CubedCorps helps small and medium-sized businesses comply with clients, insurance companies, and relevant frameworks to mitigate cyber security risks by providing cyber-security consulting services.
What Does NIST/CMMC Compliance Mean? In our previous article we looked at what NIST means in the context of cyber security. In this article we’ll take a closer look at what it means to be NIST compliant. NIST compliance is mandatory for all U.S. federal agencies as of 2017. As a result, if your company […]
I am documenting how to update the Greenbone Security Scanner feed in OpenVAS running on Ubuntu 18.04. OpenVAS is a great tool for scanning your system for known vulnerabilities. How to manually update the Security Scanner Feed sudo systemctl stop openvas-scanner sudo systemctl stop openvas-manager sudo greenbone-nvt-sync sudo greenbone-certdata-sync sudo greenbone-scapdata-sync sudo systemctl start openvas-scanner […]
I have been in the Information security sector informally for many years, and in the past 5 years, much more formally. I have used mostly NIST and ISO 27001 frameworks for clients although I have used others like PCI and Cobit. I like the framework that ISO 27001 and supporting ISO documentation (ISO 27002-5), especially […]
Have you ever been sitting, maybe waiting for an appointment at a company and watched people interacting with each other? Have you looked at door locks and wondered if you could open them? Have you ever sat in a lobby with open Ethernet ports and wondered what would happen if you plugged your computer into […]
At its most basic OWASP stands for Open Web Application Security Project. Many people that I work with or do business with have never heard of this organization. The first issue is that OWASP is an open worldwide community of security professionals. I do not think there are many security professionals that are also good solid […]
The U.K. Cyber Essentials Security Scheme – a useful framework for small businesses in other countries! In October 2014 the UK government created a low-cost, light-touch scheme called Cyber Essentials. It doesn’t introduce new concepts, controls or processes. It takes items from existing standards such as the ISO 27000 and NIST SP 800-53 publications and […]