(ISC)² Blog

Safe & Secure Online Volunteer Experience

It was a typical work day for me, chaotic and intense, as we all have experienced in the information systems security field, as we go to our offices each day and perform our duties as information security professionals. The job can be very rewarding when you prevent a breach, catch an intruder on your company’s network, or have an incident that you quickly contained and prevented further data loss and exploitation to your company. I truly love what I do, especially the fact that I work in a position where I protect the national security of this wonderful country we... Read more →

Federal Cloud Computing: The Definitive Guide for Cloud Service Providers

Federal Cloud Computing: The Definitive Guide for Cloud Service Providers offers an in-depth look at topics surrounding federal cloud computing within the federal government, including the Federal Cloud Computing Strategy, Cloud Computing Standards, Security and Privacy, and Security Automation. You will learn the basics of the NIST risk management framework (RMF) with a specific focus on cloud computing environments, all aspects of the Federal Risk and Authorization Management Program (FedRAMP) process, and steps for cost-effectively implementing the Assessment and Authorization process, as well as strategies for implementing Continuous Monitoring, enabling the Cloud Service Provider to address the FedRAMP requirement on... Read more →

There’s Testing, Then There’s VirusTotal

From time to time, I find myself having to rail against the misuse of VirusTotal’s service as a sort of surrogate AV product test. Sadly, I feel the need to do it again here, in the light of a current news item. Read more →