In the context of project management, a business case captures the reasoning for initiating a project. A business case precedes a project plan, and it is one of the very first steps when tackling a project. The objective of a…
ISO/IEC 27001 (sometimes shorted as ISO 27001) is an international standard on how to manage information security in an organization. The standard was originally published jointly by the International Organization for Standardization and the International Electrotechnical Commission in 2005, but…
This post lists some password manager applications. On premise Password Manager Applications On-premise password manager applications: KeePass Free and open source.Developed for Windows, and supports some portability for macOS and Linux using Mono. There are other unofficial ports. It was…
An endpoint, in the context of a computer network, is a remote computing device that communicates back and forth with a network to which it is connected. Examples of endpoints are: In a more extended definition of endpoint, it may include…
Public Administrations of Spain should accept digital signature that are compliant with European Union eIDAS regulation. Digital signature types accepted by Public Administrations of Spain: XAdES is used to sign small files (up to 4 MB). CAdES is used to sign…
Application Security Testing (AST) is the process of checking an application in order to identify potencial vulnerabilities and set points for security improvements. They are different to code testing solutions, as AST focus on security, not other aspects like performance…
El Esquema Nacional de Seguridad (ENS) es un marco de trabajo promulgado por el Gobierno de España y que establece una serie de medidas relacionadas con la seguridad de la información. El ENS es de obligado cumplimiento para las administraciones…
This post summarizes the roles involved in managing data in IT systems. These roles are based on USA’s NIST SP 800-18 Rev. 1 “Guide for Developing Security Plans for Federal Information Systems” or European Union’s General Data Protection Regulation (GDPR).…
Code repositories are applications to store software source code. It adds functionality like control version, team chat, etc. Git Git is an open source version control system (CVS) that provides code repositories. As many code repositories as a services are…
This post is about how to normalize a relational database. You can read a post as an introduction to relational databases. In the context of relational databases, normalization goal is a procedure to reduce redundancy and avoid issues while updating…