Skip to content
NGTEdu Logo

NGTEdu

A PRODUCT OF NGTECH.CO.IN

NGTEdu Logo

NGTEdu

  • Home
  • Cyber Attacks
  • Malware
  • Vulnerabilities
  • Data Breach
  • Home
  • Critical Vulnerability
  • Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls
  • Critical Vulnerability

Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls

4 years ago Matthew Jerzewski
Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls

I’m delighted to share that I will be speaking for the first time at SecTor this year. The talk will be in Theatre 1 at 1:15pm on October 5th. In the session Neither Pointless Nor Boring: Pop It And Lock It Down With CIS Controls, I will be discussing the latest version of CIS Controls. There are 18 Controls in Version 8. We will review these before diving into more detail on the 5 controls from the list that, in my opinion, could have the greatest impact once implemented.

In the tech industry, there are no shortage of frameworks for professionals to choose from. Working in cybersecurity I’ve noticed, that just like Spotify picking music artists that fit my personality and style of music, there is a framework that is tailored to the industry you work in. Last year I was introduced to CIS Controls while researching a series of blog posts and they stood out to me with their practicality and ease of implementation. If you want to dig into the CIS Controls before this session, feel free to read the series of posts, which highlight the key takeaways from each control.

A common opinion of most frameworks is that they’re not exactly exciting to read and implement, but they are mission critical when it comes to keeping organizations safe and secure. Therefore, I came up with the idea to present the CIS Controls with a twist. A quote that rings true by famous footballer Johann Cruyff is, “Quality without results is pointless. Results without quality is boring.” If you find it boring and pointless, you’re doing it wrong. So, to make sure we do this right, I added a little flare by bringing in some dance moves that can paint a picture of an evolving organization implementing these Controls.

During this talk we will discuss the CIS Controls and explore several of the controls that in my opinion could have the greatest impact once implemented. So, if you’re looking for a not boring and not pointless talk about CIS Controls, come on down to the dance floor with me for Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls.

The post ” Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls” appeared first on TripWire

Source:TripWire – Matthew Jerzewski

Tags: Critical Severity, TripWire

Continue Reading

Previous How Can Cybersecurity Professionals Account for Vulnerabilities in Fleet Data?
Next CISA Warns of Hackers Exploiting Critical Atlassian Bitbucket Server Vulnerability

More Stories

  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

1 day ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Malware
  • Vulnerabilities

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

2 days ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Malware
  • Vulnerabilities

Enterprise Defenses Recovered at the Edge and Collapsed Inside

2 days ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

2 days ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

2 days ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

2 days ago [email protected] (The Hacker News)

Recent Posts

  • Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
  • Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
  • 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
  • OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning
  • Enterprise Defenses Recovered at the Edge and Collapsed Inside

Tags

Android APT Bug CERT Cloud Compliance Coronavirus COVID-19 Critical Severity Encryption Exploit Facebook Finance Google Google Chrome Goverment Hacker Hacker News High Severity Instagram iPhone Java Linux Low Severity Malware Medium Severity Microsoft Moderate Severity Mozzila Firefox Oracle Patch Tuesday Phishing Privacy QuickHeal Ransomware RAT Sim The Hacker News Threatpost TikTok TripWire VMWARE Vulnerability Whatsapp Zoom
Copyright © 2020 All rights reserved | NGTEdu.com
This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Read More here.Cookie settingsACCEPT
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT