Introduction to the CIS Critical Security Controls (AmherstSec Meetup December 2019)

This post serves as a list of the resources discussed at the AmherstSec Meetup on Wednesday December 11, 2019. Slide deck If you'd rather skip to the resources section, here are the links referenced throughout the discussion: CIS Homepage: https://www.cisecurity.org/ Overview of all CIS resourcesCIS Benchmarks: https://www.cisecurity.org/cis-benchmarks/ Device security checklists / guidance documentsCIS Workbench: https://workbench.cisecurity.org/ Access to custom … Continue reading Introduction to the CIS Critical Security Controls (AmherstSec Meetup December 2019)

The Importance Of Employee Awareness Training

I read an interesting article on Dark Reading The Human Firewall: Why People are Critical To Email Security and thought it struck a common theme I see with many clients. There is constant stress on the “NextGen” controls that can be put in place to serve as an Organization’s silver bullet, yet employee awareness training is often … Continue reading The Importance Of Employee Awareness Training