Fred Rohrer's Blog (Page 2)

Cybersecurity Program Basics

Starting to plan out a Cybersecurity program for your company can be a challenging task, but in many ways the steps to take have more benefits than just increased security. Introduction Cybersecurity programs are categorized into people, technology and process. People refer to the employees, contractors, and other individuals who

MITRE ATT&CK

What is the MITRE ATT&CK Framework and how did it come to be? SummaryThe MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) framework is a comprehensive knowledge base of adversarial tactics and techniques based on real-world observations. It is designed to help organizations understand the tactics,

policy

The STRIDE Methodology

The STRIDE methodology aims to help with the question "how can our system be exploited and what security paradigms can we use to secure it?" It extends the commonly used CIA Triad (Confidentiality, Integrity and Availability).

Why Cybersecurity is important for small business

Small business and non-profits often overlook the dangers of cyber-attacks to their organization but small business is just as likely to be hacked as big business, and the fallout of a breach could be more damaging.