CubedCorps helps small and medium-sized businesses comply with clients, insurance companies, and relevant frameworks to mitigate cyber security risks by providing cyber-security consulting services.
Getting started with the world of CMMC can be a little bit confusing! We’re going to start breaking it down for you so that you don’t have to be searching all over the internet for information! What Does CMMC Stand For? CMMC stands for Cybersecurity Maturity Model Certification. This standard was put in place to […]
What Does NIST/CMMC Compliance Mean? In our previous article we looked at what NIST means in the context of cyber security. In this article we’ll take a closer look at what it means to be NIST compliant. NIST compliance is mandatory for all U.S. federal agencies as of 2017. As a result, if your company […]
I am documenting how to update the Greenbone Security Scanner feed in OpenVAS running on Ubuntu 18.04. OpenVAS is a great tool for scanning your system for known vulnerabilities. How to manually update the Security Scanner Feed sudo systemctl stop openvas-scanner sudo systemctl stop openvas-manager sudo greenbone-nvt-sync sudo greenbone-certdata-sync sudo greenbone-scapdata-sync sudo systemctl start openvas-scanner […]
I have been in the Information security sector informally for many years, and in the past 5 years, much more formally. I have used mostly NIST and ISO 27001 frameworks for clients although I have used others like PCI and Cobit. I like the framework that ISO 27001 and supporting ISO documentation (ISO 27002-5), especially […]
The U.K. Cyber Essentials Security Scheme – a useful framework for small businesses in other countries! In October 2014 the UK government created a low-cost, light-touch scheme called Cyber Essentials. It doesn’t introduce new concepts, controls or processes. It takes items from existing standards such as the ISO 27000 and NIST SP 800-53 publications and […]
I was looking back at some of my very early policy that I wrote back in 2004. After reviewing some of my initial policy, I realized that creating a good policy can be a hard thing to perform correctly the first time. I decided to help people new to policy writing by outlining a template […]
As more and more businesses are either voluntarily or forced to increase their security posture, the first step is developing and documenting good security policy and procedure. There are only a few times where I have not performed this essential step before making changes to the environment. Writing security policy is a large task that […]