I have yet to pay my debt to the one in the sky, if they exist. I’m feeling tired, wondering where you are? Expecting you to lay next to me tonight… I see the dust in the glare of the sunrise Waiting for you to close the blinds, so I…

The new version of ISO 27001 will be released sometime in the Q4 2022. Major changes will be: Clauses 4 to 10, are not changing Security controls listed in ISO 27001 Annex A will be updated Number of controls has decreased from 114 to 93 Controls are placed in 4…

Organizational Information Security Budget as Percentage of IT Budget Information Security Budget Spend Breakdown Percentage of Users With Security Exceptions Percentage of Staff Fully Trained on Infosec Awareness Compliance Percentages (PCI/SOX/HIPAA/etc.) Employee Behavior Metrics (hunting anomalies to correlate to risk factors) Operational Patch Management Average — Length of time to…

RISK CATALOG use case: What are the risks associated with a control deficiency? (e.g., if the control fails, what risk(s) is the organization exposed to?) Definition of Risk noun A situation where someone or something valued is exposed to danger, harm or loss. …

Logical Threats Category: Intentional Sub-Category: Conflict Struggle resulting from incompatible or opposing needs, drives, wishes, or external or internal demands. ID Threat Description LIC1 Sabotage Deliberate actions aimed to cause disruption or damage to information and/or IT assets for financial or personal gain. LIC2 Terrorism The use of violence as…

This is assuming you are starting from scratch and covering only SOC 2 Security Criteria and not Availability, Confidentiality, Processing Integrity, and Privacy Criterias. This is also assuming that you will go for the SOC2 Type 2 Report in 12–18 Months. The Benefits of SOC2 Establishing a third party opinion…

Procedures are created and implemented with the sole intention to be read and used by the user community. Always keep the audience in mind when writing procedures. Write the procedure to reflect this level of technology. Every department has its own language. …