Newsletter

Newsletter 2018-1

January - February 2018
News Bulletin

What's New

Vicente Aguilera will be a speaker on January 25 at CIBERSEG 2018, held at the University of Alcalá de Henares (Madrid).

With the conference "Uses and Abuses of Open-Source Intelligence," Vicente, our Director of the Audit Department, will participate in the security and cyberdefense conference (CIBERSEG 2018).

Training Bulletin 2018

The first training bulletin for this new year 2018 has been sent. The current offer has been continued, defining new dates for each of the training courses.

Internet Security Auditors, together with BSI and in collaboration with ACDECC&BPO, held a conference on ISO 27001 and 22301 in Bogotá

On November 30, ISEC and BSI, in collaboration with the Colombian Association of Contact Center and BPO Companies, held a series of conferences on topics focused on ISO 27001 and 22301 standards, information security, and business continuity in CC&BPO environments. Javier R. Amaya and David A. González, experts in the implementation and auditing processes of these management systems, participated as speakers in the conferences.

Highlights

How does the new version of the OWASP Top Ten affect PCI DSS v3.2 compliance?

Due to the publication of the new version (2017) of the OWASP Top Ten web application security risks, compliance with requirement 6 of the PCI DSS standard must be reviewed to cover these new risks. This article explains its impact and the actions that must be followed.

Mandatory documentation in ISO 22301

All Management Systems that want to be certified under an ISO standard must comply with a series of requirements, many of them focused on the documentation of the System. In the documentary scope, and focusing on ISO 22301 for the definition of a Business Continuity Management System (BCMS), the International Organization for Standardization does not impose limits on the number of documents that an Organization that wants to be certified presents to the auditor, although it does require minimum documentation that must be considered.

Business Continuity for SMEs

Threats and cybercrime do not discriminate between large companies and SMEs, but are SMEs prepared to face these risks?. Historically, when thinking about business continuity, the tendency was to think about natural disruptions (such as fires, floods, etc.), however, in today's world, where the use of providers and computer systems is vital for the daily operations of organizations, the range of threats has increased.

No cON Name 2017 Chronicle

This year we had the opportunity to attend the latest edition of the No cON Name congress, the longest-running public computer security congress in Spain (born in 1999, in Palma de Mallorca), whose latest edition was held in 2015. During the opening speech, the organization pointed out that the 2016 edition was not held due to funding difficulties and that new formats are currently being sought that can fit the congress, with the goal of avoiding the repetition of speakers and talks at the various “Cons” held in Spain. Below, we leave you a brief summary of the presentations that were held during its first day.

(ISC)2 introduces Computerized Adaptive Testing to the CISSP exam

From December 18, 2017, the International Information Systems Security Certification Consortium, or (ISC)2, will implement Computerized Adaptive Testing (Computerized Adaptive Testing or CAT) for the CISSP exam, initially in exams offered in English and gradually introducing the same technique to other languages in which the exam can be taken throughout the first quarter of 2018.

Cybersecurity in Smart Cars: Past, Present and Future

There is a lot of talk about the term cybersecurity, and, in fact, it is becoming increasingly popular. Consumers, as well as manufacturers, are increasingly aware that security is a very important element to consider whenever purchasing a technology product connected to the Internet.

Most Read

Intel processors from the last decade have a security flaw.

It is no longer just about All Intel processors manufactured in the last decade (installed in billions of devices) having a serious security flaw that would allow cybercriminals to access privileged information, such as passwords.

“You’ve won the lottery”: the industry behind this scam.

During the celebration of the 'emails' that announce you’ve won the lottery and that you have an inheritance to collect are part of a fraudulent industry that moves billions every year.

Will it give me access to your data?

Would you be willing to allow a company access to your bank account so it can offer you new payment services? In a few weeks you may have to answer this question. Next January, a European regulation will come into force that will require banks to share their customers' data with third parties whenever they authorize it.

Your neighbor could spy on you if you don't beware of Krack, the WiFi vulnerability

Connecting to a WiFi network can be dangerous these days, given that the information you open, download, or share can be seen by third parties. This risk is due to Krack, a security vulnerability that affects WiFi networks and can make you a victim.

Events

25/01 of 2018: CIBERSEG18 – V Security and Cyberdefense Conference. Madrid (Spain).

25-27/01 of 2018: sh3llcon 2018. Santander (Spain).

7-8/02 of 2018: CONAND. Andorra la Vella (Andorra)

Training


29
JAN
 
   ISO 27001 L.A.
Madrid

19
FEB
 
   ISO 22301 Lead Impl.
Bogotá
 

12
FEB
 
   ISO 27001 L.A.
Barcelona

19
FEB
 
   ISO 27001 Impl.
Bogotá
 

19
FEB
 
   ISO 22301 L.A.
Barcelona

26
FEB
 
   CISSP
LAST FEW SPOTS
Madrid
 
 
Internet Security Auditors
C. Santander, 101. Edificio A, 2º. E-08030 Barcelona (Spain) | Tel.: +34 93 305 13 18 / Fax: +34 93 278 22 48
C. Arequipa, 1. E-28043 Madrid (Spain) | Tel.: +34 91 763 40 47 / Fax: +34 91 382 03 96
Calle 90 # 12-28. 110221 Bogotá (Colombia) | Tel.: +57 (1) 638 68 88 / Fax: +57 (1) 638 68 88

comercial@isecauditors.com | pre.isecauditors.local

In compliance with Organic Law 15/1999 (LOPD), we inform you that your personal data has been included in the files of Internet Security Auditors, whose exclusive purpose is customer management and commercial communication actions. You have the possibility of exercising the rights of access, rectification, cancellation and opposition provided for by law by sending a letter addressed to Internet Security Auditors, c. Santander, 101. Edif. A. 2º, E-08030 Barcelona (Spain), or via email to the following email address: legal@isecauditors.com. If you want to unsubscribe from the Internet Security Auditors Newsletter, send an email to marketing@isecauditors.com.

According to the Spanish Organic Law 15/1999 on personal data protection (LOPD), we inform you that your personal data will be added to files owned by Internet Security Auditors S.L. with the only purposes of customer management and advertising communication. In accordance with the law and regulations you have the possibility at all times of exercising the rights of access, rectification, cancellation and taking exception by sending a letter addressed to Internet Security Auditors, c. Santander, 101. Edif. A. 2º, E-08030 Barcelona (Spain), or through the following email: legal@isecauditors.com. If you want to unsubscribe from the Newsletter of Internet Security Auditors, send an email to marketing@isecauditors.com.

← Back to Newsletters