2013 Information Security InfoSec 
Krebs on Security
JUNE 18, 2021
The SEC said that under First American’s remediation policies, if the person responsible for fixing the problem is unable to do so based on the timeframes listed above, that employee must have their management contact the company’s information security department to discuss their remediation plan and proposed time estimate.
Krebs on Security
FEBRUARY 22, 2024
Security experts who reviewed the leaked data say they believe the information is legitimate, and that i-SOON works closely with China’s Ministry of State Security and the military. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Cisco Security
MAY 5, 2022
covers these security compliance framework and certification standards: SOC 2® – SOC for Service Organizations: Trust Services Criteria. ISO IEC 27001:2013 – Information technology — Security techniques — Information security management systems — Requirements. Today, the Cisco CCF V1.0
Notice Bored
FEBRUARY 20, 2022
The newly-published third edition of ISO/IEC 27002 is a welcome update to the primary ISO27k controls catalogue (officially, a 'reference set of generic information security controls'). Aside from restructuring and generally updating the controls from the 2013 second edition, the committee (finally!) hopefully.
Notice Bored
FEBRUARY 24, 2022
Last week's release of a completely restructured ISO/IEC 27002:2022 has naturally prompted a rash of questions from anxious ISO27k users around the world about the implications for ISO/IEC 27001:2013, particularly on the certification aspects since '27002:2022 no longer aligns with '27001:2013 Annex A.
eSecurity Planet
AUGUST 9, 2022
Thus, it can be difficult for even small enterprises to keep up with information security and data privacy compliance. Sometimes, however, information security, data privacy, and IT compliance overall are people problems more than they are pure data problems. Security, Privacy and Compliance Can Conflict.
Notice Bored
JUNE 5, 2022
The organisation cannot adopt a generic suite of information security controls simply on the basis that they have been recommended or suggested by someone - not even if they are noted in Annex A. Justification for including a control is its effect on modifying information security risk. Subclause 6.1.3 Subclause 6.1.3
Expert insights. Personalized for you.
320 
Let's personalize your content