email-svg
Get in touch
info@canadiancyber.ca

Blog

OUR BLOG

Our Latest News & Blogs

2022
Jun

What Static Source Code Testing (SAST) open source Tools can be used for the ISO Control

For ISO 27001 Control A.14.2.1 Secure Development Policy, open-source SAST tools like Bandit (Python), RIPS (PHP), and Brakeman (Ruby on Rails) help identify vulnerabilities early in the SDLC. These tools allow thorough, cost-effective static code analysis, supporting secure development practices.
2022
Jun

Center for Internet Security (CIS) Topics in Community

CIS is a nonprofit that creates cybersecurity best practices, including the CIS Controls and Benchmarks, to protect systems from cyber threats. The CIS Controls focus on 18 critical security practices, organized by risk levels, to help organizations defend against common threats. CIS also contributes to industry events like RSA Conference and AWS Summit, promoting cybersecurity across sectors.
2022
Jun

How can Azure Sentinel be used for the implementation of ISO Controls

Azure Sentinel simplifies incident logging, monitoring, and management by using AI and machine learning. It connects to resources, sorts logs, alerts on incidents, and automates responses, ensuring effective security incident management and compliance with ISO 27001 controls.
2022
Jun

Oracle Critical Patch Update

Oracle’s critical patch update includes 329 security patches affecting products like WebLogic servers, databases, and middleware. Notable patches address vulnerabilities in components like RDBMS and WebLogic servers, with CVSS scores of 8.8 for databases and 9.8 for WebLogic servers.
2022
Jun

What Software and Frameworks can be used for Controls

Control A 18.2.1 focuses on the independent review of information security measures. Frameworks like CIS, PCI DSS, NIST SP 800-53, and ISO 27001 help implement this control. CIS, for example, offers prioritized actions to address common security threats and gaps, enhancing network defense.
2022
Jun

Amendments in CIS V8.0

CIS Controls v8 has been updated to adapt to the evolving cybersecurity landscape, focusing on cloud computing, mobility, and hybrid environments. The new version simplifies language, reduces controls from 20 to 18, and introduces clear, task-based safeguards. IG1 focuses on basic cyber hygiene, providing essential measures for protection against common cyber threats.