Information security has entered everyday life. Many are now familiar with techniques such as two-factor authentication, encryption and software updates thanks to the devices and social media platforms they use. When it comes to the innards - that is, secure design - many questions remain. What goes on in modern processors these days is difficult [...]
Due to the great demand of our customers and interested parties on the topic of GDPR and Directory of Procedures, SEC4YOU offered a GDPR workshop in November 2017, which specifically highlights the implementation of GDPR measures and offers affected companies the opportunity to start directly at the workshop with the measures or to support [...]
Cyberattacks proceed just as they did in the analog world over 100 years ago. They are based on communication and knowledge of confidential information. While applications, networks and other technical details are always the subject of intense discussion in the Internet age, people forget about the parts of information security that have little or no [...]
The digital infrastructure - the IT network - is the basis for daily work in companies and entertainment at home. As long as everything works, nothing is usually questioned. But when problems occur, it is long too late. Despite several decades of development in system administration and information security, security tests still find weak points [...]
We are pleased to announce the new "Guide to the use of endpoint encryption with Microsoft BitLocker in terms of the GDPR". The SEC4YOU guide looks at the requirements of the European General Data Protection Regulation (GDPR) and provides concrete recommendations for client deployment. From the content Evaluation of protection goals for BitLocker (BL) - [...]
The local Austrian chapters of both ISACA and (ISC)2 invite you to a full-day event in the Bassano Hall of the Kunsthistorisches Museum on October 12, 2017 under the topic "Cyber Security Shows Teeth - Trends | Regulations | Requirements | Developments 2017+". In line with the theme, the planned presentations will focus on different [...]
AIR will host a seminar titled "IT Security / Information Security" from November 13-14, 2017 in Vienna focused from an audit perspective. Seminar topic: IT security is very often understood as technical measures that are intended to selectively address specific vulnerabilities. From the auditing point of view, these measures are part of a superordinate internal [...]
Hard to believe, but there are other aspects of information security than NSA espionage, Russian/Chinese hacker groups and Turkish cybercrime activists. Everyone should still remember the basic pillars of IT security (currently in German "Informationssicherheit"), which focus on the protection goals of confidentiality, availability and integrity. Today, unfortunately, driven by the media, we only ever [...]
I am often asked about social engineering during penetration tests. This is an attack method in which people are unknowingly enticed to disclose information or to support the attacker in his plan. In the preparation phase, the company's website and possibly existing profiles on various social platforms (e.g. XING, LinkedIn or Facebook) are queried to [...]
Europe lags significantly behind in cybercrime detection: According to FireEye's latest M-Trends Report EMEA 2016, it takes companies in Europe an average of 469 days to notice an intrusion by hackers. That's more than three times longer than the global average of 146 days. A hacker breaking into a network is quite comparable to a [...]