Equifax, a leading credit bureau, was victim to a massive cyber breach a few months ago. Given that the attack was one of the largest breaches of personal information in recent years, you’ve probably already heard about it. But if …
Begin your GDPR journey with privileged access management
The core of the GDPR is all about data protection; specifically, securing EU citizens’ personal data. However, the GDPR does not explicitly state how to achieve this level of security. It doesn’t recommend any specific technologies to help organizations maintain …
Getting to know the GDPR: The technical and organizational measures
Before we jump into the third part of this GDPR blog series, let’s take a moment to think about a few questions. Such as, why are compliance mandates necessary? Are they framed to just prevent data breaches? …
The GDPR: Requirements pertaining to data collection
Welcome to part two in a four part blog series about the European Union’s GDPR. In our previous blog, we discussed highlights and FAQ on the GDPR. Now, let’s move on to the GDPR‘s requirements and easy …
Log management and SIEM fundamentals: Searching through logs and responding to incidents
Understanding what happened in a security incident and trying to analyze the root cause of an attack is like looking for a needle in a haystack. What would you do if you were faced with a security incident in your …
Protecting against Petya and other ransomware
As a security professional, which do you fear more: 1) explaining to your boss or CEO that your enterprise’s files are no longer accessible because they’ve been encrypted or 2) bungee jumping? I bet you and …
Log management and SIEM fundamentals: Comprehensive log collection and auditing
The first step in SIEM is collecting log data. Log data, as we saw in part 1, is what drives any SIEM solution. A SIEM solution should be able to process, in real time, large …
Log management and SIEM fundamentals: Getting started
Cyber attacks and network breaches can bring even the largest organizations to their knees. Recently, of course, we had the WannaCry ransomware attack, which not only highlighted the dire consequences of security vulnerabilities, but also reiterated the need …
Why privilege misuse is still a serious security risk for enterprises
The tenth installment of Verizon’s annual Data Breach Investigations Report (DBIR) came out in April, 2017. The DBIR does a lot for the public by providing a detailed analysis of security incidents and data breaches around the world. …