Domenico's Tech Corner

Posts

Showing posts with the label Cybersecurity

Cybersecurity: A Modern Crisis

- June 14, 2023

In today's digital age, cybersecurity is more important than ever. With more and more of our lives being conducted online, we are increasingly vulnerable to cyberattacks. Hackers can steal our personal information, financial data, and even our identities. They can also disrupt our businesses and critical infrastructure. Cybersecurity is not just a matter of protecting our personal and financial information. It is also about protecting our national security. In recent years, there have been a number of high-profile cyberattacks on government agencies and critical infrastructure. These attacks have had a significant impact on our economy and our way of life. The good news is that there are things we can do to protect ourselves from cyberattacks. We can use strong passwords, keep our software up to date, and be careful about what information we share online. We can also educate ourselves about the latest cybersecurity threats. Cybersecurity is a shared responsibi

What Makes a Security Plan?

- September 17, 2021

Hello, and welcome back to my blog. This week, I would like to quickly discuss the levels that go into making a security plan. These types of plans are an important tool for IT departments and Cybersecurity Administrators to design a plan that will help protect or slow down an attack on the network. Of course, security plans can vary from company to company; however, their purpose remains the same, with threats looming every day. With IT managers adjusting in response to the ever-changing threats, the created security plan must be designed to stop or slow down any attempt to breach network defenses. Below we will look at the principal components of a security plan and what they entail. Separate Networks As the name suggests, having more than one network can protect company assists from hackers and the like. The reason being is that having every computer on one network would lead to issues if that subsequent work were to fail, which would stop operati

A Look at Defense-in-Depth

- July 26, 2020

What is Defense-in-Depth? Defense-in-Depth is the method to which multiple layers of defense protect a network. These defenses are intended to delay an attacker's attempt to further into a system but not stop them completely. By slowing down the attacker, the IT team has time to reacted and mitigate any damage to the network. The idea behind Defense-in-Depth stems from a military strategy that revolves around having a weaker perimeter defense and intentionally yielding space to buy time. In the case of cybersecurity, the approach here involves multiple layers of control but not give up any ground. Here is a video that can bring a little light on to the idea of Defense-in-Depth from Network Direction: Below is the topology of how Defense-in-Depth would potentially look like: Fig 1. A large scale highly secure deployment of Siebel Business Applications Having a setup, such as the one above, would bring security to any business of any size. In this case, for the

A quick look at NIST CSF (Cybersecurity Framework) core and how they are organizes into functions.

- July 12, 2020

Hello, and Welcome to my blog! This week, I will be discussing how the NIST CSF (Cybersecurity Framework) core organizes into functions. What is a NIST Cybersecurity Framework? The National Institute of Standards (NIST) and Framework’s Cybersecurity (CSF) was published in February 2014 in response to Presidential Executive Order 13636, “Improving Critical Infrastructure Cybersecurity,” which called for a standardized security framework for critical infrastructure in the United States. What are the NIST CRF Framework cores areas? The NIST CSF is comprised of four core areas. These include Functions, Categories, Subcategories, and References. We will be talking about the different functions in the NIST CSF core and how they are organized for today. What are the Framework Functions? The NIST CSF is organized into five core functions, which are also known as the Framework Core. These functions are arranged with one another to represent a security cycle. Each p

Incident Response and Forensic Analysis, a relationship.

- July 05, 2020

Hello, and Welcome to my blog! This week, we will be discussing how forensics is related to incident response. Before we dive in, if you are not familiar with incident response, check out this link that will take you to one of my other posts that describes what incident response is. The forensics part that is related to the incident response takes place after everything has happened. After the response team has done what they can, the forensic team comes in and analyze what has been taken. This team can be part of the response team or a separate group from the response team. They have their own goals, data requirements, team skills, and benefits for both teams they have, and each of these has differences between them. It is also possible for a person to have both sets of skills and maybe both teams. Incident Response vs. Forensic Analysis Both of these are two related disciplines that use similar tools. Here are the essential highlights. Incident Response: Goals: ·

Phases of Incident Response and How They Impact a Company.

- June 27, 2020

Hello, and Welcome to my blog! This week we will be looking at the phases of Incident Response and how they may impact a company. What is an Incident Response? An incident response plan is well a documented, written plan with six distinct phases that help IT professionals and staff identify and deal with a cybersecurity incident, such as a data breach or cyberattack. Properly create and manage an incident response plan that involves regular updates and training. The plan contains six phases: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. Preparation This phase will be the main workhorse of the Incident Response plan and the most crucial phase to protect your business. The response plan should be well documented and thoroughly explains everyone’s roles and responsibilities. It is best to test the said plan as practice makes perfect and prepared if something was to occur. Identification This is where a determination will b

Search This Blog