Questions tagged [risk]
The risk tag has no usage guidance.
16
questions with no upvoted or accepted answers
4
votes
0
answers
163
views
What are the security implication of implementing an IVR functionality in my application?
I am planning to implement an Interactive Voice Recognition (IVR) functionality in my python-based application. I will be using IVR as a backup verification method or when a user is going to setup her ...
- 310
3
votes
0
answers
52
views
Does a Risk Management approach work in Cybersecurity?
I was recently with a client discussing their cyber risks and what main risks we were going to focus on.
"And your top 5 information security risks are risks 1,2,3,4,5"
He then said to me, &...
- 1,089
3
votes
0
answers
119
views
What risks are associated with SPO/Onedrive/O365 external user accounts in active directory?
We've recently started using O365/SPO/OneDrive for business as a sharing platform over a previous niche provider platform. I've noticed that each time a user shares content externally, the external ...
- 153
2
votes
0
answers
141
views
Risks associated with switching ISPs/Telco providers
What are the risks associated with switching Internet Service Providers and/or Telco providers (i.e. Telstra -> Optus), if any?
This is in relation to a larger organisation with a wide area network.
- 459
2
votes
0
answers
212
views
Suspicious web-application requests containing encoded JavaScript function(?)
I've been seeing some odd traffic in the logs for a web-application (Apache) that I'm wondering about, and I'm hoping that someone here has seen this before.
The raw requests were variations of:
...
- 21
1
vote
0
answers
46
views
Cyber Risk Management Strategy Implementation
I’m developing a Risk Management Implementation strategy for my small SaaS organization, and I’d appreciate your feedback on the soundness of the approach outlined below. We’re hosted in the cloud, ...
1
vote
0
answers
100
views
How does a risk assessment for an EU project look like?
I have to add provide a draft of a risk assessment for a small EU project.
As I've never done this, I struggle with identifying assets or vulnerabilities. I'm aware of very general lists, but I wonder ...
- 111
1
vote
0
answers
115
views
Do i place this service in the DMZ or datacentre(internal)?
I have setup a VM on our internal network and it is assigned an internal IP address. The VM requires connectivity to a couple of internet sites mainly Microsoft and ports are generally 80 and 443. ...
- 671
1
vote
0
answers
163
views
Advice for carrying out risk identification in ISO27005:2011
I am currently required to carry out an information security risk assessment for an assignment, using the ISO 27005:2011 standard, for the Equifax data breach that occurred in 2017, https://...
- 11
1
vote
0
answers
88
views
Recommended number of ssytems under an ISSO
Is there an optimum number of systems an ISSO should be responsible for? I realize system size and complexity come into play but assuming most are large and of moderate risk, etc. is there a number ...
- 11
1
vote
0
answers
141
views
Multiple Frameworks for Risk Assessments?
My organization utilizes Risk Assessments as the catalyst for a lot of our Information Security efforts. Currently we assess applications using the cloud security alliance's CAIQ framework and ...
- 71
1
vote
0
answers
512
views
What are the risks of adding third-party Root CA certificate into NTAuth Store?
What are the risks associated with importing a third-party Root CA certificate into the Enterprise NTAuth Store in a Windows Active Directory domain?
(Except that the CA is then trusted to issue ...
0
votes
0
answers
144
views
Using a static ip (Ipv4) residential ISP proxy / IP address for Binance
My situation is the following:
I am a novice when it comes to information security
Residing in a country other than my home country in Europe I need a way to reliably access Binance.com without ...
- 1
0
votes
0
answers
64
views
Is there an established way to classify network services by risk level?
I noticed that I seem to think of network services in three categories wrt the risk of exposing one to the internet (or a hostile network):
"Low risk" services are extensively hardened. If ...
- 4,951
0
votes
0
answers
151
views
Risk, threat, vulnerability with an example
Given a situation where a system has SSL 3.0 and TLS 1.0 enabled would the following mapping be accurate:
Weakness/vulnerability: The remote service accepts connections encrypted using TLS 1.0 and ...
- 79
0
votes
1
answer
169
views
Safety assessment vs. Security assessment. What's the difference?
The safety requirement confuses me when I look at security risk assessment methodologies. Looking at safety alone, it usually is related to the physical aspect and the physical interactions between a ...
- 1