Kick Cyber Security Into Gear - Page 13 Of 21 - ASAP = As Secure As Practical, As Soon As Possible

Tel: (+61) 422 933 319

Email: [email protected]

Articles
Empathy in cyber security
Empathy, the ability to understand the feelings of others as if we are in their shoes. Have we as cyber security professionals really thought that the target of a Malware attack is not us when we evaluate our cyber security posture? It is almost never the business leader or the person reading these articles that…
Read More: Empathy in cyber security
kicksec.IO
01/11/2021
ACSC, Articles, ASD 8, Cyber Security Framework
The problem is NOT Cyber security!
The “Compliance with the NSW Cyber Security Policy” special report released on the 28th October 2021 should be a serious concern to every NSW resident who has their Personally Identifiable Information being “securely” held by a government agency. Vic, NSW, QLD, SA, NT and TAS could very likely be transposed with NSW and these findings…
Read More: The problem is NOT Cyber security!
kicksec.IO
30/10/2021
Articles, Cyber Security Framework, Planning
Hyperbole – Cyber incident response
Hyperbole (love the word!) ….. I would be disappointed if my business leaders thought that my security team could not respond to a cyber incident. The linked article describes that business leaders do not feel their organisation could respond to a cyber incident. So what is the problem? The article is not an accurate impression?…
Read More: Hyperbole – Cyber incident response
kicksec.IO
28/10/2021
Cyber Security Framework, WTH
Controls vs. Control functions
Cyber security planning
Getting your terminology right is extremely important and I for one have made this error before. Control – Anything directly or indirectly used that affects the frequency or magnitude of a loss. Control Function – How a control directly or indirectly affects the frequency or magnitude of a loss.
Read More: Controls vs. Control functions
Cyber security planning
Michael Brooke
25/10/2021
Advanced Managed Detect Response, AMDR, Articles, Endpoint Detection Response, EndPoint Protection, EPP, Extended Detection Response, Managed Detection Response, XDR
AV NGAV EDR XDR MDR AMDR
The cyber security landscape has seen huge expansion and growth in the past 5 years and End Point Detection and Response (EDR) has been one of the biggest areas of expansion. https://www.morphisec.com/hubfs/2020%20State%20of%20Endpoint%20Security%20Final.pdf According to Ponemon Institute, 68% of organisations suffered one or more endpoint attacks that successfully compromised data or IT Infrastructure. In 2018 Gartner…
Read More: AV NGAV EDR XDR MDR AMDR
Michael Brooke
23/10/2021
Articles, Breach
Sinclair Broadcasting Breach
Story: Another ‘murican Fortune 500 company breached and affected by a Ransomware attack. With Broadcasters, retailers (online and store), NBN service providers, BNPL, Transport, Tourism (lol), some utilities etc etc….. there is an immediate cost to your business profits from an outage, customers are not patient and will go elsewhere immediately and buy their product…
Read More: Sinclair Broadcasting Breach
Michael Brooke
20/10/2021
Articles, Data Loss Prevention, Data Protection, DLP
Data is difficult!
Know your Data? (link below)….. Data is difficult, Categorising and securing Data is difficult, I personally rate this as a 4 or 5 out of 5 stars in my Cyber Security complexity Framework. Meaning that it is my opinion that this is not the place that most organisations looking to reduce their Cyber Risk should…
Read More: Data is difficult!
Michael Brooke
18/10/2021
Articles
6502 – coming back to life?
For those who know what the above is then kudos to you 😀 I grew up using an Atari 130XE with a 1.7 MHZ 6502C and as my first computer I loved it and the freedom it created for me to program and to play games! The 6502 is coming back to life in a…
Read More: 6502 – coming back to life?
Michael Brooke
17/10/2021
Articles, WTH
Marketectures are not what the Client Needs
The recent security reference architecture document recently released by Microsoft is a glaring indictment of where the Cyber Security industry is in 2021. A Sprawling cityscape of Vendors Spruking their “Better Mouse Traps” (Thanks Bryan). Organisations have massive spaghetti junctions of interconnecting applications, services, users and platforms. Familiar with the below? this was my life…
Read More: Marketectures are not what the Client Needs
Michael Brooke
17/10/2021
Articles
Welcome to mass Travel disruption!
The shape of things to come for Australians? ….. I am the worst at actually printing out a “Hard copy” of any ticketing or required material, I like to rely on Technology and use the apps on my phone…. It is guaranteed …… without a doubt that our “Vaccination Certificate” Covid Government app back-end infrastructure…
Read More: Welcome to mass Travel disruption!
Michael Brooke
15/10/2021