Improper Control #2
Technical control is just one of the security measures. There are much surrounding elements to take care in order to
Policy Making
For certain job roles of cybersecurity practitioners, policy making is necessary as a foundation in running the business securely to
Stepping Stone #2
Jump hosts are typical used for remote access. These are controls: User accounts with multi-factor authenticationTime of day granted to
Access Control #4
From technology point of view of a discrete control, opening the bridge will disconnect the traffic across the sides. Is
Support Model
Like any other information processing solutions, cyber protection technologies require ongoing support and maintenance to sustain their effectiveness. Otherwise, the
Physics #2
This is another great example to think deeper to balance cyber and physical world rather than just blindly putting unnecessary
Seasonal Factor #2
Anomalies detection highlights the technology will learn your environment as baseline reference such that "unusual" traffic will be flagged for
Physics
Some cybersecurity practitioners just narrow-focus on the cyber aspects. It is no surprise given that the IT cyber space is
Directive
A clear directive (warning on usage) is required to keep human safe. This is the most effective safety protection. After
Usability
Everything is now undergoing digital transformation residing in the cyber space. Certain cybersecurity practitioners I met are overkilling business operations
Isolation
By common sense, systems isolated from the network will have immunity from cyber attack over the wire but still be
"Insecure" Tunnel
Older TLS (Transport Layer Security) version is marked insecure by vulnerability scanner. Certain cybersecurity practitioners make decision solely based on