This website uses cookies.
We use so-called cookies to operate our website. Cookies are files used to customize the content of a website, to measure its functionality and generally to ensure your maximum satisfaction.

necessary preferential statistical marketing unclassified Enable selected Enable all

IT - SECURITY

FORUM

HOME

Recomendations

Reporting and Documentation

Identify and classify critical threats.

Source: it.portal

11 / 38

More information, which may be usefull to you, may be found after login at it-portal.sk

Actual incidents

NÚKIB - Threats and vulnerabilities

show link

Report an incident

show link

show all

What is what in IT

The lifecycle of a malicious attack

• Survey
• Initial access
• Startup
• Credential access and privilege escalation
• Lateral movement
• Collection and exfiltration
• Installation o... more...

Source: it.portal

NIS2 - Important subjects - Important

▪ Postal and courier services
▪ Waste management
▪ Manufacturing, production and distribution of chemical agents
▪ Food production, processing and distributio... more...

show all

Interesting

More than 20,000 MS Exchange servers are exposed to attacks

Tens of thousands of Microsoft Exchange email servers in Europe, the US and Asia are vulnerable to remote code execution. There is a version of the software in the mail s... more...

80% of organizations will use BaaS/DRaaS for at least some of their servers

Source: Veeam

show all

Recomendations

377

Compliance and Audit

Implement reporting to the board

Source: it.portal

PROTECT PERSONAL DATA - 05. Do not share your location

Turn off geolocation tracking in all applications that do not need it for their functionality.

Source: KCCKB

show all

Institutions

NCC-PT

Portuguese National Coordination Centreshow link

NCC-NO

Norwegian National Security Authorityshow link

show all

Legislative

412/2005 Sb.

ZÁKON ze dne 21. září 2005 o ochraně utajovaných informací a o bezpečnostní způsobilostishow link

Source: e-sbirka

267/2024 Sb.

ZÁKON ze dne 21. srpna 2024, kterým se mění zákon č. 412/2005 Sb., o ochraně utajovaných informací a o bezpečnostní způsobilosti, ve znění pozdějších předpisůshow link

Source: e-sbirka

show all

Norms

ISO/IEC 27007:2020

Information security, cybersecurity and privacy protection — Guidelines for information security management systems auditing

Source: ISO

ISO/IEC 27018:2019

Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
more...