Certificate of Cloud Security Knowledge (CCSK) is a certificate issued by the Cloud Security Alliance (CSA) that focuses on cloud security. CCSK is considered a good start towards the more advance ISACA’s certification CCSP. You can read more about how…
This post features some media or publications related to OT security. It is part of the main post about OT security. List of OT Security Media OT Security Media: Industrial Cyber Industrial Cyber is a journalistic medium based in Canada…
This post discusses some aspects related to IT or computer crime. The post focuses on regulations that prosecute malicious behavior related to computers or IT. If you want to read more about regulations concerning IT security focused on the implementation…
This post features some operational technology (OT) Security conventions. It is part of the main post about OT Security. List of OT Security Conventions OT Security Conventions: Official link IIoT World ICS Cybersecurity Day IIoT World ICS Cybersecurity Day is…
Software composition analysis (SCA) Software bill of materials (SBOM) is the list of components that conforms a given software. SBOM management should be part of the software development lifecycle (SDLC). SBOM may be compound by: Uses of SBOM We can…
This post features some operational technology (OT) security frameworks and standards. List of OT Security Frameworks and Standards OT Security frameworks and standards that are featured on this post: ISA/IEC 62443 ISA/IEC 62443, sometimes referred as ISA 62443 or IEC…
This post summarizes some aspects of information security on computer networks. Network Security Controls Security Gateway Security gateway is a broad term to refer to a network edge security device. Firewall Firewall is a control. Proxy servers are a type…
Secure strings should be used. These user scenarios should be done securely: Get password from user securely You can use Get-Credential or Get-Credential-User (that accepts a text as a an argument, in case you want to add a custom message…
Operational technologies (OT) are hardware and software that detects or causes a change, through the direct monitoring and/or control of industrial equipment, assets, processes and events.. You can read an introduction to OT on this post. OT Security (OT-Sec), Industrial…
ISA/IEC 62443 is a standard about industrial cybersecurity. ISA/IEC 62443 Cybersecurity Certificate Program is a family of certifications aimed for professionals and related to the ISA/IEC 62443 standard. The certificates are issued by the International Society of Automation (ISA). Take…