In today’s technology-driven world, organizations heavily rely on their IT systems to operate efficiently and deliver value to their customers. However, with increasing complexities in IT operations, there comes a growing need for robust governance and management of IT processes. This is where COBIT (Control Objectives for Information and Related Technologies) comes into play. COBIT … Read more
In today’s digital world, where cyber threats are becoming increasingly sophisticated, organizations must take proactive measures to safeguard their sensitive information and critical infrastructures. One such proactive approach is the establishment of Computer Emergency Response Teams (CERTs). In this article, we will delve into the world of CERTs and explore their significance in the realm … Read more
Self-Sovereign Identity (SSI) ensures secure and trustworthy digitization. Users can self-sovereign their digital identity and credentials such as ID cards or certificates to applications. The European SSI ecosystem breaks dependencies on monopolists and gives us the freedom to shape the digital future with confidence and speed. What Is Self-Sovereign Identity? Self-Sovereign Identity (SSI) is a … Read more
The Key Management Interoperability Protocol is a protocol standardized by OASIS (Organization for the Advancement of Structured Information Standards). KMIP enables the communication of applications and systems for the storage and management of keys, certificates, or other secret objects. Managing encryption keys efficiently and securely has become a critical challenge for organizations. Enter Key Management … Read more
In today’s rapidly evolving digital landscape, software vulnerabilities and bugs are commonplace. Cybersecurity threats are continually advancing, and attackers are relentless in their efforts to exploit any weakness in software systems. Patch management plays a crucial role in mitigating these risks and keeping computer systems, applications, and networks secure. However, what is patch management exactly? … Read more
In the vast and ever-evolving landscape of cyber threats, one particularly nefarious type of malware has become a serious concern for individuals and businesses alike: ransomware. In this article, we delve deep into the world of ransomware to understand its nature, how it operates, the impact it can have, and what measures can be taken … Read more
CISO vs CSO? They sound very similar, and yet they are different: the Information (Chief) Security Officer (CSO) and the (Chief) Information Security Officer (CISO). While the Information Security Officer is concerned with the security of data and information, the Security Officer is responsible for the overall security of the organization. Both the Information Security … Read more
Common Criteria Recognition Arrangement is an international agreement for mutual recognition of IT security certificates issued on the basis of the Common Criteria (CC). Signatory states recognize certificates of products and Protection Profiles issued by different national certification bodies. A distinction is made between Certificate Producer and Certificate Consumer among the participating states of the … Read more
Security Assurance Methodology is a framework developed by the 3rd Generation Partnership Project (3GPP) to assure and evaluate the security of network products used in the mobile communications sector. An important partner in the development and implementation of the framework is the GSM Association (GSMA). SECAM provides general, testable security requirements and security properties for … Read more
Increasing digitization is raising the demands on IT security. However, incomplete digitization of processes in terms of security means that the ever-increasing threats directly impact information security and processes in companies. However, with solid security awareness combined with secure automated processes and solutions, companies can build their security from the inside. In this way, dangers … Read more
A network domain is an administratively delimited network area that can be used to logically map the organizational structures of a company. Security policies, user rights, and user roles are managed centrally via a domain controller. A user logs on to a domain via the domain controller. Domains have unique names and are structured hierarchically. … Read more
In today’s digital age, information security has become paramount for businesses and organizations worldwide. With the increasing frequency and sophistication of cyber threats, safeguarding sensitive data and ensuring the confidentiality, integrity, and availability of information has become a top priority. This is where ISO 27002 comes into play. ISO 27002, also known as ISO/IEC 27002:2013, … Read more
A Trusted Platform Module (TPM) is a microchip used on computers or electronic devices to ensure platform integrity. It provides basic security functions on a hardware basis and can generate cryptographic keys, store them securely or control their use. Securing our digital world has never been more crucial, and that’s where Trusted Platform Module (TPM) … Read more
An Information Security Management System (ISMS) defines rules and methods to ensure information security in a company or organization. The ISMS is process-oriented and follows a top-down approach starting from the company management. Protecting sensitive information has become paramount for organizations and individuals alike, and the increasing sophistication of cyber threats and the growing volume … Read more
What is cross-site scripting? Cross-site scripting (XSS) is one of the most commonly used attack methods on the Internet. The goal of cross-site scripting is to obtain confidential data, hijack applications, or cause other damage. XSS embeds the attack code in a supposedly secure context. In today’s digital age, web applications are an integral part … Read more
An intrusion prevention system, abbreviated IPS, is able to detect attacks on networks or computer systems and to take automatic defensive measures. It provides additional protection compared to conventional firewall systems. An Intrusion Prevention System (IPS) clearly differs from an Intrusion Detection System (IDS) in some functions. Cybersecurity is of utmost importance to protect our … Read more
An intrusion detection system, abbreviated IDS, is able to detect and inform about attacks directed at computers, servers, or networks. Often the Intrusion Detection System complements the usual functions of a firewall. Network security plays a critical role in safeguarding organizations from cyber threats. One essential component of network security is an Intrusion Detection System … Read more
A firewall is a system that is capable of analyzing data traffic. It protects IT systems from attacks or unauthorized access. The firewall can be a dedicated hardware or software component. Literally translated, firewall means “firewall”. The term refers to an IT system that can analyze, forward, or block data traffic. This enables the firewall … Read more
WPA2 (Wi-Fi Protected Access 2) has been the successor to WPA since 2004. Among the most important changes compared to WPA is the use of the AES encryption method. WPA2 eliminates the vulnerabilities of WPA that were discovered and is still considered very secure when a strong password is used, despite known attacks. In our … Read more
BSI Standard 200-1, along with Standards 200-2 and 200-3, is an elementary component of the BSI’s IT-Grundschutz methodology. It defines the general requirements for information security management systems (ISMS – information security management systems) and is compatible with ISO standard 27001. The aim of the BSI standard is to make the business processes of companies … Read more