Tag Archives: security

Domain Name System (DNS) – Application Layer Protocol

Domain Name System (DNS) - Application Layer Protocol

The Domain Name System (DNS) is a vital application layer protocol that enables efficient name resolution on the internet. It translates human-readable domain names into machine-readable IP addresses, facilitating seamless web navigation. This manual excerpt explores DNS’s hierarchical structure, resource records, messaging protocols, caching mechanisms, security measures, load balancing strategies, and privacy-enhancing mechanisms. Understanding DNS is crucial for managing network resources, optimizing performance, and ensuring reliable and secure internet connectivity.

IDS / IDPS Detection Methods: Anomaly, Signature, and Stateful Protocol Analysis

IDS IDPS Detection

“Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IDPS) are crucial for network security. Explore anomaly detection, signature detection, and stateful protocol analysis methods, their strengths, limitations, real-world applications, and best practices for effective deployment and management. Enhance your network security posture and mitigate risks.”

Security Policy Example – IRT Access & Authorization Policy

Policy Authorization IRT Example

Policy Example   SunSpot Credit Union Computer Incident Response Team—Access & Authorization Policy   1.0       Policy Statement This policy applies to SunSpot Credit Union employees, temporary workers, contractors, and consultants who use or access SunSpot Credit Union information systems and computers.   2.0       Purpose/Objectives Definitions for this policy are as follows: SunSpot Credit Union: (SCU). Incident Response Team:… Read More »

Security Policy Example – Remote Access

Compliance and Security: Navigating Legal and Regulatory Requirements

  SunSpot Health Care Provider Remote Access Policy for Remote Workers & Medical Clinics   1.0       Policy Statement It is SunSpot Health Care Provider (SHCP) policy to protect Information Resources based on risk against accidental or unauthorized disclosure, modification, or destruction, and assure the Confidentiality, Integrity, and Availability (CIA) of clinic and patient data. Apply appropriate physical and… Read More »

Security Policy Template for Hand-Held Devices

Hand-Held Device Security

Hand-Held Device use has become common place in today’s business environment to include company owned assets, and personal “Bring Your Own Device” (BYOD)’s. Security of Hand Held Devices normally spans over many of the other standard domains making it practical to treat them as a separate domain.. The SANS Reading Room article; Security Policy for the use of… Read More »

Virtual Private Network (VPN) Security and Monitoring Controls

Database Transactional-Based Fraud: Enhancing Transaction Security and Addressing the Halloween Problem

A Virtual Private Network (VPN) is a group of network hosts that can transfer encrypted data between themselves on a Virtual Private Network. The technology creates a safe encrypted connection, usually over public networks such as the internet, that allows remote users and locations such as branch offices, to securely access and share resources. The main benefit is… Read More »

Basics of Security Awareness: Users are the Weakest Link

Security Awareness

Basic Principles of Security Awareness. Security experts consider system users the weakest link in information security. User skill levels and experience can greatly vary, and unlike automated controls, human users can be subject to fatigue, or be distracted, which can lead to mistakes resulting in vulnerabilities. Security awareness training is often a user’s first experience with information security.… Read More »

Primary Advantages of COBIT, ISO 27000, and NIST

NIST Cybersecurity Framework: Introduction to the NIST CSF

The following is a list of the primary benefits of the COBIT, ISO 27000, and NIST frameworks: COBIT COBIT allows much broader scope and takes into account all IT management processes. Geared towards a method of successfully executing key policies and procedures. It is often used to tie together controls, technical issues and risks, within an organization. COBIT… Read More »

IT & Security Framework and Policy Development Team

Policy Framework Development

The IT security policy framework is the foundation of an organizations information security program. The framework consists of a library of documents, but is just not a collection of documents. The framework and its documents are used to build an organizations processes, determine appropriate technologies to use, and lay the foundation for policy enforcement. The framework is a… Read More »