This post introduces to System and Organization Controls (SOC) reporting framework, in the context of compliance with US American law Sarbanes-Oxley Act (SOX). Regulation Context The Sarbanes-Oxley Act (SOX or Sarbox) is a United States of America federal law. It…
This post summarizes some certifications for organizations (and not for individuals or professionals) related somehow to information security or cybersecurity. List of Information Security Certifications for Organizations Information Security Certifications for Organizations featured on this post: ISO/IEC 27001 ISO/IEC 27001…
NoSQL databases refer to any database types that are not only relational. “NoSQL” stands for “not only SQL”. Relational database is the most popular database type nowadays. Structure Query Language (SQL) is a language to manage data in a relational…
Types of network segments According to its privacy, there are different types of network segments: The internet is publicly available for any user. An intranet hosts information privately only for users within an organization. The services are placed on internal…