SIEM solutions for incident management
SIEM solutions for incident management – Use cases This article examines practical use cases: How we’ve used SIEM solutions for incident management. It demonstrate how SIEM strengthens security operations and prevents costly incidents. Security Information and Event Management (SIEM) solutions are often seen as complex and expensive. However, their true value lies in mitigating financial, […]
The human factor: How to undermine your PCI DSS compliance
How to undermine your pCI DSS compliance efforts When it comes to PCI DSS compliance, most organisations focus on technical controls such as firewalls, encryption, and monitoring tools, to secure cardholder data. However, even the most advanced technical safeguards can be rendered useless if employees mishandle cardholder data due to a lack of training. Newer […]
Is your candidate real? North Korea scams
Is your candidate real? North Korea scams In May 2024, the U.S. Department of Justice unsealed charges against individuals involved in schemes where overseas IT workers, some linked to North Korea, posed as U.S. citizens to secure remote employment with over 300 American companies. These workers utilized stolen or borrowed identities to gain employment with […]
Using the NIST Cyber Security Framework (CSF) v2
Using the NIST Cyber Security Framework (CSF) v2 In this post, we’ll talk about using the NIST CSF v2, and show you that managing cyber security risk need not be like trying to juggle flaming chainsaws while riding a unicycle under the big top! We’ll explain how you can use the NIST CSF 2.0 to […]
Law Firms And Cyber Tech
Cyber security and law firms: Don’t just do it! For law firms, cyber security is rarely a problem that can be solved with a single product. Legal practices handle highly sensitive client data, confidential communications, financial records and high-stake legal matters, making them prime targets for cybercriminals. Of course, […]
A long life with ISO 27001!
Happiness and a long life with ISO 27001 “Data is the new oil!” The phrase was famously uttered by British mathematician Clive Humby nearly 20 years ago but it’s often used today, not in its original context, but to try to convey the idea that data is valuable in its own […]
TPSP AOCs save you money!
PCI DSS – A TPSP will save your money! All businesses that accept, process, store, or transmit cardholder data (CHD) must meet the requirements of the PCI DSS, and meeting those requirements requires merchants to address up to 251 controls across 12 requirements. This can be challenging enough […]
dotSec’s AOC saves you money!
DotSec’s AOC saves you money! PCI DSS compliance DotSec is a PCI DSS compliant service provider and we’ll use this blog post to look specifically at what service providers need to know to operate within the context of the PCI DSS. And even if PCI DSS is not relevant to you, you might like to […]
Cyber insurance: A risky business
Cyber insurance:A risky business! As the frequency of cyber attacks increases and incident recovery becomes more expensive, it is important for businesses to have cyber insurance to reduce the potential losses associated with such events. In fact, such coverage is something we expect will become mandatory for all kinds of contracts and agreements in the […]
It’s not what you know…
SOC and SIEM. It’s not what you know. (Actually, that’s exactly what it is!) Monitoring eCommerce sites for compromise DotSec knows that securing eCommerce sites properly can be tricky. Various best-practice guides to securing eCommerce software such as Magento do exist (see [1], [2] below) but despite the efforts of all concerned (including system owners, […]