Information about general information security issues.

Supply Chain Risk Management (SCRM) Explained

/
0 Comments
Supply chain risk management (SCRM) is the process of identifying, assessing, and mitigating the risks associated with the distributed and interconnected nature of IT products and service supply chain.

The Civilian Cybersecurity Reserve: A National Guard-like program to address growing cybersecurity vulnerabilities faced by the U.S. government

/
0 Comments
This would be like a Civilian Cybersecurity Reserve and it would be voluntary and by invitation only.  This would allow our national security agencies to have access to the qualified, capable, and service-oriented American talent necessary to respond when an attack occurs.

Update Greenbone Vulnerability Management Plugins on Kali (NVT, Cert Data & SCAP Data) Automatically

/
0 Comments
Once you have installed or configured the Greenbone Vulnerability Management system it is a good idea to ensure it is kept up to date and running the latest security scripts to find the latest vulnerabilities as well as sync to the most updated nvt, scap and cert data.  The best way to do this is to create a script that sync’s the necessary data for you automatically each day.

SA.3.169 Community-based Threat Sharing (CMMC Level 3)

/
0 Comments
Receive and respond to cyber threat intelligence from information sharing forums and sources and communicate to stakeholders.

IR.2.092 Incident Preparation (CMMC Level 2)

/
0 Comments
Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities.

SI.1.210 System Integrity/Patching (CMMC Level 1)

/
0 Comments
Identify, report, and correct information and information system flaws in a timely manner.

CA.2.158 Ongoing Security Assessment (CMMC Level 2)

/
0 Comments
Periodically assess the security controls in organizational systems to determine if the controls are effective in their application.

AC.1.004 Publicly Posted Information (CMMC Level 1)

/
0 Comments
Control information posted or processed on publicly accessible information systems.

MP.1.118 Media Destruction – Sanitation (CMMC Level 1)

/
0 Comments
Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.

AC.1.003 External/Remote Connections (CMMC Level 1)

/
0 Comments
Verify and control/limit connections to and use of external information systems.