#securitystandards — Public Fediverse posts

Labelling: Turning "Don't leak this" into "We've all got data's back." 🛡️😉

#InformationSecurity #Infosec #CyberAwareness #TechCompliance #CISO #GovernanceRiskCompliance
#ISO27001 #ISMS #CyberRisk #ITSecurity #SecurityStandards #BusinessContinuity #RiskAssessment #GRC

Makes you wonder if #McDonalds even has a #VendorManagement program or hell an #InfoSec program for that matter.

Do they even conduct #SecurityAudits of their vendors? Do they have an #ArchitectureReviewBoard for new projects and initiatives?

Why aren't baseline/ minimum #SecurityStandards spelled out in their SOWs?

None of this is rocket-science, or even that costly, but you have to be willing to put forth the effort.

https://yro.slashdot.org/story/25/07/09/2014234/mcdonalds-ai-hiring-bot-exposed-millions-of-applicants-data-to-hackers

Makes you wonder if #McDonalds even has a #VendorManagement program or hell an #InfoSec program for that matter.

Do they even conduct #SecurityAudits of their vendors? Do they have an #ArchitectureReviewBoard for new projects and initiatives?

Why aren't baseline/ minimum #SecurityStandards spelled out in their SOWs?

None of this is rocket-science, or even that costly, but you have to be willing to put forth the effort.

https://yro.slashdot.org/story/25/07/09/2014234/mcdonalds-ai-hiring-bot-exposed-millions-of-applicants-data-to-hackers

Makes you wonder if #McDonalds even has a #VendorManagement program or hell an #InfoSec program for that matter.

Do they even conduct #SecurityAudits of their vendors? Do they have an #ArchitectureReviewBoard for new projects and initiatives?

Why aren't baseline/ minimum #SecurityStandards spelled out in their SOWs?

None of this is rocket-science, or even that costly, but you have to be willing to put forth the effort.

https://yro.slashdot.org/story/25/07/09/2014234/mcdonalds-ai-hiring-bot-exposed-millions-of-applicants-data-to-hackers

Makes you wonder if #McDonalds even has a #VendorManagement program or hell an #InfoSec program for that matter.

Do they even conduct #SecurityAudits of their vendors? Do they have an #ArchitectureReviewBoard for new projects and initiatives?

Why aren't baseline/ minimum #SecurityStandards spelled out in their SOWs?

None of this is rocket-science, or even that costly, but you have to be willing to put forth the effort.

https://yro.slashdot.org/story/25/07/09/2014234/mcdonalds-ai-hiring-bot-exposed-millions-of-applicants-data-to-hackers

NIST Releases First Post-Quantum Encryption Algorithms

From the Federal Register:
After three rounds of evaluation and analysis, NIST selected four algorithms it will standardize as a result of the PQ... https://www.schneier.com/blog/archives/2024/08/nist-releases-first-post-quantum-encryption-algorithms.html

#nationalsecuritypolicy #securitystandards #quantumcomputing #Uncategorized #NIST

Exchange Online starts public test of inbound SMTP DANE with DNSSEC

https://stackdiary.com/exchange-online-starts-public-test-of-inbound-smtp-dane-with-dnssec/

#EmailSecurity #Microsoft #ExchangeOnline #SMTPDANE #DNSSEC #Encryption #Cybersecurity #SecureEmail #TechInnovation #DigitalSecurity #EmailProtection #TLS #SecureMessaging #DataIntegrity #EmailStandards #CloudSecurity #TechUpdate #EmailTech #OnlineSecurity #CyberProtection #TechNews #InfoSec #DataProtection #EmailCompliance #DigitalTrust #NetworkSecurity #SecurityStandards

Detecting Malicious Trackers

From Slashdot:
Apple and Google have launched a new industry standard called “<a href="https... https://www.schneier.com/blog/archives/2024/05/detecting-malicious-trackers.html

#securitystandards #falsepositives #Uncategorized #Bluetooth #stalking #tracking #Google #Apple

Data Wallets Using the Solid Protocol

I am the Chief of Security Architecture at Inrupt, Inc., the company that is commercializing Tim Berners-Lee’s Solid open W3C standard for distributed data ownersh... https://www.schneier.com/blog/archives/2024/07/data-wallets-using-the-solid-protocol.html

#securitystandards #dataprotection #Uncategorized #dataprivacy #Inrupt

NIST Releases First Post-Quantum Encryption Algorithms https://www.schneier.com/blog/archives/2024/08/nist-releases-first-post-quantum-encryption-algorithms.html #nationalsecuritypolicy #securitystandards #quantumcomputing #Uncategorized #cryptography #encryption #NIST

Detecting Malicious Trackers – Source: www.schneier.com https://ciso2ciso.com/detecting-malicious-trackers-source-www-schneier-com/ #rssfeedpostgeneratorecho #SchneierOnSecurity #SchneieronSecurity #CyberSecurityNews #securitystandards #Uncategorized #Bluetooth #Stalking #tracking #Google #Apple

🔒 Check our latest Knowledge Base article on SOC 2 compliance! Learn how embracing SOC 2 can fortify your organization's security posture and build client trust. 💼 #SOC2 #Compliance #Cybersecurity #DataProtection #Trust #SecurityStandards
https://www.relianoid.com/resources/knowledge-base/misc/what-is-soc-2-compliance/

