Here I am, trying to describe an evident problem with a group of people I’m dealing with. I’m trying to simplify it, and it’s a very easy solution, one that, by the way, I’ve implemented using my own function. I have to say, the main issue isn’t that we make mistakes; the issue is that […]
The Wrong Perception of sophistication Every generation of engineers falls for the same trap, believing that complexity equals strength. It doesn’t. Complexity is fragility disguised as innovation. It’s the art of building systems that no one can understand, troubleshoot, or defend. The beauty of the most effective securing techniques is in their simplicity, not in […]
Articles will be revealing in many aspect of information security and information technology in general, but why would you trust SECURE TARGET?
One of the most frustrating things I have observed throughout my career is the number of organizations that continue spending more money, hiring more security people, deploying more security products, attending more security conferences, obtaining more certifications, and yet somehow remain just as vulnerable as they were years ago. In many cases they are actually […]
One of the most common misconceptions I see among business leaders is the belief that security is nothing more than a necessary expense, a cost center that exists solely to consume budget, slow projects down, create additional processes, and occasionally tell people what they cannot do. In many organizations, security is viewed the same way […]
There is no doubt that security is not a project, there is no end and we need to constantly evolve but does it seem to you that you may put more effort you expect? You would sense some doubt about why you are constantly running after fixing issues, but is this the way security works? […]
Micro segmentation is the particle of an effective network segregation Network security administration barely leverages a concept which basically has been there forever and could literally saves them forever when dealing with security of network services, and that is nothing but micros segmentation. I usually bring practical examples to my workshops so students are able […]
First of all, auditor needs to be a SME, not only to the security management system, but also specifically in regards to ISO 27001. The reason is related to the fact that “terminology” or “particular definition” of terms is important. Then there are three simple aspects of any process or policy document which should have been adequately addressed by […]
the easy way to maintain an effective, low cost and smart ISO 27001 security management system Even though there is no magic behind auditing a system based on ISO 27001, there are simple tricks which help you handle ISO 27001 or many other similar standards and frameworks, both as and auditor and auditee. I would […]