How to Fail an Audit
Humoristische Einblicke in typische Fehler bei IT-Sicherheitsaudits und wie man sie vermeidet. Praktische Tipps für erfolgreiche Audits und verbesserte Cybersicherheit.
Implementing a Harmonized Shipping Label Generator
Explore the implementation of harmonized shipping labels in the EU, addressing challenges and proposing solutions for this new regulatory requirement.
Cloud Security and Compliance
Comprehensive review of cloud computing security risks, mitigation strategies, and compliance considerations for organizations adopting cloud-based services.
Using Automation to Help Achieve Security in a Multicloud Environment
Explore strategies for automating security in multicloud environments, focusing on critical components, tools, and data utilization to enhance operational security and inform decision-makers.
Three’s Company - Unpacking and Settling in with Three NIST Frameworks
Explore how NIST's Risk Management, Cybersecurity, and Privacy Frameworks complement each other to enhance enterprise risk management and improve organizational security posture.
A Case Study of the Capital One Data Breach
Explore the 2019 Capital One data breach, examining attack methods, compliance issues, and corporate culture's impact on cybersecurity posture.
InfoSec is a Board Responsibility
Elevate InfoSec to a governance issue by speaking 'board talk', addressing objections, and tailoring proposals to focus on measurable benefits, risk mitigation, and corporate objectives.
What's New in Security for Red Hat OpenStack Platform
Explore recent security advancements in Red Hat OpenStack Platform, including key management, encryption, compliance, and future developments for enhanced cloud infrastructure protection.
Red Hat CloudForms - Turbocharge Your OpenStack
Enhance OpenStack with CloudForms for improved operations, monitoring, self-service, access control, and infrastructure management. Integrate with Ansible for automation and leverage policy engine for compliance and chargeback.
The Anti-Checklist Manifesto
Explore effective third-party risk assessment beyond checklists. Learn to ask insightful questions that reveal an organization's commitment to security and trustworthiness in the software supply chain.
Security Awareness Training Refresh
Refresh your security awareness with practical tips on password management, phishing prevention, and role-based training. Learn to engage users effectively and create impactful, tailored security programs.
Are We Alone in Our Infrastructure? - DefCamp - 2017
Exploración de infraestructuras de seguridad: desde módulos Viki hasta procesamiento de agua, clientes múltiples y hashes de usuarios. Análisis de cumplimiento y código abierto en sistemas Windows.
GDPR – T Minus 6 Months. Are You Ready? - DefCamp 2017
Comprehensive overview of GDPR implementation, covering new rights, data governance, and compliance strategies. Offers practical insights for organizations preparing for the regulation's enforcement.
On Strategy
Guidance for development teams on implementing effective security strategies, covering risk assessment, compliance, staffing, and integrating security into organizational culture and processes.
Hitting the Gym - The Anatomy of a Killer Workout
Explore security vulnerabilities in smart fitness equipment, focusing on treadmills. Learn about potential risks, attack surfaces, and implications for both users and corporate environments.
Writing Policies That Aren't Miserable for Everyone Involved
Innovative approach to creating effective security policies that are easy to understand, implement, and comply with, improving overall organizational security and employee engagement.
Compliance Does Not Equal Security (Except When It Might Be) - Rob Clark - USENIX Enigma Conference - 2018
Exploring IBM's innovative approach to cloud security, aligning with NIST guidelines to enhance DevSecOps, reduce complexity, and drive security features across platforms and services.
Cloud Security at Scale - Managing the Chaos
Explore the challenges and best practices for securely migrating large enterprises' legacy infrastructure to the cloud, with actionable insights for a successful transition.
Cloud Ops MasterClass - Lessons Learned from Cloud Automation
Explore cloud operations at scale, multi-account models, and automated guardrails for security and compliance. Learn to leverage automation tools for efficient cloud management and collaboration.
Costs of Coding to Compliance
Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.
A Dancefloor that is Literally Just Banana Peels - AppSec Awareness Program Pitfalls
Explore common pitfalls in AppSec awareness programs and learn effective strategies for implementation, audience engagement, and sustainable security education.