.youtube.com/watch?v=pDra0cy5WZI
Beginners ultimate guide to ISO 27001 Information Security Management Systems
httpv://www.youtube.com/watch?v=LytISQyhQVE
Conducting a cybersecurity risk assessment
Subscribe to DISC InfoSec blog by Email
Oct 08 2019
Oct 07 2019
Want to strengthen your writing in under an hour? Watch the video below to help you avoid the top 10 writing mistakes you may encounter when working as a cybersecurity professional.
Source: Top 10 Cybersecurity Writing Mistakes
Top 10 Writing Mistakes in Cybersecurity and How You Can Avoid Them
httpv://youtu.be/V7lO7UgxQV4
SANS Writing Course | Writing CheatSheet
Burying the Main Point – Common Cybersecurity Writing Mistakes
httpv://www.youtube.com/watch?v=xM6PgakpLgU
Overstuffing the Paragraphs – Common Cybersecurity Writing Mistakes
 
|
 
|
Subscribe to DISC InfoSec blog by Email
Oct 06 2019
When It Come Down To It, Cybersecurity Is All About Understanding Risk
Risk Management Framework for Information Systems
How to choose the right cybersecurity framework
Improve Cybersecurity posture by using ISO/IEC 27032
httpv://www.youtube.com/watch?v=NX5RMGOcyBM
Cybersecurity Summit 2018: David Petraeus and Lisa Monaco on America’s cybersecurity posture
httpv://www.youtube.com/watch?v=C8WGPZwlfj8
CSET Cyber Security Evaluation Tool – ICS/OT
httpv://www.youtube.com/watch?v=KzuraQXDqMY
Subscribe to DISC InfoSec blog by Email
Oct 04 2019
As payment technologies evolve, so do the requirements for securing cardholder data.
Source: Slideshows – Dark Reading
PCI DSS: Looking Ahead to Version 4.0
3 Primary Goals for PCI DSS Version 4.0
What is PCI DSS? | A Brief Summary of the Standard
httpv://www.youtube.com/watch?v=szVmMxWORBc
How to Achieve PCI DSS Compliance on AWS
httpv://www.youtube.com/watch?v=qx4OwP0VIyU
Subscribe to DISC InfoSec blog by Email
Oct 01 2019
More detail on site: Steps to CCPA Compliance roadmap
Everything You Need To Know About CCPA 2018
Subscribe to DISC InfoSec blog by Email
