Blog security
ISO27002 explained, part 4
This article describes the set of controls from ISO 27001:2013. There is a new version of the standard, ISO 27001:2022 with a new set of controls. Please check the following articles to learn about these controls: A5 organisational controls A6 people controls A7 physical controls A8 technological controls The article is part four of a…
Joost Krapels
10 step guide for GDPR / Privacy compliance
Privacy is becoming a larger topic by the day, and there is a good reason for it. As of May 25 2018, all companies in EU Member States that interact with Personal Data have to abide by the General Data Protection Regulation (or GDPR for short, AVG in Dutch). Based on the 10-step summary by…
Joost Krapels
The new OWASP top 10 of security vulnerabilities
The Open Web Application Security Project is a very successful free initiative to make Internet Applications more secure. The best known OWASP project is the OWASP top 10, a list of the most common application security vulnerabilities. This top 10 is updated every four years, and the latest 2017 op 10 was published on November 20th.
Sieuwert van Otterloo
Code analysis prevents hidden security risks
Ensuring security in software means starting at the source code: Developers must build security in from the start. Organisations too often focus on repairing damage post-breach and fixing bugs after launch. Greater attention to security in the earlier stages of software development is needed. It would greatly reduce the percentage of successful attacks, and minimize damage when malicious hackers do…
Stephen Morrow
ISO 27001 Lead Auditor training November 20-23
It is important and often mandatory for organisation with a security policy to provide the right training to all key roles involved in information security and privacy. One key role in security policies is internal auditor, and we recommend the ISO 27001 lead auditor course for anyone involved in the internal audit programme. This is…
Floris van den Broek