
In the last couple of years “cyber resilience” has become a buzz expression. While exploring my own understanding of what cyber resilience means and my frustration with the industry rehashing old concepts under a new name, I found myself surprised to find “resilience” to be much more relatable and easier to communicate as concept to…

Your external security consultant just sent you the vulnerability report from the last test you ordered? What shall you do with all those findings and how to successfully communicate with the concerned parties? What could go wrong and why?

BITS is The Financial Services Roundtable technology division. At the end of January 2012 BITS issued a document containing detailed framework regarding the integration of the basic security principles in the software development life cycle.It is called “BITS Software Assurance Framework” The document is developed with the support of the Microsoft SDL group. If you…