Security is a lifestyle choice, not a certification.I saw an interesting post on twitter about how often people trying to get into security have one or two certifications but no context. The example …
Continue Reading about Securing modern API- and microservices-based apps by design →
Authorization across microservices, AuthN and AuthZ protocols, and advanced security policiesOriginally posted by Farshad Abasi of Forward Security on the IBM Developer blog on May 31st.Part 1 of this …
Continue Reading about Securing modern API- and microservices-based apps by design – part 2 →
This post was originally published on the StandardFusion blog. Many organizations have chosen to focus their strategy towards compliance with data security best practices. The benefits are obvious: …
Continue Reading about ISO 27001 Or SOC 2? How To Decide Which Audit To Pursue First →
The most important thing is to start. Where you start matters less, but starting matters. If you delay you are just increasing the risk of something bad happening. Here’s some stages to consider in …
Continue Reading about Where To Start On Your Security Journey – For SMB →
One of the findings we commonly have when running our External Discovery service is that DNS administrators have accidentally or unwittingly exposed internal services to external audiences. Often, to …
Continue Reading about Reduce Your Exposed Surface Area With Split Horizon DNS →
It has become very clear that in the last couple of years, the management of personal information has built momentum and it is on everyone's minds.The introduction of privacy and personal information …
Continue Reading about Our Data Is In The Cloud: How To Assure Privacy? →
