Oct 19, 2022Email Phishing — Types, How to Detect & Avoid AttacksDr. Jaber Kakar | We live in an era of clogged email inboxes. Spamlaws estimates that upto 45% of all emails are spam while other estimates are as high as 73%. Because of email’s widespread usage, it has become an extremely common entry-point for scams and cyberattacks. …7 min read7 min read
Oct 5, 2022How WannaCry compromised IT security worldwideBahaa Alatassi | Basic information about WannaCry It is a virus that spread to at least 74 countries four most affected ones were Russia, Ukraine, India, and Taiwan as of Friday, 12 May 2017, targeting Russia initially and spreading to various industries including telecommunications, shipping, car manufacturers, universities, and health…5 min read5 min read
Sep 5, 2022Startups are subject to cyber attacks — MiTM Case StudyBahaa Alatassi | A famous Berliner startup for supermarket delivery services heavily relies on IT solutions. After all, creating a comprehensive delivery system making use of customer interaction is technology-dependent. One thing they neglected in their development is data security. In March 2021, security researchers shared the result of an…4 min read4 min read
Jul 19, 2022All what you need to know about ISO 27001Bahaa Alatassi | The rapid digital transformation emerged the need to consider safe cyber systems that respond to the needed technical developments while preserving the security of the information system of institutes/companies. …4 min read4 min read
Mar 31, 2022Part 4 — Reconcile rapid digital transformation with security and complianceDr. Jaber Kakar | Recall that step 1 is all about developing a solid understanding of security-relevant assets while step 2 deals with determining the criticality of assets in terms of protection goals. In step 3, we have detected security deficiencies through a comparison of required and actually implemented security…2 min read2 min read
Mar 31, 2022Part 5 — Reconcile rapid digital transformation with security and complianceDr. Jaber Kakar | In step 4, all risks have been added to an inventory in such a way that each risk can be categorized through relevant attributes. How to deal with the multitude of risks is the subject of this blog post. Analyze and prioritize your risks Risks can lead to hazards. In the…1 min read1 min read
Mar 31, 2022Part 6 — Reconcile rapid digital transformation with security and complianceDr. Jaber Kakar | As a reminder, in step 5, all risks from the risk inventory were analyzed and prioritized individually based on the institution’s risk appetite. Risks must then be addressed in the final step based on the underlying prioritization order. That is what this blog post is for. Treat and monitor your risks …4 min read4 min read
Mar 31, 2022Next Generation Cloud Computing Audit Guidelines — CSA CCM v4.0Dr. Jaber Kakar | As the popularity of cloud computing has increased over the last decade, so has the maturity of standards used to govern these resources. …6 min read6 min read
Feb 28, 2022Schritt 3 von 6: Digitale Transformation mit Sicherheit und Compliance in Einklang bringenBy Jaber Kakar | 16.02.22 | 1 Minute Read Erinnern Sie sich noch daran, dass es in Schritt 1 darum geht, ein solides Verständnis der sicherheitsrelevanten Vermögenswerte zu entwickeln, während es in Schritt 2 darum geht, die Kritikalität der Vermögenswerte im Hinblick auf die Schutzziele zu bestimmen? Die alleinige Kenntnis…Risikomanagement2 min readRisikomanagement2 min read
Feb 28, 2022Schritt 2 von 6: Digitale Transformation mit Sicherheit und Compliance in Einklang bringenBy Jaber Kakar | 10.12.21 | 1 Minute Read Sie erinnern sich vielleicht an unseren letzten Beitrag, dass ein solides Verständnis der sicherheitsrelevanten Werte eine fundamental wichtige Rolle bei der Vereinbarkeit der schnellen digitalen Transformation mit der IT-Sicherheit und der Einhaltung von Vorschriften spielt. Gehen wir davon aus, dass dieser…Risikomanagement2 min readRisikomanagement2 min read
