Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

ISMS

The BSI C5 Criteria

The BSI C5 includes specific controls and requirements that address nearly all relevant aspects of a cloud computing service.
Jan Kahmen
Jan Kahmen
6 min read
Social Engineering

Awareness with a USB Rubber Ducky

Media dropping is a social engineering method that simulates a randomly lost USB stick.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

What Is a Transfer Impact Assessment?

Transfer Impact Assessment (TIA) is a systematic approach to assess the impact and risks of transferring activities, resources or responsibilities to an organization.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

What Is SOC 3?

This is a simpler report type than SOC 2, focusing on security, availability, processing integrity, confidentiality, and privacy.
Jan Kahmen
Jan Kahmen
6 min read
Incident Response

What Is the Difference Between SOC 1 and SOC 2?

SOC 1 and SOC 2 are both standards of auditing for systems and organizations. SOC 1 describes the audit performed to assess the performance of internal controls that affect an organization's financial reporting.
Jan Kahmen
Jan Kahmen
5 min read
Cloud Security

Best Practices: Cyber Security Azure Kubernetes (AKS) Security

AKS provides access control and authentication for users and applications. It also provides role-based access control (RBAC) to help you manage access to resources within your cluster.
Jan Kahmen
Jan Kahmen
5 min read