Just Unsecure

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about User friendly Security

We look at the current Security Myth
If the interface is easy to use, it’s less secure.
If it’s secure, it’s more difficult to use.

and some steps to take in ensuring user friendly security  
1. Involve a UX designer  
2. Get Stakeholders Involved in UX Security Early
3. Design Methods for Security Solutions
4. Build for Trust: End to End Encryption
5. Authentication
6. Enhance User Privacy and Data Privacy
7. Remove Unnecessary Security Obstacles
8. Secure Against Social Engineering
.

In Conclusion,
Consider and respect users when designing, implementing and operating any security solution or programs. Remember the WEAKEST LINK!

#UXSecurity  #enterprise security #phising #cybersecurity, #cloudsecurity, ,#informationsecurity, #cybersecurity, #infosec,
#InformationSecurity, #CISO

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about antidotes to ransomware
Agenda
1. What is Ransomware
2. Antidotes to ransomware such as
   A. Enterprise Protection
   B. Minimize the Impact 
   C.SEGMENTATION & ISOLATION 
   D. Understand how Ransomware works (Breaking the Cyber Kill Chain)
   E. RESPONSE

Remember to SUBSCRIBE, SHARE , LIKE and COMMENT

#Ransomware #enterprise security #phising #cybersecurity, #cloudsecurity, ,#informationsecurity, #cybersecurity, #infosec,
#InformationSecurity, #CISO

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about Zero trust architecture design principles and how we view each principles by the United Kingdom's  National Cyber Security Center.

To know more you cango to  https://www.ncsc.gov.uk/collection/zero-trust-architecture

Remember to SUBSCRIBE, SHARE , LIKE and COMMENT

#Zerotrust #Zerotrustprinciples #architectcture #cybersecurity, #cloudsecurity, ,#informationsecurity, #cybersecurity, #infosec, #NCSC, 
#InformationSecurity, #CISO

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about a national cyber security policy and strategy with a pioneer and advocate for cyber security in Nigeria. He is  no other than Olusegun Olugbile , the DG/CEO Araba Technologies Ltd (an emerging technology solution provider),
Executive Chairman of Data Analytics Privacy Technology Ltd - Owner of NDPR365-SaaS Brand, President, Global Network for Cybersolution Ltd/gte - Driver of Africa Digital Alliance (afrida),
Member, Board of Directors, International Centre for Emerging Technology-FUT Minna
Member, National Cybercrime Advisory Council, Presidency (2015 till date)
Member, National Committee on the Review and Development Cybersecurity Policy Strategy. 2014 & 2020
Former Member United Nation Internet Governance Multistakeholders Advisory Group to UN Secretary General.
Member/Fellow on Digital Economy, Abuja Chambers of Commerce & Industry, and International Chambers of Commerce  Nigeria Chapter.

Remember to SUBSCRIBE, SHARE , LIKE and COMMENT

#Nigeria  #Cyberpolicy #cybersecurity, #cloudsecurity, ,#informationsecurity, #NIST, #cis, #iso, #CISO, #cis, #isms, #securityawareness, ##ITsecurity
#cybersecurity, #infosec,
#dataprotection, #Cybercrime,
#cyberattacks, #digitalsecurity,
#riskmanagement, #databreach,
#passwords, #networksecurity,
#netsec, #cybersecurityawareness,
#InformationSecurity, #dataprivacy, #GDPR,
#infosecurity ,#hacking,
#CISO ,computing…

SHOW LESS

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about OWASP TOP 10 Draft review 2021 focusing on the following

1. What is New in OWASP TOP 10 2021
2. What's behind the decision to review it
3. How it affects developers and organizations
4. Mitigations to con spider

Listen, Like, Subscribe and Share

#OWASPTOP10 #cybersecurity, #cloudsecurity, #informationsecurity, #CISO,

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about Cloud Access Security Broker (CASB)

 Gartner defines the cloud access security broker market as products and services that address security gaps in an organization’s use of cloud services. Especially designed to protect and control access to data that’s stored in someone else’s systems, CASBs deliver differentiated, cloud-specific capabilities that generally aren’t available as features in traditional security products.

We will focus on the follwoing 
1. The Core functionalities of CASB
2. CASB Vendors
3. Integration to CASB
4. Advanced CASB features
5. What to avoid when selecting CASB

Remember to SUBSCRIBE, SHARE , LIKE and COMMENT

#CASB #CloudAccessSecurityBroker #Informationsecurity #Cloudsecurity

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we are honored to have our guest speaker, Foster Kplomdo, discuss NIST Cyber Security Framework.

