Skip to main content
Anthony's user avatar
Anthony's user avatar
Anthony's user avatar
Anthony
  • Member for 8 years, 2 months
  • Last seen more than a week ago
8 votes

Steps to become SOC 2 compliant?

4 votes
Accepted

What policies and agreements regarding information security are a must have for every self respecting company?

3 votes

evidence collection in incident response

3 votes

What is the job of an IT auditor?

3 votes

Confused about kiosk security: am I being overly cautious?

2 votes

Is Segregation of Duties a Requirement?

2 votes

Authentication without login and password in mobile apps

2 votes

Would logging into Chase bank website be an example of Asymmetric cryptography?

1 vote

Is there a certification AICPA grants to qualified auditors?

1 vote

What's the next step if an organization doesn't respond to warnings of a potential data breach?

1 vote

What defines a Secure Audit Log as such and how do you implement it?

1 vote

Is there any way to get infected by opening an email i.e., if an image is attached to the email?

1 vote

Encrypt a message or sign it with a X509 certificat

1 vote

Auditing Event Logs of a System

1 vote

Security considerations in storage of audit logs

1 vote

Implications of leaving admin UI accessible to non-admin users

1 vote
Accepted

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

1 vote

How should clients' passwords be managed?

1 vote
Accepted

Are Security Auditors liable for breaches?

1 vote

Security considerations for setting up remote access on a PC

1 vote

How to Audit an Email System

1 vote

Loss of hardware asset(such as a laptop) that belongs to an organization

1 vote

Does investigating the .eml file of an email suffice to deem it malicious?

1 vote

Value of Physical Security Vulnerabilities to an Attacker

1 vote

What is "rule-based" analysis in malware detection?

1 vote

IT security audit : is threat modelling key to reproducible success of just following a methodology (ex : ethical hacking)

0 votes

Security controls to implement on a private environment

0 votes

How to handle personally identifiable information (PII) as a startup?

0 votes

What security controls should be in place for online updates of user's correspondance address?

0 votes

Information Security and Financial Risks