Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 3339

Risk management is the identification, assessment, and prioritization of risks - defined in ISO 31000 as the effect of uncertainty on objectives, whether positive or negative - followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

2 votes

Can portable programs be exploited to steal information?

Yes you are correct, I recently did an assessment where the same question was asked to me. Is this a vulnerability? Yes. BUT you must decide what the importance of the information is and how high t …
Lucas Kauffman's user avatar
7 votes

Security concerns from publicly visible Hudson & Jenkins servers?

You need to take measures like : A firewall to make sure only the ports that are needed to be accessible are Whitelist rather than blacklist (meaning, deny access from all and just give access to w …
Lucas Kauffman's user avatar
7 votes
Accepted

Is WordPress a security vulnerability inside a corporate intranet?

It would depend on the version of Wordpress, in general the idea is that you need to patch your software and harden it to make it secure. But it's not that Wordpress is any less safe than Sharepoint. …
Lucas Kauffman's user avatar
4 votes
Accepted

The difference between risk assessment and risk analysis

Risk analysis is part of the risk assessment. The risk assessment combines risk analysis and risk evaluation (the process used to determine risk management priorities by comparing the level of risk ag …
Lucas Kauffman's user avatar
2 votes

What security risks are associated with DLP Systems?

The most predominant issues with DLP I currently see are in regards to what it can actually retrieve. Often this already omits encrypted connections such as HTTPS (unless SSL certificates are used to …
Lucas Kauffman's user avatar
4 votes

How do you destroy an old hard drive?

dismantle components using a screwdriver and dismantle the plates put components in a bag pour petrol over and in the bag containing components make sure a fire-extinguisher is close by (Safety first …
Lucas Kauffman's user avatar
1 vote

How important is patch management?

I can tell you that Patch Management is high on the list of every IT Auditor and which does get checked quite often. Not patching your systems leaves them vulnerable for the prying eyes of attackers. …
Lucas Kauffman's user avatar