Topic: Information Security Archives

NCA ECC implementation in 6 steps: scope, gap assessment, governance, remediation, internal review and assessment - plus the…

Threat intelligence under ISO 27001 control 5.7: the 3 levels, the 5 artefacts that make it auditable, and…

A plan of action and milestones in 9 fields, where the POA&M is still required in 2026, where…

A shared responsibility matrix decides who patches, configures and restores. What goes in it across IaaS, PaaS and…

The Cloud Controls Matrix explained: 17 domains, how the CAIQ turns it into a STAR submission, what CCM…

The 3 HITRUST assessments compared: 43 controls at e1, 182 at i1, a tailored set at r2 -…

TX-RAMP explained: who must comply, the 2 certification levels, the 18-month provisional route, and which FedRAMP and GovRAMP…

SAMA CSF vs NCA ECC: who each binds, why one scores maturity 0-5 and the other tests compliance,…

All 20 NIST 800-53 control families with their two-letter IDs, base controls versus enhancements, and the 3 families…

A cybersecurity risk register in 10 elements, from NIST IR 8286 Revision 1 - what each field is…

The NIST RMF in 7 steps, from Prepare to Monitor, with the publication behind each - and how…

CIS Benchmarks are configuration guides; CIS Controls are a prioritized program. What each covers, the 3 profile levels,…

Tag: Topic: Information Security