The Open House Problem Why are we not able to secure? Because we open everything…and then ask people to be careful. It is like opening all the doors of a house and telling everyone inside: be alert. We call this awareness. Awareness of what? Of a problem we created by design? “You don’t warn people […]
Operations fail by focusing on tool rather than technique! In context of information technology, with all primary operations like Systems administration, Patching and updating, Backup and replication, Malware protection…and all related sub-tasks, focus on Tools is an enemy of the process! Defining, developing or choosing a technique in advance is crucial to an IT operation. […]
If you believe a final penetration test is the gatekeeper of your security, you are already behind. Security is not an event that happens at the end of a sprint; it is an architectural decision made at the first line of code. If your process lacks a framework before the test, your “secure” code is […]
Everybody’s talking about importance of physical exercise and routine workouts these days, and of course that’s the result of 21st century life-style which is forced through technology but how about some technology exercises and routine practices which can help reduce the pressure on tech staff workload and leads us to a healthier IT environment? Documentation […]
In practice, most of internet anonymous services are only exposing your net identity in a different manner, even more obvious and only in a noisier way! Long story short, if your are concerned about so-called ‘Privacy‘, do Not rely on popular techniques and tools of net anonymity! When you connect to a (Anonymous) VPN service […]
How to utilize native Windows security features to get beyond all the tools in the market?! Most of the times ‘extra tools’ are just for doing things in a different way, perhaps more convenient, but not necessary in a better way, or more effective, cheaper or faster way and Windows is not an exception. Speaking […]
From struggling or hardly surviving, to a fully supervised and manageable security program… Most companies are struggling with running an smooth security program. No matter how much they are spending on that, the difference is really not that much. From zero budget to million dollars security budgets, they still do not have enough trust in […]
No doubt that companies struggle with information security these days. Today they spend hundreds of thousand dollars, some millions, tomorrow they realize they have done nothing! Security folks do not have peaceful night sleep, because they know what they have done during the day could easy be compromised! Regardless of why we are spending money […]
We Have Forgotten The Real Problem Sometimes I think we have become too obsessed with Security. Not because security is bad, not because security is not important, but because security was never supposed to be the goal. The goal is food, the goal is healthcare, the goal is energy, the goal is meaningful jobs, the […]
Use following checklist to make sure you are on the right track to choose your first or next SIEM solution. The whole process takes 1-4 weeks based on your dedication and vendor availability. Remember the worst thing is being in rush in five four steps: Write a plan Write down all the steps you anticipate […]
Would you put more complex firewall rules when internal nodes are vulnerable due to initial default insecure setup, or setup numerous security tools while setting up more and more insecure nodes at the same time?!
There are signs before your IT department faces a disaster or worse, jeopardize your business by affecting tech operations in different departments. Those are signs of an overwhelmed IT so let’s take a look at common signs and symptoms: 1) Lack of resourcesWhenever your IT staff are always talking about lack of resources be aware […]