Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 6253
13 votes

How do I decide which security framework is most suited to my organization?

There are 3 main considerations when deciding to choose a framework: What are your stakeholders expecting from you? Why are you choosing a framework? I.E. What outcomes are you looking for? Which fra …
schroeder's user avatar
  • 132k
7 votes

Friendly reminders for people who don't lock laptops

Those cards will be seen as punitive no matter how well you phrase them. There's another way: cards for those who locked their machines! Punishing behavior you don't want won't always mean that you …
schroeder's user avatar
  • 132k
4 votes
Accepted

How often should one order a pentest?

The concrete advice is "whenever there is a material change to the environment". The practical advice is "whenever you are able to deal with the results". The risk-based answer is "the distance betwee …
schroeder's user avatar
  • 132k
2 votes
Accepted

ISO 27001 2013 version not being updated

Technology is constantly changing. Processes for the management of technology do not change so quickly. The version previous to 2013 was published in 2005. So there is not a change in cadence. The ISO …
schroeder's user avatar
  • 132k
1 vote
Accepted

What is a Security Guideline and how does it stand in relation with Standards, Policies, Pro...

Welcome to the quagmire of documentation terminologies! In short, there is no single standard way that documents are named and labeled. It is best to pick a set of definitions, either from an establi …
schroeder's user avatar
  • 132k
1 vote

Cyber Essentials at a small business (20 employees) that keeps all business data within SaaS

Since COVID, many places have the same scenario. CE assessors can guide you through options. The main thing is that you can know what devices you have that are in scope and that you can assess patch l …
schroeder's user avatar
  • 132k
0 votes
Accepted

What does a "?" mean in Common Product Enumeration (CPE)?

Yes, from its use in the document, it is clear that both * and ? are used in their regular expression meanings. My guess as to why they do not explicitly say this is that the use in this way is not a …
schroeder's user avatar
  • 132k