The operational technology (OT)/industrial control system (ICS) security world continually adapts to meet new challenges and threats. This 2021 SANS OT/ICS Cybersecurity Survey explores how OT defenders across all industries meet these challenges and looks to areas where we can place more emphasis to help defend our critical infrastructure moving forward.

(more…)

The risk-based approach (RBA) is central to the effective implementation of the FATF Recommendations. It means that competent authorities, supervisors and legal professionals should identify, assess, and understand the money laundering and terrorist financing (ML/TF) risks to which legal professionals are exposed, and implement appropriate mitigation measures. This approach enables allocation of resources where the risks are higher.

(more…)

Facial recognition can verify or identify individuals by their faces. It is one of several biometric technologies that identify individuals by measuring and analyzing physical and behavioral characteristics. Facial recognition technology uses a photo or still from a video feed of a person—often called a probe or live photo—and converts it into a template, or a mathematical representation of the photo.

(more…)

Maturity models are a relatively common tool, often used on a self-assessment basis, to help organisations understand their current level of capability in a particular functional, strategic or organisational area. In addition, the setting out of different levels and descriptors of maturity can help an organisation achieve a common understanding of the type of changes that would be likely to enable it to reach a higher level of maturity over time, should it so wish.

(more…)

This framework is supported by entity-wide Policies and procedures all aimed at enhancing the Council’s risk capability and resilience. Council’s Enterprise Risk Management Framework (the Framework) is a living document and will be regularly reviewed and updated as required to ensure the Framework is always up to date with current risk management regulations and legislations and current practices within Council.

(more…)