I write about Cyber security related management tips, related news, while I am working on Cyber security framework ideas to enhancing the maturity of the Cyber security program.
-
Handling Policy exceptions
Instances of policy non-compliance can be categorized as policy exceptions when approved by the policy or control owner. These exceptions are temporary and must prompt the search for alternative compliance methods. If not reviewed, non-compliance should be treated as issues. Exceptions should be rare and justified, to avoid chronic organizational problems.
-
What are Policy exceptions?
The objective of the Information Security policy is to articulate the Organization’s aspirations and goals at a strategic level. Under each policy, a set of controls may outline the means to achieve these objectives. A recommended approach in publishing the Information Security policy is to ensure that every user within the Organization acknowledges, reads, understands,…
-
Third-Party ChatGPT Plugins could lead to Account Takeovers
Cybersecurity researchers discovered vulnerabilities in third-party plugins for OpenAI ChatGPT, posing a threat of unauthorized access to sensitive data. The flaws enable attackers to install malicious plugins and hijack accounts. OpenAI has taken action by discontinuing new plugin installations. New tactics may lead to AI being exploited by malicious actors for data theft, putting unaware…
-
Components of Cyber security Policy
A cybersecurity policy is crucial for protecting an organization’s information systems and data from cyberattacks. It helps in risk management, compliance with regulations, protecting assets, incident response, employee awareness, vendor management, and continuous improvement. Such a policy is essential for maintaining security posture and minimizing the impact of security breaches.
-
COBIT 2019 for beginners
This content advocates for the use of frameworks in cybersecurity implementation and governance, particularly focusing on the COBIT 2019 Framework. It highlights the intricate nature of COBIT, the importance of executive sponsorship and continuous support, the need for simplification for beginners, and how COBIT aligns with industry standards like ISO 27001, ITIL, and NIST SP…
Join 900+ subscribers
Stay in the loop with everything you need to know.