Categories
security

IT Simplified: Zero Trust

Zero Trust is a security framework requiring all users, whether in or outside the organization’s network, to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or keeping access to applications and data. 

Execution of this framework combines advanced technologies such as risk based multi-factor authentication, identity protection, next-generation endpoint security, and robust cloud workload technology to verify a user or systems identity, consideration of access at that moment in time,  and the maintenance of system security. Zero Trust also requires consideration of encryption of data, securing email, and verifying the hygiene of assets and endpoints before they connect to applications.

Categories
security

IT Simplified: ISO 27001

What is ISO 27001?

ISO 27001 is the international standard that describes best practices for an Information Security Management Systems(ISMS). It’s based on a set of controls and measures, which organizations can use to achieve information security. 

The ISO 27001 standard requires that you have procedures in place to cover aspects of the ISMS, including:

Information security risk management (What are the risks you face and how do you treat those risks?)

Monitoring, measurement, analysis, and evaluation (How is the effectiveness of the information security management system evaluated?)

Improvement (How are nonconformities evaluated and corrected?)

Categories
security

IT Simplified: IPsec

What is IPsec?

IPsec is a group of protocols that are used together to set up encrypted connections between devices. It helps keep data sent over public networks secure. IPsec is often used to set up VPNs, and it works by encrypting IP packets, along with authenticating the source where the packets come from.

Within the term “IPsec,” “IP” stands for “Internet Protocol” and “sec” for “secure.” The Internet Protocol is the main routing protocol used on the Internet; it designates where data will go using IP addresses. IPsec is secure because it adds encryption* and authentication to this process.

Categories
security

IT Simplified: Virtual Private Networks

VPNs or Virtual private networks are essential additions to organizational networks that allow companies of any size to easily and safely access their resources, whether they’re hosted locally or in the cloud. The primary purpose of an enterprise VPN is to fortify these sensitive assets and resources – which might include internal customer and sales systems, SaaS applications, and local file storage for employees who are now accessing them from many different devices and on unfamiliar (and potentially unsafe) Wi-Fi connections.

Categories
security

IT Simplified: Unified Endpoint Management

What is Unified Endpoint Management? 

Unified endpoint management is the method of centrally managing endpoint devices from a single location. These endpoints include mobile devices, desktops, laptops, tablets, wearables and other smart devices used for accessing networks or resources within an organization. 

With a UEM solution, organizations are able to unify the applications of data protection, device configuration, and usage policies. It provides a single view of users who use multiple devices and also helps in gathering workplace analytics regarding them. UEM also acts as the apex endpoint management solution in an organization by orchestrating related endpoint technologies such as identity services, client management tools, etc. 

Categories
security

IT Simplified: Data Loss prevention

Data loss prevention (DLP), as per Gartner, may be defined as technologies which perform both content inspection and contextual analysis of data sent via messaging applications such as email and instant messaging, in motion over the network, in use on a managed endpoint device, and at rest in on-premises file servers or in cloud applications and cloud storage. These solutions execute responses based on policy and rules defined to address the risk of inadvertent or accidental leaks or exposure of sensitive data outside authorized channels.

Categories
Emails security

IT Simplified: Email Authentication

Email authentication helps validate who is sending emails. Email authentication methods can help protect your domain, your brand, your reputation, as well as help improve deliverability overall. Here we understand what and how’s of email authentication and what happens after you hit the button send.

Email authentication isn’t just about security – it’s also about deliverability. By putting records in place and authenticating your emails, you can protect your brand and help your emails successfully reach the inbox. It helps in preventing email fraud, improve your email deliverability, and ensure continued delivery.

Categories
security

IT Simplified: Distributed denial of service

Hack vector created by freepik – www.freepik.com

Distributed denial- of- service attacks, or  DDoS attacks are a variant of denial-of-service attacks in which an attacker or a group of attackers employs multiple machines to simultaneously carry out a Denial of service(DoS) attack, thereby increasing its effectiveness and strength. The “army” carrying out the attacks are mostly often composed of innocent infected zombie computers such as an home router manipulated to be bots and being part of a botnet. These bots are cleverly controlled by the attacker via a Command and Control Server . It also insures the anonymity of the original attack since the distributed denial of service attack traffic originates from the bots’ IPs rather than the attacker’s. They may still be short, but may persist as powerful and sudden “punctuated” attacks that will last for several hours or several days. 

Categories
security

Honeypot

In computer terminology, a honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information systems. A honeypot can be modelled after any digital asset, including software applications, servers or the network itself. It is intentionally and purposefully designed to look like a legitimate target, resembling the model in terms of structure, components and content. In computer terminology, a honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information systems. A honeypot can be modelled after any digital asset, including software applications, servers or the network itself. It is intentionally and purposefully designed to look like a legitimate target, resembling the model in terms of structure, components and content. 

Categories
cloud computing security

Rushed digital transformation is creating security risks

The pandemic provided the kick in the pants that many enterprises needed to finally get long-gestating digital transformation efforts underway. But for many organizations, such transformations turned into rush jobs, with many digital transformation projects being hatched far earlier than expected.

While some of these transformations came out in one piece, many weren’t so fortunate, carrying with them a virulent case of cybersecurity vulnerabilities. These vulnerabilities have in turn led directly to a surprising number of breaches.