Advanced Search
Search Results
812 total results found
The NIST Cybersecurity Framework
Having a plan is just one part of securing assets. Once the plan is in action, the other part is making sure everyone's following along. In security, we call this compliance. Compliance is the process of adhering to internal stand...
Wrap-up; terms and definitions from course 5, week 1
Well done! You made it to the end of this section! Being a security practitioner takes commitment and a desire to learn. A big part of the job involves keeping current with best practices and emerging trends. Thinking back on my own journey into th...
The data lifecycle
Organizations of all sizes handle a large amount of data that must be kept private. You learned that data can be vulnerable whether it is at rest, in use, or in transit. Regardless of the state it is in, information should be kept private by limiting access an...
Things You Can Do to Make Security Worse in Your Network - Ignite Style by Jack Rhysider
i used chat gpt voxscript to get this coz its great, but its 7+ years old and he stutters allot and didn't have allot of skill in making videos yet Introduction Things you can do to make security worse in your network. Why would you want to do this? Well, ...
Welcome to week 2
I was fascinated by a world-wide malware event that happened in 2017. I started watching videos and preparing to take certification tests, just like you. I felt overwhelmed at first, but my curiosity and passion has driven me to continue learning in ...
Security controls
These days, information is in so many places at once. As a result, organizations are under a lot of pressure to implement effective security controls that protects everyone's information from being stolen or exposed. Security controls are safeguards ...
Principle of least privilege
Security controls are essential to keeping sensitive data private and safe. One of the most common controls is the principle of least privilege, also referred to as PoLP or least privilege. The principle of least privilege is a security concept in which a user...
最小権限の原則
translated with "MixerBox translate" using chatgpt4 as i suck at reading japanese still im not sure if its correct or not its just meant to help me speak and read it セキュリティコントロールは、機密データをプライベートで安全に保つために不可欠です。最も一般的なコントロールの一つは、最小権限の原則とも呼ばれるPoLPまたは最小権限です。最小権限の原則は...
Information privacy: Regulations and compliance
Security and privacy have a close relationship. As you may recall, people have the right to control how their personal data is collected and used. Organizations also have a responsibility to protect the information they are collecting from being compromised or...
Heather: The importance of protecting PII
Hello, my name is Heather and I'm the Vice President of Security Engineering at Google. PII is everywhere. It's a fundamental part of how we are all working online all the time. If you are using online resources, you are probably putting yo...
obsidian tutorial
https://www.youtube.com/watch?v=DbsAQSIKQXk&ab_channel=NoBoilerplate
Fundamentals of cryptography
The internet is an open, public system with a lot of data flowing through it. Even though we all send and store information online, there's some information that we choose to keep private. In security, this type of data is known as personally identif...
Public key infrastructure PKI
Computers use a lot of encryption algorithms to send and store information online. They're all helpful when it comes to hiding private information, but only as long as their keys are protected. Can you imagine having to keep track of the encryption k...
Symmetric and asymmetric encryption
Previously, you learned these terms: Encryption: the process of converting data from a readable format to an encoded format Public key infrastructure (PKI): an encryption framework that secures the exchange of online information Cipher: an alg...
Symmetric and asymmetric encryption
Previously, you learned these terms: Encryption: the process of converting data from a readable format to an encoded format Public key infrastructure (PKI): an encryption framework that secures the exchange of online information Ciph...
Non-repudiation and hashing
We've spent some time together exploring a couple forms of encryption. The two types we've discussed produce keys that are shared when communicating information. Encryption keys are vulnerable to being lost or stolen, which can lead to sensitive info...
The evolution of hash functions
Hash functions are important controls that are part of every company's security strategy. Hashing is widely used for authentication and non-repudiation, the concept that the authenticity of information can’t be denied. Previously, you learned that hash functi...
Access controls and authentication systems
Protecting data is a fundamental feature of security controls. When it comes to keeping information safe and secure, hashing and encryption are powerful, yet limited tools. Managing who or what has access to information is also key to safeguarding in...
The rise of SSO and MFA
Most companies help keep their data safely locked up behind authentication systems. Usernames and passwords are the keys that unlock information for most organizations. But are those credentials enough? Information security often focuses on managing a user's a...
The mechanisms of authorization
Access is as much about authorization as it is about authentication. One of the most important functions of access controls is how they assign responsibility for certain systems and processes. Next up in our exploration of access control systems are ...