JWRTee IT&S

16/03/2019

The latest Citrix Data Breach has been identified as a part of "a sophisticated cyber espionage campaign supported by nation-state due to strong targeting on government, military-industrial complex, energy companies, financial institutions and large enterprises involved in critical areas of the economy," Resecurity said in a blog post.
This also give rise to possible phishing attack in the wake of the breach by spoofing as individual organizations' IT Security team to ask users to change their password or similar act. Be extra vigilant especially to remind all colleagues and employees, always check with IT/Security when receives email that ask one to respond by clicking or opening an attachment.

Enterprise software company Citrix has suffered a massive data breach wherein hackers stole 6 TB of sensitive data from its internal network.

16/03/2019

It is time to review your Web Site security. Run a Web Apps Assessment to find out any security gaps to take remedial step, before someone else do.

26/02/2019

PDPA 2012 - What is Reasonable Security Measure?

Safeguarding sensitive data, from Access Control to Applications Management, putting in place Policies and Processes, deploying controls and educate on Cyber Security and Privacy. Make a difference by:

1: Users and Assets Controls like a robust IAM and MFA.
2: Manage Network and System Security through Vulnerability Assessment and Management tool
3: Manage Application Security and Management through Application Assessment Solutions
4: Deploying Firewall, Anti-Virus, Email Security and others where applicable
5: Detect breach, catch malicious activities and attackers within your network with a reputable Breach Detection Solution
6: Setup Security Policies and Procedures to help enforce, manage, monitor and maintain your IT Security, and prepare your readiness to response and mitigate security breaches
7: Inculcate Security culture through Security Awareness Training

Visit https://www.jwrtee.com/it/ for more information.

Understanding having a good Security Framework and Policies, with necessary Controls Implemented is not nearly enough, but how to put into practice and its enforcement over the implementation, and its ability to adapt to the ever evolving threats is key to creating a culture that will endure,