Skip to content
NGTEdu Logo

NGTEdu

A PRODUCT OF NGTECH.CO.IN

NGTEdu Logo

NGTEdu

  • Home
  • Cyber Attacks
  • Malware
  • Vulnerabilities
  • Data Breach
  • Home
  • Critical Vulnerability
  • Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls
  • Critical Vulnerability

Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls

4 years ago Matthew Jerzewski
Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls

I’m delighted to share that I will be speaking for the first time at SecTor this year. The talk will be in Theatre 1 at 1:15pm on October 5th. In the session Neither Pointless Nor Boring: Pop It And Lock It Down With CIS Controls, I will be discussing the latest version of CIS Controls. There are 18 Controls in Version 8. We will review these before diving into more detail on the 5 controls from the list that, in my opinion, could have the greatest impact once implemented.

In the tech industry, there are no shortage of frameworks for professionals to choose from. Working in cybersecurity I’ve noticed, that just like Spotify picking music artists that fit my personality and style of music, there is a framework that is tailored to the industry you work in. Last year I was introduced to CIS Controls while researching a series of blog posts and they stood out to me with their practicality and ease of implementation. If you want to dig into the CIS Controls before this session, feel free to read the series of posts, which highlight the key takeaways from each control.

A common opinion of most frameworks is that they’re not exactly exciting to read and implement, but they are mission critical when it comes to keeping organizations safe and secure. Therefore, I came up with the idea to present the CIS Controls with a twist. A quote that rings true by famous footballer Johann Cruyff is, “Quality without results is pointless. Results without quality is boring.” If you find it boring and pointless, you’re doing it wrong. So, to make sure we do this right, I added a little flare by bringing in some dance moves that can paint a picture of an evolving organization implementing these Controls.

During this talk we will discuss the CIS Controls and explore several of the controls that in my opinion could have the greatest impact once implemented. So, if you’re looking for a not boring and not pointless talk about CIS Controls, come on down to the dance floor with me for Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls.

The post ” Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls” appeared first on TripWire

Source:TripWire – Matthew Jerzewski

Tags: Critical Severity, TripWire

Continue Reading

Previous How Can Cybersecurity Professionals Account for Vulnerabilities in Fleet Data?
Next CISA Warns of Hackers Exploiting Critical Atlassian Bitbucket Server Vulnerability

More Stories

  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Malware
  • Vulnerabilities

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

3 hours ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

How AI Hallucinations Are Creating Real Security Risks

7 hours ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Data Breach
  • Vulnerabilities

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

13 hours ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

1 day ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

1 day ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

2 days ago [email protected] (The Hacker News)

Recent Posts

  • ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
  • Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
  • PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
  • How AI Hallucinations Are Creating Real Security Risks
  • Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

Tags

Android APT Bug CERT Cloud Compliance Coronavirus COVID-19 Critical Severity Encryption Exploit Facebook Finance Google Google Chrome Goverment Hacker Hacker News High Severity Instagram iPhone Java Linux Low Severity Malware Medium Severity Microsoft Moderate Severity Mozzila Firefox Oracle Patch Tuesday Phishing Privacy QuickHeal Ransomware RAT Sim The Hacker News Threatpost TikTok TripWire VMWARE Vulnerability Whatsapp Zoom
Copyright © 2020 All rights reserved | NGTEdu.com
This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Read More here.Cookie settingsACCEPT
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT