Scale of Impact
The illustrations are self-explanatory - priority will be given to protect or rectify the higher impact scenario. The hard part
Cybersecurity Transformation
To be successful in cybersecurity transformation, each one in the organization shall contribute as the baseline. Culture or politic in
Incident Respond #2
Respond is 1 of the 5 domains under the NIST CyberSecurity Framework along with Identify, Protect, Detect and Recover. It
Residual Risk
When deploying protection or counter-measure, it is necessary to understand If new risks are introduced? Will these new risks even
Insecure Node
Due to connectivity, an insecure component will no longer just harm itself but other components in the ecosystem as well.
Incident Respond
Organizations usually invest substantially to manage and mitigate cyber attack with the detection technologies like log correlation and SOC (Security
Split Knowledge
This is usually a means of control normally deployed in key management such that accessing privileged and critical resource requires
Cryptography
Example in real world for cyber world. There are 2 salient points in cryptography: Algorithm (or how it works) is
Ask Not
This is self-explanatory... Ask not what cybersecurity can do for you.  Ask what you can do for cybersecurity. Each of
Misplaced Control
Security technologies are secure but if deployed incorrectly, the intended protection will be in vain. It is necessary to have
Data-at-rest
This is one of the commonly referred information states among data-in-use and data-in-motion. Within data-at-rest, there should be further taxonomy:
Control #2
Most consider cybersecurity controls require hi-tech solution such as deep packet inspection, non-revisible encryption, biometric authentication with time of day