Dropping Knowledge ⁽⁷⁾

Is authority and access to use advanced operating system utilities and commands that bypass system access controls monitored, logged, reviewed and restricted to those individuals or accounts that require access to perform the respective job function(s)? Welcome to the second post in my series on…

Are all required approvals documented for each access request or modification to a user's or account's access privileges? Summary Essentially what this requirement is asking for is a record of every addition or modification to an individual (or group's) access to a system or data…

This post is the introduction of a series I'm working on. I'm taking a list of security compliance questions that a client or an auditor might present to a company and expanding on what it means, how important it is, how one would introduce controls…

I get one help desk request more than almost any other: Spam and phishing email reports. At my current gig I probably get three or four a week. This is way less than my previous job where there'd probably more than that in a day. There's…

One common task on the iToysoldiers site was making stuff visible to a user either because it was created by that user or because it was not. Case in point: Each player has a dashboard. That dashboard shows them all sorts of things. One of…