Data breaches are a dime a dozen these days. But when hackers steal databases full of customer info, login names, and passwords, the passwords aren’t …
So, you’ve been tasked with providing evidence for an audit. You may be wondering what your auditor is even looking for. Let’s take a look behind the …
Check out our webinar from Christian White and Christian Hyatt in which they cover the basics of SOC 2 reporting, what to expect during a SOC 2 audit,…
Everything you need to know to pass with flying colors. As risk3sixty continues to grow, more team members will be taking the Certified Information Sy…
This past week I sat for the (ISC)2 CISSP exam and passed on my first attempt! With the entire preparation and test taking experience still fresh on m…
The first thing I try to explain to new auditors (or clients going through an audit for the first time) is what techniques IT auditors use to audit. M…
This past December I took the ISACA CISA exam and I’m pleased to announce that last week, I got my confirmation letter stating that I passed in the to…
What is a Malicious File Execution Vulnerability? Malicious file execution vulnerabilities (also called File Inclusion Vulnerabilities) is a vulnerabi…
Stateful refers to the “state” of the connection between the outside internet and the internal network. A stateful firewall keeps track of the connect…