User Anthony

8 votes

Steps to become SOC 2 compliant?

answered Jan 29, 2018 at 4:17

4 votes

Accepted

What policies and agreements regarding information security are a must have for every self respecting company?

answered Jun 23, 2016 at 2:02

3 votes

evidence collection in incident response

answered Jun 22, 2016 at 23:47

3 votes

What is the job of an IT auditor?

answered Jan 1, 2018 at 3:36

3 votes

Confused about kiosk security: am I being overly cautious?

answered May 21, 2017 at 16:18

2 votes

Is Segregation of Duties a Requirement?

answered Sep 11, 2018 at 2:54

2 votes

Authentication without login and password in mobile apps

answered Nov 16, 2016 at 3:18

2 votes

Would logging into Chase bank website be an example of Asymmetric cryptography?

answered Jul 12, 2016 at 3:07

1 vote

Is there a certification AICPA grants to qualified auditors?

answered Feb 5, 2017 at 17:52

1 vote

What's the next step if an organization doesn't respond to warnings of a potential data breach?

answered Nov 16, 2016 at 3:48

1 vote

What defines a Secure Audit Log as such and how do you implement it?

answered Nov 16, 2016 at 4:02

1 vote

Is there any way to get infected by opening an email i.e., if an image is attached to the email?

answered Jan 11, 2017 at 2:37

1 vote

Encrypt a message or sign it with a X509 certificat

answered Jan 11, 2017 at 3:31

1 vote

Auditing Event Logs of a System

answered Jun 17, 2016 at 0:40

1 vote

Security considerations in storage of audit logs

answered May 18, 2016 at 1:11

1 vote

Implications of leaving admin UI accessible to non-admin users

answered Jun 25, 2016 at 21:35

1 vote

Accepted

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

answered Jun 26, 2016 at 1:22

1 vote

How should clients' passwords be managed?

answered Jan 29, 2019 at 3:56

1 vote

Accepted

Are Security Auditors liable for breaches?

answered Jan 3, 2018 at 4:26

1 vote

Security considerations for setting up remote access on a PC

answered Feb 11, 2018 at 17:00

1 vote

How to Audit an Email System

answered Jun 1, 2017 at 3:39

1 vote

Loss of hardware asset(such as a laptop) that belongs to an organization

answered May 3, 2017 at 2:03

1 vote

Does investigating the .eml file of an email suffice to deem it malicious?

answered Oct 21, 2016 at 3:41

1 vote

Value of Physical Security Vulnerabilities to an Attacker

answered May 9, 2017 at 23:35

1 vote

What is "rule-based" analysis in malware detection?

answered Jul 29, 2019 at 0:42

1 vote

IT security audit : is threat modelling key to reproducible success of just following a methodology (ex : ethical hacking)

answered Apr 29, 2020 at 3:25

0 votes

Security controls to implement on a private environment

answered May 3, 2017 at 3:53

0 votes

How to handle personally identifiable information (PII) as a startup?

answered Sep 25, 2017 at 22:30

0 votes

What security controls should be in place for online updates of user's correspondance address?

answered Nov 14, 2017 at 3:04

0 votes

Information Security and Financial Risks

answered Nov 14, 2017 at 3:18

Stack Exchange Network

40 Answers

Steps to become SOC 2 compliant?

What policies and agreements regarding information security are a must have for every self respecting company?

evidence collection in incident response

What is the job of an IT auditor?

Confused about kiosk security: am I being overly cautious?

Is Segregation of Duties a Requirement?

Authentication without login and password in mobile apps

Would logging into Chase bank website be an example of Asymmetric cryptography?

Is there a certification AICPA grants to qualified auditors?

What's the next step if an organization doesn't respond to warnings of a potential data breach?

What defines a Secure Audit Log as such and how do you implement it?

Is there any way to get infected by opening an email i.e., if an image is attached to the email?

Encrypt a message or sign it with a X509 certificat

Auditing Event Logs of a System

Security considerations in storage of audit logs

Implications of leaving admin UI accessible to non-admin users

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

How should clients' passwords be managed?

Are Security Auditors liable for breaches?

Security considerations for setting up remote access on a PC

How to Audit an Email System

Loss of hardware asset(such as a laptop) that belongs to an organization

Does investigating the .eml file of an email suffice to deem it malicious?

Value of Physical Security Vulnerabilities to an Attacker

What is "rule-based" analysis in malware detection?

IT security audit : is threat modelling key to reproducible success of just following a methodology (ex : ethical hacking)

Security controls to implement on a private environment

How to handle personally identifiable information (PII) as a startup?

What security controls should be in place for online updates of user's correspondance address?

Information Security and Financial Risks