Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Social Engineering

Awareness with a USB Rubber Ducky

Media dropping is a social engineering method that simulates a randomly lost USB stick.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

What Is a Transfer Impact Assessment?

Transfer Impact Assessment (TIA) is a systematic approach to assess the impact and risks of transferring activities, resources or responsibilities to an organization.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

What Is SOC 3?

This is a simpler report type than SOC 2, focusing on security, availability, processing integrity, confidentiality, and privacy.
Jan Kahmen
Jan Kahmen
6 min read
Incident Response

What Is the Difference Between SOC 1 and SOC 2?

SOC 1 and SOC 2 are both standards of auditing for systems and organizations. SOC 1 describes the audit performed to assess the performance of internal controls that affect an organization's financial reporting.
Jan Kahmen
Jan Kahmen
5 min read
Cloud Security

Best Practices: Cyber Security Azure Kubernetes (AKS) Security

AKS provides access control and authentication for users and applications. It also provides role-based access control (RBAC) to help you manage access to resources within your cluster.
Jan Kahmen
Jan Kahmen
5 min read
Infrastructure Penetration Test

What Is Network Traffic Analysis (NTA)?

Network Traffic Analysis (NTA) is a process that uses tools to analyze the data packets traveling across a network in order to identify potential security threats and anomalous behavior.
Jan Kahmen
Jan Kahmen
6 min read