Article The DoD IAT level 2 The DoD IAT level 2 overview The Department of Defense (DoD) Directive 8570 can be specifically defined as follows: ". . . . guidance and procedures…
Article Breaking into the boys club: Career advice for aspiring female cybersecurity pros When it comes to recruiting new talent, the cybersecurity industry is facing a big challenge. The supply of qualified candidates is far short of…
Article Basic pentesting: 2 — CTF walkthrough In this article, we will try to solve another Capture the Flag (CTF) challenge. This CTF was posted on VulnHub by Hadi Mene and is part of a Basic…
Article 10 best jobs in information security Cybersecurity includes a wide variety of different roles. Here are 10 of the best you may want to consider pursuing.
Article Becoming a Cybersecurity Practitioner (CSXP) Introduction The growing concern of cybercrime is pushing more and more companies to staff their IT teams with professionals that are able to…
Article SolarWinds LEM SolarWinds Log & Event Manager (LEM) is a security information and event management (SIEM) system. SolarWinds LEM is an end-to-end SIEM that groups,…
Article How to document security incidents for compliance in 10 steps Many organizations are subject to regulations that enforce compliance to federal standards, such as HIPAA. This is because these organizations often…
Article The International Association of Privacy Professionals CIPT Certification One of the most pressing issues in the Internet age is data protection. The data of individuals and businesses must be protected from malicious…
Article The Increasing Threat of Banking Trojans and Cryptojacking Blockchain is one of the hottest and potentially among the most disruptive technologies today. So naturally, it's a magnet for the criminal element, w
Article Ten benefits of security awareness training Great training is the bedrock of engaged employees. Engaged means they are aware of and follow directives. Without training, employees could be…
Article The GSEC certification and exam GIAC Security Essentials (GSEC) is one of the top certifications on the market for professionals who want to prove their IT skills on…
Article VERIS INCIDENT FRAMEWORK The VERIS methodology was created by Verizon back in 2010. This was an effort to create an environment for the classification of specific…
Article 7 most difficult information security certifications Demand for information security professionals has grown in the last few years, as more companies are upping the ante on protecting the security of…
Article How to comply with FERPA Higher education is not only a popular way to expand one's knowledge; it can also open doors to employment and other opportunities. This translates…
Article Top 5 open-source and commercial secure code review tools Code review is an indispensable part of the development process. And as such, code review tools are an indispensable part of the development team.…
Article Vulnhub machines walkthrough series — Tr0ll: 1 Today, we'll be continuing with our walkthrough series on interesting Vulnhub machines. In this article we will see a walkthrough of the Tr0ll: 1…
Article 4 Common Security Awareness Mistakes and How to Mitigate Them Introduction For any company, being aware of the cyberthreat landscape is critical. There is often the mindset that most cyberattacks can be…
Article Vulnhub Machines Walkthrough Series — Tr0ll: 2 Today, we'll be continuing with our walkthrough series on interesting Vulnhub machines. In this article, we will see a walkthrough of the Tr0ll: 2…
Article How to Create a Security Awareness Program A security awareness program can be an extremely valuable tool. It helps an organization thwart active attacks and reduces the amount of weaknesses…
Article The 10 largest privacy threats in 2018 Looking at statistics, 2017 could be considered a record year for data breaches. For anyone following popular security-related news, this should not…
Article How to Conduct a Data Privacy Impact Assessment in 2018 In May of 2018, after a two-year grace period, the General Data Protection Regulation (GDPR) was finally activated. GDPR exists to ensure that every…
Article 10 call center security tips for protecting customer data and privacy Call centers are particularly vulnerable to privacy breaches, and it is mainly due to what is best described as a security ripple effect. In this…
Article When is Client-Side Penetration Testing Appropriate? Client-side penetration testing, also known as internal testing, is the act of exploiting vulnerabilities in client-side application programs such…
Article Security Issues in Edge Computing and the IoT The Internet of Things (IoT) is widely considered to be the next wave of computing, where distributed devices automate common tasks and make…