As an experienced technology and security professional, He has worked in leadership roles across multiple technology disciplines in several multinational companies, as an instructor with some of the reputable academic institutions in the country and as a consultant to several businesses. 

With over 17 years of progressive experience in the technology industry, a knack for research and drive for process optimization and knowledge sharing, Foster knows how to concretely define problems, prescribe solutions and execute them towards  helping  businesses and professionals maximize their potentials.

Hope you enjoy the session like we did. 

Remember to SUBSCRIBE, LIKE and SHARE

#NIST #NISTCSF #informationsecurity #cloudsecurity ##cybersecurity #infosecurity #africacybersecurity # Riskmanagment  #securityassessment #Ghana #infosecAfrica

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  August security news  and HOT TOPIC -How to prepare for Security Audit in your organisation
 Top Cybersecurity News in August are 
 1. An Inside Look at Soliciting Employees to Deploy DemonWare
 https://abnormalsecurity.com/blog/nigerian-ransomware-soliciting-employees-demonware/

2. Google and Microsoft said they are pledging to invest a total of $30 billion in cybersecurity advancements over the next 5 years.
 https://thehackernews.com/2021/08/microsoft-google-to-invest-30-billion.html

3. Telecom giant T-Mobile recently suffered yet another data breach.
 https://thehackernews.com/2020/03/hackers-compromise-t-mobile-employees.html

There are mainly 11 Key steps when preparing for a security audit 
 Step 1: Scope and Gap Analysis - Audit Standard Selection (ISO, PCIDSS, GDPR, IT Audit or Statutory Audit) and interfaces
 Step 2:Create an IT Asset Inventory
 Step 3: Risk Assessment
 Framework for Risk Assessment - NIST 800:53 or Specific policy requirement. Template and Procedure 
 Step 4: Close Gaps 
 Step 5: Review findings from Previous Audits
 Step 6: Review and Create IT Policies and Procedures - (Operating Standard) as well as
 create a List of Controls and Safeguards
 Step 7: Perform a Self-assessment
 Step 8: Schedule Tests or Deliverables
 Step 9: Ask Your Auditor for a Document/Procedure Checklist
 Step 10: Be Prepared for Anything

NOTE: ENSURE TO TALK ABOUT THE RESULTS  AND AGREE ON THE REPORT BEFORE BEING PRESENTED IN THE CLOSING MEETING TO MANAGEMENT

SUBSCRIBE, LISTEN and SHARE

#Securityaudit #audit #CyberSecurity,#informationsecurity #cloudsecurity ##cybersecurity #infosecurity #africacybersecurity #NIST # Riskmanagment #policies #procedures #certification #securityassessment #ISO27001 #ISMS

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  the BEST Cyber Security Framework for your organisation. We will talk about

1. What is a framework
2. Types of Frameworks
3. Cybersecurity Frameworks
      -NIST Cybersecurity Framework.
      -ISO 27001 and ISO 27002
      -Clod Control Matrix (CCM)
      -Payment Card Industry Data Security Standard (PCI DSS)
      -Center of Internet Security

SUBSCRIBE, LISTEN and SHARE

#CyberSecurity,#informationsecurity #cloudsecurity #ISO27001#NIST #Cloudcontrolmatrix #CCM #PCIDSS #CIS #Centerofinetrnetsecurity#cybersecurity #infosecurity #africacybersecurity #owaspsecurity,#healthcaresystem,#privacyprotection,#databreach

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  some security news ,  events and HOT TOPIC

1. July 2021 Patch Tuesday: Greatest Number of Updates for Ongoing Zero-Day Vulnerabilities Year-to-Date 
https://www.crowdstrike.com/blog/patch-tuesday-analysis-july-2021/ 

2. LinkedIn breach reportedly exposes data of 92% of users, including inferred salaries
https://9to5mac.com/2021/06/29/linkedin-breach/

3. China Sets Up New Worrying Vulnerability Disclosure Rules
https://www.bitdefender.com/blog/hotforsecurity/china-sets-up-new-worrying-vulnerability-disclosure-rules 

4. Kaseya obtains decryption key for vicitims of massive Ransomware Attack
https://www.cyberscoop.com/kaseya-ransomware-russia-revil/

5. HOT TOPIC - API SECURITY
https://owasp.org/www-project-api-security/

https://github.com/OWASP/API-Security/raw/master/2019/en/dist/owasp-api-security-top-10.pdf

SUBSCRIBE,LISTEN and SHARE