Articles tagged “SIEM”.
The Federal Trade Commission (FTC) has announced a new web site – a single point to report Identity Theft - https://identitytheft.gov/ In many cases, reports from this s…
On February 10, 2017, the Department of Homeland Security issued the Enhanced Analysis of GRIZZLY STEPPE Activities. The analysis consists of many interesting details ab…
Many companies and organizations use log management as a post-incident analysis tool in the investigation of security breaches. However, major compliance regulations vie…
Michael Petrov··2 minThe NEI developed and published the NEW 08-09 Rev 6 to address many areas surrounding access control, audit and accountability, incident response, and system and informa…
Michael Petrov··2 minIn the Code of Federal Regulations, Section 73.54, Title 10 it is required that the NRC licensees provide high assurance that digital computer and communication systems…
Michael Petrov··1 minNIST 800-53 produces information security standards and guidelines for federal information systems. It guides federal agencies in documenting and implementing controls t…
Michael Petrov··1 minNIST-CSF sets information security standards and guidelines for serious infrastructure as defined within the Executive Order 13636 from the President of the United State…
Michael Petrov··1 minSince IT environments can generate millions of logs daily, DoDI 8500.2 has recommendations of analyzing and reporting on log data can reduce manual or homegrown remedies…
Michael Petrov··1 minThe Massachusetts General Law Chapter 93H regulation 201 CMR 17.00 was established to protect personal information of residents of the Commonwealth of Massachusetts. Thi…
Michael Petrov··2 minGLBA, also known as the Financial Modernization Act of 1999, was enacted to secure protection over customer records and information. To satisfy the riles and provisions…
Michael Petrov··1 minThe PCI DSS was created to encourage and enhance cardholder data security and facilitate the extensive adoption of consistent data security measures worldwide. This appl…
Michael Petrov··2 minNERC has its own framework to protect bulk power systems against cybersecurity compromises that could result in operational failures or instability. The NERC CIP v5 furt…
Michael Petrov··2 minSOX requires that all publicly traded companies establish and follow a framework of internal controls that support accountability and integrity of the financial reportin…
Michael Petrov··2 minHMG organizations are required to follow Protective Monitoring for HMG ICT Systems, based on Communications-Electronic Security Group’s GPG 13 to gain access to UK GCSX,…
Michael Petrov··1 minThe ISO 27001 standard is a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving management systems information security (IS…
Michael Petrov··2 minFISMA requires all federal agencies to document and implement controls for information technology systems that support their operations and assets. The National Institut…
Michael Petrov··2 minThe Health Insurance Portability and Accountability Act of 1996 (HIPAA) outlines relevant technical and non-technical security standards to ensure individuals’ ePHI, “el…
Michael Petrov··2 min