Apple Announces Post-Quantum Encryption Algorithms for iMessage

Apple announced PQ3, its post-quantum encryption standard based on the Kyber secure key-encapsulation protocol, one of the post-quantum algori... https://www.schneier.com/blog/archives/2024/02/apple-announces-post-quantum-encryption-algorithms-for-imessage.html

#securitystandards #quantumcomputing #academicpapers #Apple

Apple Announces Post-Quantum Encryption Algorithms for iMessage https://www.schneier.com/blog/archives/2024/02/apple-announces-post-quantum-encryption-algorithms-for-imessage.html #securitystandards #quantumcomputing #academicpapers #Uncategorized #cryptanalysis #encryption #Apple #NIST

You Can’t Rush Post-Quantum-Computing Cryptography Standards

I just read an article complaining that NIST is taking too long in finalizing its post-quantum-computing cryptography standards.
This process has be... https://www.schneier.com/blog/archives/2023/08/you-cant-rush-post-quantum-computing-standards.html

#nationalsecuritypolicy #securitystandards #quantumcomputing #Uncategorized #NIST

You Can’t Rush Post-Quantum-Computing Cryptography Standards https://www.schneier.com/blog/archives/2023/08/you-cant-rush-post-quantum-computing-standards.html #nationalsecuritypolicy #securitystandards #quantumcomputing #Uncategorized #cryptography #encryption #NIST

Exchange Online starts public test of inbound SMTP DANE with DNSSEC

https://stackdiary.com/exchange-online-starts-public-test-of-inbound-smtp-dane-with-dnssec/

#EmailSecurity #Microsoft #ExchangeOnline #SMTPDANE #DNSSEC #Encryption #Cybersecurity #SecureEmail #TechInnovation #DigitalSecurity #EmailProtection #TLS #SecureMessaging #DataIntegrity #EmailStandards #CloudSecurity #TechUpdate #EmailTech #OnlineSecurity #CyberProtection #TechNews #InfoSec #DataProtection #EmailCompliance #DigitalTrust #NetworkSecurity #SecurityStandards

Exchange Online starts public test of inbound SMTP DANE with DNSSEC

https://stackdiary.com/exchange-online-starts-public-test-of-inbound-smtp-dane-with-dnssec/

#EmailSecurity #Microsoft #ExchangeOnline #SMTPDANE #DNSSEC #Encryption #Cybersecurity #SecureEmail #TechInnovation #DigitalSecurity #EmailProtection #TLS #SecureMessaging #DataIntegrity #EmailStandards #CloudSecurity #TechUpdate #EmailTech #OnlineSecurity #CyberProtection #TechNews #InfoSec #DataProtection #EmailCompliance #DigitalTrust #NetworkSecurity #SecurityStandards

Exchange Online starts public test of inbound SMTP DANE with DNSSEC

https://stackdiary.com/exchange-online-starts-public-test-of-inbound-smtp-dane-with-dnssec/

#EmailSecurity #Microsoft #ExchangeOnline #SMTPDANE #DNSSEC #Encryption #Cybersecurity #SecureEmail #TechInnovation #DigitalSecurity #EmailProtection #TLS #SecureMessaging #DataIntegrity #EmailStandards #CloudSecurity #TechUpdate #EmailTech #OnlineSecurity #CyberProtection #TechNews #InfoSec #DataProtection #EmailCompliance #DigitalTrust #NetworkSecurity #SecurityStandards

Exchange Online starts public test of inbound SMTP DANE with DNSSEC

https://stackdiary.com/exchange-online-starts-public-test-of-inbound-smtp-dane-with-dnssec/

#EmailSecurity #Microsoft #ExchangeOnline #SMTPDANE #DNSSEC #Encryption #Cybersecurity #SecureEmail #TechInnovation #DigitalSecurity #EmailProtection #TLS #SecureMessaging #DataIntegrity #EmailStandards #CloudSecurity #TechUpdate #EmailTech #OnlineSecurity #CyberProtection #TechNews #InfoSec #DataProtection #EmailCompliance #DigitalTrust #NetworkSecurity #SecurityStandards

Data Wallets Using the Solid Protocol

I am the Chief of Security Architecture at Inrupt, Inc., the company that is commercializing Tim Berners-Lee’s Solid open W3C standard for distributed data ownersh... https://www.schneier.com/blog/archives/2024/07/data-wallets-using-the-solid-protocol.html

#securitystandards #dataprotection #Uncategorized #dataprivacy #Inrupt

Data Wallets Using the Solid Protocol

I am the Chief of Security Architecture at Inrupt, Inc., the company that is commercializing Tim Berners-Lee’s Solid open W3C standard for distributed data ownersh... https://www.schneier.com/blog/archives/2024/07/data-wallets-using-the-solid-protocol.html

#securitystandards #dataprotection #Uncategorized #dataprivacy #Inrupt

Data Wallets Using the Solid Protocol

I am the Chief of Security Architecture at Inrupt, Inc., the company that is commercializing Tim Berners-Lee’s Solid open W3C standard for distributed data ownersh... https://www.schneier.com/blog/archives/2024/07/data-wallets-using-the-solid-protocol.html

#securitystandards #dataprotection #Uncategorized #dataprivacy #Inrupt

Data Wallets Using the Solid Protocol

I am the Chief of Security Architecture at Inrupt, Inc., the company that is commercializing Tim Berners-Lee’s Solid open W3C standard for distributed data ownersh... https://www.schneier.com/blog/archives/2024/07/data-wallets-using-the-solid-protocol.html

#securitystandards #dataprotection #Uncategorized #dataprivacy #Inrupt