Compliance management solutions provide templates, assessment tools and other functionalities to help an organization to meet compliance with some of the most popular standards. This post lists some Compliance Management Solutions. List of IT Compliance Management Solutions Providers List of…
This post lists some cybersecurity conventions or events that are celebrated in Spain. List of IT Security Conventions in Spain Cybersecurity Conventions in Spain, in order of recurrence: CIBERSEG Jornadas Seguridad y Defensa CIBERSEG. Alcalá de Henares, Madrid, Spain. Yearly…
Application Security Testing (AST) is the process of checking an application in order to identify potencial vulnerabilities and set points for security improvements. They are different to code testing solutions, as AST focus on security, not other aspects like performance…
This post explains what is a DLL side-loading attack in the context of IT security. What is a DLL Side-loading Attack? A Dynamic Linked Library (DLL) is a file that is used on Windows systems to group functions. By…
ISO/IEC 27001 is an international standard to implement an ISMS in an organizations. It is issued jointly by International Organization for Standarization (ISO) and International Electrotechnical Commission (IEC). Professionals that want to get the knowledge to implement ISO/IEC 27001 and be…
This post lists some of the most popular IT frameworks that can be used by an organization to implement their information security. You can read about related information security architecture frameworks on this post. List of IT Security Frameworks List…
CISSP (Certified Information Systems Security Professional) is a certification granted by the organization ISC2 (International Information System Security Certification Consortium). This post explains how you can prepare the exam to apply for CISSP certification. To find more information about the…
Digital certificates, also known as public key certificates or identity certificate, . When I explain what a digital certificate to someone without a strong IT background I like to compare it with a seal ring, like the ones used in…
CISSP (Certified Information Systems Security Professional) is an information security certification granted by organization (ISC)2. This post explains the procedure to get CISSP certification through a series of frequently asked questions (FAQs) that are set in logical order. All questions…
Information Systems Audit and Control Association (ISACA) is an association of professionals for auditing and ensuring IT security on IT systems. There are different certifications issued by professional association ISACA. These certification has a limited validity period that, nevertheless, can…