Zoeken
Sluit dit zoekvak.

Categorie: ISACA NL Journal

  • ISACA NL Journal ·

The Nuts and Bolts of achieving security compliance

By Erwin Laros, Karthik Rajagopalan & Yuri Bobbert - The information security requirements from regulatory bodies in the financial industry lack information on how these requirements and guidelines can be implemented in an Agile/DevOps environment and the (cloud) infrastructure supporting it. Upcoming regulatory requirements in the financial industry bring extra complexity. In this article the authors examine the DevOps and Agile dynamics, the regulatory requirements and what is lacking in the current approaches. They finish with some Nuts and Bolts of the current way of working in supervision and achieving real security and compliance for the financial industry.
  • ISACA NL Journal ·

Armed against ransomware

By Martijn Timmerman & Robbert Schravendijk - Nowadays, the functioning of many organizations is based on information and communication technology (Bada & Nurse, 2019; Camastra et al., 2011). Until recently, a lock on the door was enough to secure information such as business administration, customer base, and finances. However, SMEs are more likely to fall prey to cyber criminals. One of the biggest threats to business and government is ransomware, also known as ransomware (Yuryna Connolly et al., 2020). This article will describe the do's and don'ts in the field of cybersecurity for SMEs based on empirical research, with a deep dive into preventing and limiting the impact of ransomware.
  • ISACA NL Journal ·

Impact of COVID-19 on Cyber Security strategies in the utilities sector

By Laurens Dewit, Bob Leysen & Yuri Bobbert - The utility sector increasingly relies on interconnected industrial control systems and networks to streamline operations. The crucial role these utilities play in our daily lives, ranging from electricity to water and gas supply, underlines the critical significance of robust cybersecurity measures within the sector. With the increase of smart devices and intelligent infrastructure (e.g. Smart Grid), the vulnerability of these systems to cyber threats has intensified, posing potential risks such as data breaches, service disruptions, and even possible sabotage.
  • ISACA NL Journal ·

How to gain more “Bang for the Buck”: Quantifying risk with random simulations

By Vincent van Dijk and Yuri Bobbert - In an era where data breaches are becoming more frequent and expensive, understanding and preparing for the financial implications of such incidents is crucial. This article aims to provide a detailed approach to calculating the costs associated with data breaches, enabling organizations to make informed decisions about their defense strategies and budget allocations.
  • ISACA NL Journal ·

Succesfactoren voor DevSecOps in agile software development

Auteurs: Mirna Bognar, Nico Kaag, Susan Schaeffer - Zeggen dat DevSecOps zijn passie is gaat Nico Kaag te ver. Maar hij zou wel graag zien dat security een vast onderdeel wordt bij (agile) softwareontwikkeling. In de praktijk ziet Nico namelijk nog vaak dat softwareontwikkelaars uitstekend software kunnen ontwikkelen, maar onvoldoende aandacht hebben voor security.
  • ISACA NL Journal ·

The start of the Digital Security Transformation

Editorial by Barry Derksen - With the recent developments in IT such as generative AI, new risks arrive in our landscape. At the same time IT risk and security often feel themselves as chasing the business owners on the importance to mitigate the risks, protect the organization and sometimes even as a police officer stating an employee went through the red light.
  • ISACA NL Journal ·

Where to stash your (Data)loot?

Author: Paul Oor - Dealing with the Challenges of Data Sovereignty involves many decisions on the relevance and importance of available options while accepting uncertainty in a complex, dynamic world. The importance of Data for any organization is increasing and undisputed. The IT-industry has become mature on the classical themes ensuring continuous operations of Data Center facilities like those addressed by the Uptime Institute.
  • ISACA NL Journal ·

The Compensation Trap

Authors: Mark Butterhoff & Yuri Bobbert - Security departments are growing out of their seams. While demand for cyber security professionals is growing, finding and retaining good staff takes hard work. This article will endeavor to address several generic pitfalls and industry-specific flaws that require attention.
  • ISACA NL Journal ·

Governance in agile teams

Authors: Dave van Stein & Yianna Paris - When you work together, it's essential to establish clear expectations towards each other. This is easy in small groups where there is an innate understanding of each other’s abilities and expectations are clear. However, this mechanism starts to break when you try to scale up to bigger groups.

We gebruiken functionele en analytische cookies om ervoor te zorgen dat de website optimaal presteert. Als u doorgaat met het gebruik van deze site, gaan we ervan uit dat u hiermee akkoord gaat. Meer informatie vindt u in onze Privacyverklaring.