This website uses cookies.
We use so-called cookies to operate our website. Cookies are files used to customize the content of a website, to measure its functionality and generally to ensure your maximum satisfaction.

necessary preferential statistical marketing unclassified Enable selected Enable all

IT - SECURITY

FORUM

HOME

What is what in IT

The lifecycle of a malicious attack

• Survey
• Initial access
• Startup
• Credential access and privilege escalation
• Lateral movement
• Collection and exfiltration
• Installation of ransomware and demanding ransom payment

Source: it.portal

2 / 7

More information, which may be usefull to you, may be found after login at it-portal.sk

Actual incidents

SK-CERT Safety warnings

show link

CISA - CYBER INCIDENTS

show link

show all

What is what in IT

Cyber security

is a set of processes, best practices and technology solutions that help protect critical systems, network and data from unauthorized access or attacks

Source: it.portal

A network disaster recovery plan includes the following

• Know your assets
• Know your threats
• Define your RTO and RPO
• Set up sites for disaster recovery
• Test backup and restore services

show all

Interesting

Japan's space program at risk after Microsoft Active Directory breach

Japonská agentúra pre vesmírny prieskum (JAXA) tento týždeň informovala, že toto leto zaznamenala kybernetický incident, ktorý pramenil z narušenia Microsoft Active Direc... more...

Cybercriminals are selling access to Chinese surveillance cameras

viac ako 80 000 sledovacích kamier Hikvision na svete bolo v roku 2022 bolo zraniteľných prienikom k riadiacim príkazom.
Hikvision – je skratka pre Hangzhou Hikvisio... more...

show all

Recomendations

377

Data protection

Show how to recognize fake accounts

Source: it.portal

Build resilience across the organization

▪ Cyber resilience
▪ ▪ Proactively suppress breaches and attacks
▪ Operational resistance
▪ ▪ Avoid costly downtime for employees and customers
▪ Financ... more...

Source: it.portal

show all

Institutions

NCC-FI

Finnish Transport and Communications Agency Traficom's National Cyber Security Centre (NCSC-FI)show link

Národný bezpečnostný úrad

show link

show all

Legislative

336/2004 Z. z.

Vyhláška Národného bezpečnostného úradu o fyzickej bezpečnosti a objektovej bezpečnostishow link

Source: Slov-Lex

366/2024 Z. z.

Zákon, ktorým sa mení a dopĺňa zákon č. 69/2018 Z. z. o kybernetickej bezpečnosti a o zmene a doplnení niektorých zákonov v znení neskorších predpisov a ktorým sa menia a... more... show link

Source: Slov-Lex

show all

Norms

ISO/IEC 27006:2015/Amd 1:2020

Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems — Amendment 1

Source: ISO

ISO/IEC 27011:2016/Cor 1:2018

Information technology — Security techniques — Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations — Technical ... more...