Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Social engineering is the art of human deception. In the world of cybersecurity, it’s how to fool human beings in order to conduct cyber attacks. Some of these cyber attacks can be very expensive to your business! In fact, many of the worst cyber attacks to your organization’s network start with fooling you or one of your employees. Penetrating a network without human interaction is really tough.

The Standardized Information Gathering (SIG) questionnaire is used to perform an initial assessment of vendors, gathering information to determine how security risks are managed across 18 different risk domains. SIG was developed by Shared Assessments and is a holistic tool for risk management assessments of cybersecurity, IT, privacy, data security, and business resiliency. The SIG questionnaire was created by Shared Assessments.

During the past year, we have witnessed significant data breaches that have impacted industries ranging from hospitality to legal to social media. We have seen a continuation of financially motivated threats, such as business email compromise (BEC), which continue to plague corporate bank accounts. Ransomware has brought multiple cities, schools and universities to their knees, earning threat actors significant funds.

We now live in an era where the security of all layers of the software stack is immensely important, and simply open sourcing a code base is not enough to ensure that security vulnerabilities surface and are addressed. At Gravitational, we see it as a necessity to engage a third party that specializes in acting as an adversary, and provide an independent analysis of our sources.

The Vendor Security Alliance (VSA) questionnaire was created by a coalition of companies committed to improving Internet security. It is one of the most well-known, highly respected security questionnaires, alongside: The VSA questionnaire is free to use and accessible on the VSA website.

Your organization’s data is one of its most valuable assets. Unlike assets such as cash, however, data doesn’t always grow in value as it expands in volume — it must properly obtained, stored, secured, cleaned and surfaced so that it can put to use in meaningful ways. Accordingly, more and more businesses are looking to transition from information management to knowledge management systems. But what exactly are the differences between knowledge management and information management?

The modern global economy is a knowledge economy — the future of a business depends on its capacity to support learning and collaboration. Proper maintenance of organizational knowledge, retention of practices and support of knowledge sharing are the key tasks of knowledge management (KM) programs. How can your organization implement an effective knowledge management system?

The quality of Redscan’s cybersecurity services has been recognised in the 2020 Cybersecurity Excellence Awards.

First things first: It is crucial to understand the difference between Governance, Risk and Compliance (GRC) and Integrated Risk Management (IRM) because this sets the stage for long term strategic risk management and breaks down the siloed approach to risk that exists in many organizations today. It is because GRC is sometimes implemented from a compliance-driven strategy rather than a risk driven initiative.