the cybersecurity blog for managers

The CSIRT methodology
07/01/2018

The CSIRT methodology

If you have read my blog carefully, the article about the C4ISR Methodology will surely stick in your mind. Many of the military procedures we can take for our plan – to build a functioning SOC / CSIRT / forensics team of course with some changes. Let’s define the necessary elements: SOC (according to English Wikipedia, italic: according to my methodology) A Security Operations Center (SOC) is a central unit that deals with security issues at the organizational and technical levels. […]

Read More
C⁴ISR: What we can learn from the military
06/01/2018

C⁴ISR: What we can learn from the military

C⁴ISR stands for command and control, communications, computers, intelligence, surveillance, and reconnaissance. Since 2005 I have been building or reorganizing SOC’s (Security Operation Centers) and establishing CSIRT’s (Cyber ​​Security Incident Teams), among others for Saudi Telekom and Saudi Aramco (during my time in Saudi Arabia) and at RadarServices GmbH in Vienna as Global SOC Manager, with up to 30 SOC employees in 24×7 operation or Follow the Sun (at 3 locations in the world with 8h difference each) principle. What […]

Read More
Security Issue Employees – Awareness is a must
05/01/2018

Security Issue Employees – Awareness is a must

As shown in the previous blog post already in detail and hopefully haunting, awareness can defend many attacks successfully. To do this, companies need to develop an awareness strategy to successfully motivate employees to recognize and ward off social engineering. In this context, I recommend anyone who is in IT security, but also the management, Kevin Mitnick’s book – The art of deception – ISBN 0-471-23712-4 – to read. Who has the opportunity to attend one of his lectures, it is […]

Read More
How I take over your business
03/01/2018

How I take over your business

In 1987, I brought despair to my instructor at Comparex, where I used a simple security hole on a 3270 screen controller for terminals attached to a /370 mainframe. Batch files were higher in precedence than executable files. So I constructed a batch file that produced a ripple print on the screen and kept outputting “I’m a little virus” in an endless loop. A batch command that was executed copied a bunch of other batch files with the names of […]

Read More
Why cyber-security is not effectively lived (in European) companies and organizations
02/01/2018

Why cyber-security is not effectively lived (in European) companies and organizations

Most European companies have not taken cyber-security seriously in recent years and now get a wake-up call from the EU, which is not without reason: 4% as a penalty of global sales are finally something to think about. I understand this as a long necessary “shot in front of the bow”, because whatever market investigation I look at, it concludes that around 60% of the companies are underperforming. The question is why? In the case of SMEs, security must not […]

Read More
Introduction to this blog
01/01/2018

Introduction to this blog

The pressure on European companies is significantly tightened by the German legislator and the EU with regard to cybersecurity – rightly so – because in the past decades most companies have neglected to ignore the latest methods of attack on their digital knowledge. Product data, patents, procedures and other company secrets were often stolen in Cyber-Attack. It is not just the companies that are at fault, but the lack of advice, failures of the legislator, insufficient education at universities, the insufficient […]

Read More

Links & Guidelines

Categories

Tags Cloud

Analysts (1) APT (2) Awareness (2) boobytrap (1) confusing (1) costly (1) Crisis Management (2) CSIRT (5) defense (2) destruction (1) DLP (2) document framework (2) encrypted file-system (1) encryption (1) espionage (1) False Positive (1) hard to handle (1) home-use (1) hostile environments (1) Incident Response (2) IT-Security (4) Log-Collection (1) Management (3) managers (1) Methodology (2) multi-level encryption (1) obfuscation (1) persecution (1) Pragmatic Security (1) privacy (1) protection of data (1) protection of data transmission (1) Risk Assessment (1) Risk Management (2) SecretPi (1) SIEM (2) SOC (4) social engineering (3) stealth mode (1) unmanageable (1) Use-Cases (1) useless (1) vCISO (2) VPN (1) war reporter (1)

Recent Posts

Recent Comments