Society for Worldwide Interbank Financial Telecommunication (SWIFT) is a private company that provide services related to financial transactions. SWIFT has a Customer Security Programme (CSP) for its custumers. As part of the Customer Security Programme (CSP), every SWIFT user has…
iOS is an operating system for smartphones and tablets, developed by Apple exclusively for its products. This post discuss about some aspects of security on iOS. iOS Security Certifications for Professionals This section summarizes some certifications for professionals (i.e., people).…
Android is an OS for mobile and tablets developed by Google. This post comments different aspects of Android security, ranging from: Android Security Features Part of the security on Android devices depends on the device itself. Some Google devices like…
This post summarizes information security or cybersecurity control inventories. List of Information Security Control Catalogues Information Security Control Catalogues: ISO/IEC 27002 ISO/IEC 27002 is officially titled “Information security, cybersecurity and privacy protection — Information security controls”, but it can be…
An information security rating is an objective, data-driven, quantifiable measurement of an organization’s overall information security performance. It is often referred as cybersecurity rating. This post summarizes information security rating agencies that can assess organizations. List of Information Security Ratings for Organizations…
This post lists methods to assess the Information Security of an organization that acts as a third party for another one (e.g., a provider). This third parties are often referred as 3PL, that is an acronym for third-party logistics. Methods…
This post summarizes some certifications for organizations (and not for individuals or professionals) related somehow to information security or cybersecurity. List of Information Security Certifications for Organizations Information Security Certifications for Organizations featured on this post: ISO/IEC 27001 ISO/IEC 27001…
This post summarizes organizations related to the Government of the United States of America (USA) that are related to information security or cybersecurity. List of USA Government Cybersecurity Organizations Non-exhaustive list of USA Government organizations related to cybersecurity: NIST CSRC…
This post summarizes organizations within or close to European Union (EU) that are related to information security or cybersecurity. List of European Union Cybersecurity Public Organizations Non-exhaustive list of European Union Cybersecurity Public Organizations: European Commission The European Commission is…
Incident response or incident managment Concepts related to Incident Response A Security Operations Center (SOC) is a team within an organization that monitors systems for security events and focus on incident response. They may use a SIEM tool. Monitoring is…