Over the years, Microsoft has published a variety of articles relating to 10 Immutable Laws of Security. One of my favorites was from 2000 - Law #9: Security isn't about risk avoidance; it's about risk management. The two bullets from this are as true today as they were almost 20 years ago. There will be [...]
Information Security involves more than hardening your perimeter defenses. The core of your organization is your data – your crown jewels. In order to truly understand the heart of what you are protecting, your data can be “classified.” Peters & Associates can assist you through the process by performing a data classification workshop. During the workshop, [...]
Do you understand the difference? Simply put, vulnerability scanning is passive and penetration testing is active. Both of these assessments/tests have value and both can assist in your overall ability to evaluate your external security exposure. So, why do either (or both)? Well, for starters because the hackers are doing both too. But also, this [...]
