CISO Plus Archives

MITRE ATT&CK

MITRE is a not-for-profit organization that operates federally funded research and development centers (FFRDCs) to provide strategic support for U.S. government agencies in areas like cybersecurity, healthcare, and defense.

MITRE D3FEND

Core Concepts, Frameworks

MITRE D3FEND is a cyber security framework designed to help defenders better understand, evaluate, and implement defense techniques against cyber threats.

MITRE

Core Concepts, Organizations

MITRE is a not-for-profit organization that operates federally funded research and development centers (FFRDCs) to provide strategic support for U.S. government agencies in areas like cybersecurity, healthcare, and defense.

Ransomware – ATT&CK and D3FEND Techniques

Guides

It seems like ransomware became interchangeable with cyber attacks impacting businesses and governments worldwide.
Learn how did ransomware got this far, how does it actually work and what can be done.

Privilege Creep

Core Concepts, Terminology

Privilege creep occurs when an individual within an organization gradually accumulates access rights or permissions beyond what is necessary for their current role or responsibilities.

The Principle of Least Privilege

Core Concepts, Terminology

The Principle of Least Privilege (PoLP) is a security concept that dictates that users, applications, and systems should only have the minimal level of access necessary to perform their tasks.

DPO – Data Privacy Officer

Core Concepts, Terminology

A Data Privacy Officer (DPO) is a key role within organizations responsible for overseeing the protection of personal data and ensuring compliance with data privacy laws

IAAA – Identification and Authentication Authorization and Accountability

Core Concepts, Terminology

Identification, Authentication, Authorization, and Accountability (IAAA) are four key principles in information security used to control access to systems, applications, and data while ensuring proper monitoring and tracking of activities.