hey...

hey...

Comments

Post a Comment

Popular posts from this blog

NIST 800-53 Identification and Authentication: Securing Access in the Digital Age

It is critical to have robust identification and authentication mechanisms, which are crucial for protecting sensitive information and systems.  1. IA-1: Policy and Procedures The foundation of effective identification and authentication is a well-defined policy.  IA-1 requires organizations to: - Develop, document, and disseminate identification and authentication policies - Establish procedures to facilitate policy implementation Example Policy Statement: "Our organization implements multi-factor authentication for all user accounts accessing sensitive information or critical systems. We adhere to NIST Identity Assurance Level 2 requirements for identity proofing and authentication of these accounts." What does this mean? Ensure you have the correct identity proofing that meets the requirements with processes to back it. Some companies use third-party services and others write their own processes.  Why is this important? Using AI and other technologies has allowed adver...
Read more

FedRAMP Moderate Rev 5 SI Controls

  In this post, I'll break down each SI control in FedRAMP Moderate Rev 5 and provide tips.   SI-1: System and Information Integrity Policy and Procedures The key to a strong base is well-documented policies and procedures.  For SI-1, organizations must: - Develop and maintain system and information integrity policies that address purpose, scope, roles, and responsibilities - Define procedures for implementing security controls - Review and update these documents at least annually Example:  Create a System and Information Integrity Policy document that includes: - Malware protection requirements with procedures - System monitoring procedures - Software and firmware update processes - Security alert handling processes and procedures - Error handling protocols  SI-2: Flaw Remediation Flaw remediation is key for maintaining system security.  Organizations must: - Identify, report, and correct system flaws promptly - Test software updates before deployment...
Read more

Celebrating the Wins

How often do you celebrate your wins? Only really big ones or the ones that have zings? What is the right way to celebrate or how often? I do not think that there is an answer to these questions. I know the answer is not only the big ones. There are so many things that happen without celebration and maybe that is not a good thing. I remember school and the pizza parties that were the best celebrations of all time. Why? It was a change from the normal schedule. There was a point in my career when there were Starbucks Fridays to celebrate making it through the week. It was a difficult job that required lots of quiet and not lots of conversations. Fridays were different for the few minutes that we held the warm cups of coffee knowing it was a mini celebration of that week. It did not matter what happened or how that day went. The thing that mattered was the celebration. I like celebrating things. The small wins and the big wins or even a loss that was handled with grace. I think the ackno...
Read more