Bolaji Bankole

⚡ If you are tasked with auditing ISO 27001 ISMS. Then the below diagram might be helpful. Ensure of course, to do your research and due diligence in ensuring that you are following those established best practices- 🔦 1- Best Practices for #Cybersecurity & #GRC Professionals-https://lnkd.in/d5s6Cqxx 📚 Other resources to help enhance you Cyber-GRC skill-set: https://lnkd.in/gjCTYw3B

1

Kenya, South Africa, & Nigeria are identified as the top three African countries susceptible to #cyberattacks. The CEH course will equip you with the skills to learn how to identify, combat & prevent cybersecurity attacks in businesses. To Apply: https://lnkd.in/djbC8zFP

5

🚨 SECURITY ALERT: CVE-2024-11068 - CRITICAL 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-11068 - 📅 Publication Date: 2024-11-11 08:15:08 UTC - 🔥 Severity: CRITICAL - 🛡️ MITRE Tactics and Techniques: Techniques: - Technique Name: Network Intrusion Prevention. Network intrusion prevention systems IPS inspect network traffic to identify and block malicious activity such as exploit attempts. MITRE ATTCK ID: T0805 - Technique Name: Security Information and Event Management SIEM. SIEM systems collect and analyze security logs from various sources to detect and respond to security incidents. MITRE ATTCK ID: T0845 - Technique Name: Encrypt Data at Rest. Encrypting sensitive data at rest protects it from unauthorized access even if the system is compromised. MITRE ATTCK ID: T0819 - 🌐 References: https://lnkd.in/e5NPaH3Y https://lnkd.in/et44k4Vk #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation

1

1 Comment

Tools and Technologies for Incident Analysis in SOC   Video surveillance systems (VSS) Access control systems Incident management and reporting systems Geographic information systems (GIS) Risk assessment and auditing tools Emergency response and crisis management platforms Threat intelligence platforms Physical security assessment tools Case management software #informationsecurity #dataprotection #cybersecurity #trustandreputation #regulatorycompliance #financialsecurity #operationalcontinuity #cybercrimeprevention #intellectualproperty #riskmanagement #globalconnectivity #collaboration #securdata #privacymatters #securityawareness

10

4 Comments

🚨 CompTIA Security+ Domain 5 Overview: Mastering Security Governance, Risk Management, and Compliance 🚨 #CompTIA #SecurityPlus #Cybersecurity #RiskManagement #SecurityAwareness #Governance #IncidentResponse #PenetrationTesting #Compliance #CyberResilience #SecurityStandards #DataProtection #BusinessContinuity #ThirdPartyRisk #Audit #CybersecurityTraining #infosectrain #learntorise 

40

𝐇𝐢𝐫𝐢𝐧𝐠 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧 𝐂𝐞𝐧𝐭𝐞𝐫 𝐀𝐧𝐚𝐥𝐲𝐬𝐭 | 𝐈𝐧𝐝𝐢𝐚 𝐊𝐞𝐲 𝐫𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 👉 Operate within a fast-paced 24x7 SOC environment, either as part of a team or independently, to Analyse alerts and log data promptly and effectively. Assess the severity and impact of potential threats to accurately prioritize alerts and incidents. 👉 Monitor and analyze security information and event management (SIEM) tools and other security monitoring systems to identify potential security incidents and anomalies. 👉 Conduct in-depth analysis of security events, collaborating directly with customers to escalate and thoroughly investigate incidents. This involves understanding the scope, impact, and root cause of incidents to tailor the response effectively. 👉 Execute swift containment and remediation measures for identified security incidents, employing predefined response strategies to isolate affected systems and prevent further compromise. 👉 Proactively participate in the creation and enhancement of processes and procedures such as Security Playbooks. 👉 Refine and optimise analytical rules within the SIEM platform to reduce false positive alerts, enhancing the accuracy and efficiency of threat detection. 👉 Assist in vulnerability assessments and penetration testing activities. 👉 Evaluate and prioritise identified vulnerabilities for remediation by collaborating directly with customers. 👉 Maintain accurate records of incidents, investigations, and security-related activities within the incident management platform. 👉 Create detailed reports on security incidents, response actions taken, and recommendations for improvement. 👉 Research new concepts and present them to the internal team as well as customers. Job link :- https://lnkd.in/g6KhuW3V Follow SIEM & SOC CyberSecurity Jobs #cybersecurity #socanalyst #securityanalyst

