Encryption Ensures Privacy
Encryption techniques are mathematically designed to be uncrackable, at least in an amount of time that relates to the value of the secret. This means the time and computing resources…
Tips on Preparing a Blue Team Defense in the CCDC
Here are some tips and thoughts on preparing a blue team defense in the CCDC: Preparation Defensive Strategy Handling Business Injects
Cyberwar Defined
War is violent conflict on a large scale, often involving organizations on a national scale. There are many different forms of war and many different levels. We use the terms;…
FISMA Law vs. Home Email Server
Working for a federal agency that has IT functions regulated by public law and running an email server from home to use for agency business seems problematic, but it may…
APT vs. OODA Security Controls
Advanced Persistent Threat (APT) is a kind of attack comes from a team with advanced skills, deep resources, and specific targets. They use advanced tools and techniques that are capable…
Simple Secure Configuration Management
Configuration Management (CM) has some key controls and processes concentrated in the middle of the SDLC where configuration settings and the configuration baseline are recorded, but the entire process has…
Continuous Monitoring Misunderstood
Network security monitoring includes intrusion detection, audit log correlation and analysis and other methods of detecting failures of our network protections. Continuous monitoring is not the same thing. Continuous monitoring…
Wireless Restrictions
AC-18 WIRELESS RESTRICTIONS (NIST SP 800-53) The organization: (i) establishes usage restrictions and implementation guidance for wireless technologies; and (ii) authorizes, monitors, controls wireless access to the information system. NIST…
Contingency Plan
Policy Business Impact Assessment (BIA) The BIA is a critical piece of the CP that establishes requirements for the strategy and procedures in the rest of the CP. Preventative Controls…
Incident Response
Federal agencies are required by law to report incidents to the US Computer Readiness Team (CERT) office in DHS and must have a formal incident response capability. Incident Response Methodology…