ISO 27001: Information Security Management System (ISMS) ISO 27001 is an international standard that specifies the requirements for an Information Security Management System (ISMS). An ISMS is a framework that helps organizations manage and protect their information assets, such as data, intellectual property, and financial information. ISO 27001 is based on the 10 principles of […]
[ISO27000] Executive Summary Information security is a critical concern for organizations of all sizes in today’s digital world. The ISO27000 series of standards provides a comprehensive framework for implementing and maintaining an information security management system (ISMS). This article provides a detailed overview of the ISO27000 series, including its benefits, key components, and implementation considerations.
OWASP Top 10 Executive Summary The OWASP Top 10 is a standard awareness document for developers and web application security professionals, identifying the most critical web application security risks. By addressing these risks, organizations can significantly reduce the likelihood of web application attacks and protect sensitive data. Introduction Web applications are a ubiquitous part of
HIPAA (Health Insurance Portability and Accountability Act) The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that protects the privacy of health information. It was enacted in 1996 and has been updated several times since then. HIPAA regulates the use and disclosure of health information by covered entities, which include healthcare providers,
SQL Injection SQL injection is a web security vulnerability that allows an attacker to execute malicious SQL statements against a database. This can be done by including special characters in a web form input field, which are then passed to the database as part of an SQL query. If the input is not properly sanitized,
Distributed Denial of Service (DDoS) A DDoS attack is an attempt to overwhelm a target system with a flood of internet traffic, rendering it unavailable to legitimate users. It is achieved by coordinating a network of compromised computers, known as a botnet, to simultaneously send a large number of requests to the target system. This
Cross-Site Scripting (XSS) Cross-site scripting (XSS) is a type of web security vulnerability that allows an attacker to inject malicious scripts into a web page that is viewed by another user. This can give the attacker access to the user’s cookies, session data, and other sensitive information. XSS can be used to perform a variety
Cross Site Scripting Read More »
PCI DSS (Payment Card Industry Data Security Standard) PCI DSS is a set of security standards established to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. Compliance with PCI DSS is required for all merchants, service providers, and payment processors that accept, process, store, or transmit credit
Vulnerability Test A vulnerability test is a security assessment that identifies weaknesses in a computer system, network, or application that could be exploited by attackers. The goal of a vulnerability test is to identify and prioritize vulnerabilities that need to be fixed in order to improve the security posture of the system. There are two
Vulnerability Test Read More »
Penetration Testing in Malaysia Penetration testing, also known as pen testing, is a cybersecurity assessment that simulates an attacker’s techniques to identify and exploit security vulnerabilities in an IT system, network, or web application. It helps organizations assess the effectiveness of their existing security measures and identify areas for improvement. In Malaysia, penetration testing is
Penetration Test Malaysia Read More »