27

2 Comments

SSCP Exam Changes – Effective September 2024 A title change is occurring for Domain 1. Security Operations and Administration will have a new title of Security Concepts and Practices. https://lnkd.in/dDmPu3iG #isc2 #sscp #cybersecurity #certification

3

#CISA Preparation: Brief yet useful Kerberos: "Securing Your Network with Trusted Authentication" This article provides an overview of Kerberos, detailing its components, functionality, benefits, and associated risks. For CISA Prep Training Batch, Enquire Here -https://lnkd.in/dwpDkrJk #cisa #cism #isaca #isc2 #informationsystems #informationsystemsauditing #informationsystems #isaudit #itaudit #audit #auditor #auditing

15

#Kyureeus Certification Training: ISO & SOC2 Certified Course 1: Network Defense Elements Overview: This training program offers foundational knowledge and practical skills to effectively protect your organization's network from evolving threats. What You Will Learn:  Network Security Principles: Fundamental concepts including protocols and encryption.  Threat Protection: Use advanced tools and practices for threat identification and mitigation.  Risk Management: Strategies for assessing and managing network risks.  Practical Exercises: Real-world simulations for hands-on experience. Key Features:  Industry-Relevant Skills: Gain up-to-date, practical knowledge for real-world network defense.  Career Advancement: Boost your professional profile with industry-recognized certifications.  Flexible Learning: Choose from online, in-person, or hybrid learning options.  Hands-on Training: Engage in practical exercises that simulate real-world scenarios.  Foundational Knowledge: Build a solid base in key areas such as threat analysis and risk management.    #Kyureeus: Elevating your cybersecurity expertise through top-tier training and certification.    #cybersecuritytips #ITSecurity #OTSecurity #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #cybersecurityawareness #WorkforceTraining #itsecurityawareness #itsecuritytraining

17

ISO 27001:2022 Information Security, Cybersecurity, and Privacy Self Assessment Checklist Credit - Saheed Akinloye #InformationSecurity #Cybersecurity #Privacy #DataProtection #RiskAssessment #Compliance #SecurityAudit #SelfAssessment #Checklist #ITSecurity #DataPrivacy #SecurityManagement #RiskManagement

4

How detailed should the ISO 27001 documents be?  Criteria for deciding on the level of detail #ISO27001, #ISO27001Training, #InformationSecurity, #CyberSecurityTraining, #ISOCompliance, #InformationSecurityManagement, #ISMS, #DataProtection, #CyberSecurity, #ComplianceTraining, #SecurityAwareness, #RiskManagement, #ISOStandards, #SecurityTraining, #InfoSec, #ISO27001Certification, #Compliance, #GovernanceRiskCompliance, #InformationSecurityTraining

19

1 Comment

Great example of things CISOs should share to the executive leadership team #leadership #management #technology #informationsecurity #ciso #riskmanagement #security #cybersecurity #privacy

110

3 Comments

ISO 27001 Internal Auditor Course #ISO27001 #InternalAuditor #InformationSecurity #CyberSecurity #DataProtection #Infosec #ISOStandards #RiskManagement #DataSecurity #ISMS #AuditTraining #SecurityAuditor #Compliance #CyberAudit #ITSecurity #SecurityTraining #InternalAudit #InformationAssurance #SecurityCompliance #InfoSecTraining

1

The ISO/IEC 27017 gives guidelines for information security controls applicable to the provision and use of cloud services by providing additional implementation guidance for relevant controls specified in ISO/IEC 27002 and additional controls with implementation guidance that specifically relate to cloud services. The Cloud Security Foundation (ISO/IEC 27017) Foundation certification is intended for anyone seeking to validate their knowledge of the ISO/IEC 27017 Standard. The exam is available in English and Portuguese. Learn more about the Cloud Security Foundation (ISO/IEC 27017) Foundation certification and register for your exam at https://lnkd.in/gwHpB2Yv #Cloud #CloudSecurity #InformationSecurity #InformationSecurityCertifications #CloudCertifications #ProfessionalCertifications #itcerts #OnlineProctoredExams

7