Cryptography

Endpoint security

Threat intelligence

Network security

Inadequate autentication protocols

Flawed websites

Misconfigured firewalls

Its corporate network

Security is a product, not a process

Security is a chain that is only as secure as its weakest link

Complexity is the worst enemy of security

Security relies on people, policies and processes as well as technology

Assessing the exposure and vulnerability of assets

Inventoring assets and identifying the threats against those assets

Estimating the risk based on likelihood and severity

Designing strategies and tactics to mitigate the risk

Technical framework

Control framework

Program framework

Compliance framework

NIST Cyber Security Framework

ISO/IEC 27001

COBIT

Factor Analysis of Information Risk (FAIR)

This principle is easy to implement in practice

It is also known as the principle of least authority

This approach reduces the risk and impact of a cyberattack

Risk is a combination of likelihood and impact

Risk is a mix of exposure and vulnerability

Risk is a mix of exposure and impact

Risk is a combination of likelihood and vulnerability

Benign

Acceptable

Intolerable

Tolerable

Embrace it

Transfer it

Reduce it

Avoid it