Penetration testing will never be an exact science where a complete list of all possible issues that should be tested can be defined. Indeed penetration is only an appropriate technique to test the security of web applications under certain circumstances. For information about what these circumstances are, and to learn how to build a testing framework and which testing techniques you should consider, we recommend reading the OWASP Testing Framework Part One (http://www.owasp.org) .

(more…)

Cybersecurity blue teams are groups of individuals who identify security flaws in information technology systems, verify the effectiveness of security measures, and monitor the systems to ensure that implemented defensive measures remain effective in the future. While not exclusive, this list is heavily biased towards Free Software projects and against proprietary products or corporate services.

(more…)

For many organizations, their employees, contractors, business partners, vendors, and/or others use enterprise telework or remote access technologies to perform work from external locations. All components of these technologies, including organization-issued and bring your own device (BYOD) client devices, should be secured against expected threats as identified through threat models. This publication provides information on security considerations for several types of remote access solutions, and it makes recommendations for securing a variety of telework, remote access, and BYOD technologies. It also gives advice on creating related security policies.

(more…)

The NCSP® 800-53 Specialist accredited certification course with exam teach candidates how to Adopt, Implement & Operationalize the NIST 800-53 controls and management systems using a Service Value Management Model that will ensure the Capability, Quality and Efficacy of an enterprise cybersecurity risk management program.

(more…)

Government Certified, Accredited Course on Planning & Response Strategies to deal with Cyber-Attacks & Cyber Crises. Course is a comprehensive guide for enabling organisations and individuals to prepare a well-defined and managed approach to dealing with a data breach or a cyberattack. This course is targeted at a non-technical audience comprising key decision-makers and managers in both managerial and technical profiles.

(more…)