Information Systems Audit - CISA
All about IS audit, ISACA and CISA
ISO 27001 is the dominant standard that helps organizations and companies protect their assets against the risk and vulnerabilities of cyber attacks and other IT security and privacy disruptions. The standard provides a well-rounded model for setting up an information security management system with recommended ISO 27001 controls. How ISO 270012022 will benefit your organization: … Read more
From a layman’s perspective, information security architecture (ISA) is one segment of an organization’s enterprise architecture with a laser focus on securing enterprise data and information systems hosting that data. What is information security architecture? A more technical definition is provided by NIST (National Institute of Standards and Technology), which states that the “information security … Read more
Software security is a challenge of enormous proportions because every critical function of our lives is now dependent on software. Insecure software not only causes inconvenience but, more importantly, can critically affect an organization. One of the foremost champions of web software security is The Open Web Application Security Project (OWASP), which is also known … Read more
Recently the biggest information security problem for all the companies and law enforcement agencies is ransomware. Companies, small or big and random and even individuals like you and me are not targets of ransomware threats. Ransomware has become the largest security threat. This is because most people don’t know how to deal with it and … Read more
According to 2019 Internet Crime Report, cyber crime has almost doubled since 2015 and financial losses have tripled from $1.1 billion in 2015 to $3.5 billion in 2019. The most commonly reported cyber crimes in 2019 were phishing, personal data breach, non/payment and extortion each of which involved millions of dollars. We will later see … Read more