IT vulnerability assessment or vulnerability management is a branch of IT security. It is concerned with identifying, assessing, and addressing vulnerabilities in computer systems and software. This post reviews some aspects regarding IT vulnerabilities. You can read a more general…
Society for Worldwide Interbank Financial Telecommunication (SWIFT) is a private company that provide services related to financial transactions. SWIFT has a Customer Security Programme (CSP) for its custumers. As part of the Customer Security Programme (CSP), every SWIFT user has…
This post lists methods to assess the Information Security of an organization that acts as a third party for another one (e.g., a provider). This third parties are often referred as 3PL, that is an acronym for third-party logistics. Methods…
This post tries to make an overview about how to perform a risk assessment of information technology (IT) assets. Steps to perform an IT risk assessment The summary of steps to be done are: Define scope Select a risk assessment…
CMMI (Capability Maturity Model Integration) is a development model. It may be referred as SW-CMM. History of CMMI CMMI was created in 2006 by CMU (Carnegie Mellon University). It is currently administered by the CMMI Institute, a subsidiary of ISACA.…
List of vulnerability assessment tools: One of the most popular are Nikto, N-Stalker or Burp Suite. The Open Web Application Security Project (OWASP) maintains a comprehensive list of vulnerability assessment tools: List of vulnerability assessment tools Nessus Web-based. Commercial.…
Risk Management is a process aimed at achieving an optimal balance between realizing opportunities for gain an minimizing vulnerabilities and loss. Business Impact Analysis (BIA) is performed to determine the impact of losing the availability of any resources to an…