Risk Management
Risk analysis means understanding the current state of risk and making an informed decision as to which elements require further […]
Risk Analysis – Part 3
Qualitative risk analysis focuses on not producing detailed numbers directly related to actual monetary figures. Qualitative analysis is not as
Risk Analysis – Part 3 Read More »
Basic
Risk Analysis – Part 2
Risk is calculated for threat/vulnerability pairs. It appears simplistic and straightforward. However, calculating values can be challenging. There are important
Risk Analysis – Part 2 Read More »
Basic
What is MITRE ATT&CK?
MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK)
What is MITRE ATT&CK? Read More »
Framework
CIS Controls
The Center for Internet Security (CIS), established in 2000, is a non-profit organization that develops configurable policy standards that enable
