{"id":1191,"date":"2022-11-22T00:03:35","date_gmt":"2022-11-22T00:03:35","guid":{"rendered":"https:\/\/chin4teck.com\/?page_id=1191"},"modified":"2025-01-20T04:09:27","modified_gmt":"2025-01-20T04:09:27","slug":"new-page-trial","status":"publish","type":"page","link":"https:\/\/chin4teck.com\/index.php\/new-page-trial\/","title":{"rendered":"Cybersecurity is the new mindset!"},"content":{"rendered":"\n

Almost everything cyber And information security! Cybersecurity is the main line of defense for the next generations to come!<\/p>\n\n\n\n

Who would be better to define this for us, but the legendary CISA! Since the definitions are so universal, i’m just going to leave the link here.<\/p>\n\n\n\n

https:\/\/www.cisa.gov\/news-events\/news\/what-cybersecurity<\/a><\/p>\n\n\n\n

According to CISA, Cybersecurity is the art of protecting networks, devices, and data from unauthorized access or criminal use and the practice of ensuring confidentiality, integrity, and availability of information. It seems that everything relies on computers and the internet now\u2014communication (e.g., email, smartphones, tablets), entertainment (e.g., interactive video games, social media, apps ), transportation (e.g., navigation systems), shopping (e.g., online shopping, credit cards), medicine (e.g., medical equipment, medical records), and the list goes on. How much of your daily life relies on technology? How much of your personal information is stored either on your own computer, smartphone, tablet or on someone else’s system?<\/p>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
\"Cybersecurity\"<\/figure>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n

There’s so much to learn, and so little time. Let’s start off with the foundations, like how do you protect data or information?<\/p>\n\n\n\n

Security within an organization is a combination of frameworks, security controls, policies, and procedures. All of these components are put together to form a strong security posture. Understanding each section adds a significant increase in ones capability to integrate the knowledge in both a enterprise and a personal environment. Every aspect of Information security, network security, or even cybersecurity’s fall under one of the three major security controls. <\/p>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n

Security Control Categories<\/strong><\/p>\n\n\n\n

Irrespective of the IT infrastructure’s size, you would want to protect it from various types of security threats. To do that, you need to apply different security measures and ensure that the organization\u2019s assets are protected and safeguarded. These measures are known as security controls, which help you protect the infrastructure, be it physical or logical.<\/p>\n\n\n\n

The security controls are implemented to handle risks in different ways. They can be implemented to protect the infrastructure by reducing or eliminating the risks. There is no fixed method of applying security controls in the infrastructure. The number and types of security controls will depend on various factors, including the architecture of the infrastructure, the size of the infrastructure, and the nature of the business.<\/p>\n\n\n\n

It is important to note that no control works in isolation. Multiple control mechanisms need to be layered, which is known as defense-in-depth. Many security administrators make the mistake of adding too many security control mechanisms to protect the infrastructure. However, this adds to the complexity of the infrastructure. Therefore, an administrative policy should be implemented to prevent the over implementation of security measures. This policy needs to be measurable, effective, objective, and enforceable.<\/p>\n\n\n\n

A security control must involve four key entities – people, processes, operations, and technology. The security controls must also be designed to protect the assets and, more specifically, the information for confidentiality, integrity, authenticity, and availability.<\/p>\n\n\n\n

There are three different categories of security controls:<\/p>\n\n\n\n

1. Administrative<\/p>\n\n\n\n

2. Technical<\/p>\n\n\n\n

3. Physical<\/p>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
<\/span>
<\/i><\/div><\/div>

Administrative<\/h2>

Administrative controls are implemented and applied to the individuals within an organization. The idea of administrative controls is to lay down a set of rules that must be adhered to.\n\nSome of the key examples are:\n\u2022\tTraining\n\u2022\tPersonnel recruitment\n\u2022\tChange management\n\u2022\tAccess management\n\u2022\tEmployee screening\n\u2022\tCertification programs\n\u2022\tNon-disclosure agreements (NDA)\n\u2022\tDisaster preparedness and recovery plans\n<\/p><\/div><\/div><\/div><\/div>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
<\/div>
Employee Screening<\/div><\/div>
<\/div>
Certification Programs<\/div><\/div>
<\/div>
Access Management<\/div><\/div>
<\/div>
Change Management<\/div><\/div>
<\/div>
Personnel Recruitment<\/div><\/div>
<\/div>
Employee Training<\/div><\/div><\/div>
<\/div>
Employee Screening<\/div><\/div>
<\/div>
Certification Programs<\/div><\/div>
<\/div>
Access Management<\/div><\/div>
<\/div>
Change Management<\/div><\/div>
<\/div>
Personnel Recruitment<\/div><\/div>
<\/div>
Employee Training<\/div><\/div><\/div><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n
<\/span>
<\/i><\/div><\/div>

Technical<\/h2>

Technical controls are also known as logical controls, which apply to the systems and devices. These controls can be in software or hardware forms that are used to protect the information assets.\nSome of the key examples are:\n\u2022\tEncryption\n\u2022\tSmart cards\n\u2022\tPasswords\n\u2022\tFirewalls\n\u2022\tRouters\n\u2022\tNetwork Authentication\n\u2022\tAccess Control Lists (ACLs)\n\u2022\tIntrusion detection systems\n<\/p><\/div><\/div><\/div><\/div>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
<\/div>
Passwords<\/div><\/div>
<\/div>
Encryption<\/div><\/div>
<\/div>
Firewall<\/div><\/div>
<\/div>
Network Authentication<\/div><\/div>
<\/div>
Smart Cards<\/div><\/div>
<\/div>
Routers and Network Devices<\/div><\/div>
<\/div>
Access Control List<\/div><\/div><\/div>
<\/div>
Passwords<\/div><\/div>
<\/div>
Encryption<\/div><\/div>
<\/div>
Firewall<\/div><\/div>
<\/div>
Network Authentication<\/div><\/div>
<\/div>
Smart Cards<\/div><\/div>
<\/div>
Routers and Network Devices<\/div><\/div>
<\/div>
Access Control List<\/div><\/div><\/div><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n
<\/span>
<\/i><\/div><\/div>

