KirkpatrickPrice

Creating a Network Diagram

Amazon Web Services (AWS) VPC Flow Logs

PCI Requirement 10.5 – Secure Audit Trails So They Cannot Be Altered

Set Expiration Date for All Secrets in RBAC Key Vaults

PCI Requirement 10.3.6 – Identity or Name of Affected Data, System Component, or Resource

PCI Requirement 10.3.2 – Type of Event

PCI Requirement 10.5.3 – Promptly Back Up Audit Trail Files to a Centralized Log Server

PCI Requirement 10.6 – Review Logs and Security Events for All System Components

What Is Penetration Testing?

Enable Role Based Access Control (RBAC) for Azure Key Vault

Deploying Security Patches on EC2 Instances

Do Not Allow Users to Remember MFA on Devices They Trust

Ensure Notifications Are Enabled For Password Resets

PCI Requirement 10.2.4 – Invalid Logical Access Attempts

Disallow Other Apps to Access Company Data

Does AWS Provide Vendor Defaults?

PCI Requirement 10.2.7 – Creation and Deletion of System Level Objects

Should I Share Our Risk Assessment?

PCI Requirement 10.2.6 – Initialization, Stopping, or Pausing of the Audit Logs

Physical Security Responsibilities for AWS

Antivirus Solutions on EC2 Instances

PCI Requirement 10.2.3 – Access to All Audit Trails

PCI Requirement 10.5.1 – Limit Viewing of Audit Trails to Those With a Job Related Need

Only Allow Trusted Apps to Access Company Data

Do Not Use Project-Wide SSH Keys When Authenticating Instances

What are Threats?

PCI Requirement 10.3 – Record at Least the Following Audit Trail Entries for All System Components

Risk Assessment Requirements

Testing for Unauthorized Wireless Access Points

PCI Requirement 10.5.5 – Use File Integrity Monitoring or Change Detection Software on Logs

10.6.2 – Review Logs of All Other System Components Based Policies and Risk Management Strategy

Documenting a Systems Inventory in AWS

Protect Against Malicious Attacks With Azure AD MFA

Risk Management Strategy

Physical Security Responsibilities for AWS Users

Migrate Away from RSASHA1 for DNSSEC Zone-Signing Keys

Enable VPC Flow Logs for Every Subnet

Enforce Separation with Access Controls

IAM Policies for Account Authentication

Creating a Network Diagram

Auditing Basics: What is an Assertion?

Why Do You Need an Audit Report?

Ensure Container Network Interfaces Support Network Policies

Create Activity Log Alert for Delete SQL Server Firewall

Encryption for EBS Volumes

How Privacy Laws Apply to You

What Is Data Processing?

PCI Requirement 12.5.5 – Monitor and Control All Access to Data

What is a Cybersecurity Policy?

PCI Readiness Series: Scoping

What to Include in a Security Policy