Payment fraud is a fact of life. Businesses and consumers need to be wary of it at all times. But during a crisis, extra vigilance is required. Criminals will seek to exploit new vulnerabilities and changes in behaviour. There have been reports of COVID-19 related scams across the UK.

(more…)

The purpose of this handbook is to provide guidance for implementing the Risk Management (RM) requirements of NASA Procedural Requirements (NPR) document NPR 8000.4A, Agency Risk Management Procedural Requirements [1], with a specific focus on programs and projects, and applying to each level of the NASA organizational hierarchy as requirements flow down.

(more…)

Te Saudi National Cybersecurity Authority (NCA) is leading the national effort to protect the country’s cyber space. Tis mission requires a qualified national cybersecurity workforce capable of carrying out all types of cybersecurity work. Te NCA’s mandate was issued by Royal Order number 6801, dated October 31, 2017.

(more…)

There are many different approaches to increasing an organization’s cybersecurity defenses against adversaries. One fundamental solution is known as a threat hunt. Threat hunts provide a proactive opportunity for an organization to uncover attacker presence in an environment. While no formal academic definition exists for threat hunting, this paper defines threat hunting as the proactive, analyst-driven process to search for attacker tactics, techniques, and procedures (TTP) within an environment.

(more…)

Microsoft has gradually increased the efficiency and effectiveness of its auditing facilities over the years. Modern Windows systems can log vast amounts of information with minimal system impact. With the corresponding decrease in the price of storage media, excuses to not enable and retain these critical pieces of evidence simply don’t stand up to scrutiny. (more…)