Physical<\/h2>

Physical controls are designed to prevent unauthorized access to the data center’s physical location and the entire infrastructure.\nSome of the key examples are:\n\u2022\tBarricades\n\u2022\tLocked doors\n\u2022\tAlarm systems\n\u2022\tSecurity guards\n\u2022\tSurveillance cameras\n\u2022\tDead-bolted steel doors\n<\/p><\/div><\/div><\/div><\/div>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
<\/div>
Security Guards<\/div><\/div>
<\/div>
Alarm Systems<\/div><\/div>
<\/div>
Locked Doors<\/div><\/div>
<\/div>
Barricades<\/div><\/div>
<\/div>
Dead Bolted doors\/ Vault<\/div><\/div>
<\/div>
Surveillance Cameras<\/div><\/div>
<\/div>
Surveillance and Network Monitoring<\/div><\/div><\/div>
<\/div>
Security Guards<\/div><\/div>
<\/div>
Alarm Systems<\/div><\/div>
<\/div>
Locked Doors<\/div><\/div>
<\/div>
Barricades<\/div><\/div>
<\/div>
Dead Bolted doors\/ Vault<\/div><\/div>
<\/div>
Surveillance Cameras<\/div><\/div>
<\/div>
Surveillance and Network Monitoring<\/div><\/div><\/div><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n

Control Types<\/strong><\/p>\n\n\n\n

Each of the control categories can have various types of security controls, which are primarily:<\/p>\n\n\n\n

Directive<\/strong>: Directs the users to a specific positive and acceptable behavior.<\/p>\n\n\n\n

Preventive<\/strong>: Prevents undesirable events, which can be a risk or a threat, to occur.<\/p>\n\n\n\n

Detective<\/strong>: Identifies a security risk, which can be present in a policy, process, or procedure.<\/p>\n\n\n\n

Deterrent<\/strong>: Poses a warning that displays the consequences of unacceptable behavior.<\/p>\n\n\n\n

Corrective<\/strong>: Defines measures that are designed to react to an incident. These controls are used to either reduce or eliminate a threat.<\/p>\n\n\n\n

Recovery<\/strong>: Used to restore a system after an incident.<\/p>\n\n\n\n

Compensating<\/strong>: Alternative controls that can be used in place of security controls that were difficult to implement. The compensating control works similarly to the original security control.<\/p>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
<\/span>
<\/i><\/div><\/div>

Administrative<\/h2>

\u2022\tDirective: Policies, guidelines\n\n\u2022\tPreventive: Non-Disclosure Agreement (NDA), separation of duties, warning banner\n\n\u2022\tDetective: Investigation, log reviews\n\n\u2022\tDeterrent: Demotion\n\n\u2022\tCorrective: Penalty, administrative leave, termination\n\n\u2022\tRecovery: Business Continuity Planning (BCP), Disaster Recovery Planning (DRP)\n\n\u2022\tCompensating: Supervision, job rotation\n<\/p><\/div><\/div>

<\/span>
<\/i><\/div><\/div>

Technical<\/h2>

\u2022\tDirective: Standards\n\u2022\tPreventive: User authentication, multi-factor authentication, firewalls, Intrusion Prevention System (IPS), encryption\n\u2022\tDetective: Intrusion Detection System (IDS), SNMP\n\u2022\tDeterrent: Violation report\n\u2022\tCorrective: Update of access privileges, change in firewall policies\n\u2022\tRecovery: Backups, rebuilding the system\n\u2022\tCompensating: Keyboard logging\n<\/p><\/div><\/div>

<\/span>
<\/i><\/div><\/div>

Physical<\/h2>

\u2022\tDirective: Security guard\n\u2022\tPreventive: Fences, bollards\n\u2022\tDetective: CCTV, sensors\n\u2022\tDeterrent: A warning sign\n\u2022\tCorrective: Fire extinguishers\n\u2022\tRecovery: Reconstruct, rebuild\n\u2022\tCompensating: Layered defenses\n<\/p><\/div><\/div><\/div><\/div>\n\n\n\n

<\/div><\/div><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n
<\/i><\/span>Regulations, Standards and legislation<\/span><\/a><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n
<\/i><\/span>Security Operations Center<\/span><\/a><\/div>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n
\"SOC\"<\/a><\/figure>\n\n\n\n
<\/div><\/div><\/div>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Almost everything cyber And information security! Cybersecurity is the main line of defense for the next generations to come! Who would be better to define this for us, but the legendary CISA! Since the definitions are so universal, i’m just going to leave the link here. https:\/\/www.cisa.gov\/news-events\/news\/what-cybersecurity According to CISA, Cybersecurity is the art of protecting networks, devices, and data from unauthorized access or criminal use and the practice of ensuring confidentiality, integrity, and availability of information. It seems that everything relies on computers and the internet now\u2014communication (e.g., email, smartphones, tablets), entertainment (e.g., interactive video games, social media, apps<\/p>\n","protected":false},"author":1,"featured_media":1259,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-1191","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/pages\/1191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/comments?post=1191"}],"version-history":[{"count":18,"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/pages\/1191\/revisions"}],"predecessor-version":[{"id":1756,"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/pages\/1191\/revisions\/1756"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/media\/1259"}],"wp:attachment":[{"href":"https:\/\/chin4teck.com\/index.php\/wp-json\/wp\/v2\/media?parent=1191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}