Security Recommendations from Cyber Safety Review Board

By

See new guidelines for improving overall software security and dealing with specific threats.

A new report from the Cyber Safety Review Board (CSRB) includes strategic and actionable recommendations for securing software and managing vulnerabilities, writes FOSSlife.

Specifically, the report spells out 19 recommendations to help organizations deal with threats and improve overall security, including:

  • Maintain an accurate IT asset and application inventory
  • Invest in capabilities to identify vulnerable systems 
  • Have a documented vulnerability response program as well as a documented disclosure process 
  • ​​Increase investments in open source software security

Read more at FOSSlife.

08/04/2022

Related content

  • Photo by Félix Prado on Unsplash
    Build a secure development and production pipeline
    We investigate best practices to secure CI/CD pipelines with DevSecOps.
    more »
  • Microsoft to Remove SMBv1 Protocol in Windows 10
    more »
  • Lead Image © Kae Horng Mau, 123RF.com
    Security issues when dealing with Docker images
    Although developers appreciate Docker's ease of use and flexibility, many admins are worried about vulnerabilities. We look at various approaches to securing container images and the price to be paid.
    more »
  • Photo by Geran de Klerk on Unsplash
    Detecting security threats with Apache Spot
    Security vulnerabilities often remain unknown when the data they reveal is buried in the depths of logfiles. Apache Spot uses big data and machine learning technologies to sniff out known and unknown IT security threats.
    more »
  • News for Admins
    In the news: US Agencies Issue Quantum-Readiness Recommendations; Bitwarden Secrets Manager; IBM X-Force Releases Detection and Response Framework for Managed File Transfers; National Strategy to Expand US Cyber Workforce; SEC Adopts New Rules for Disclosure of Cybersecurity Incidents; Canonical Announces Real-Time Ubuntu for Intel Core; EU-US Data Privacy Framework Ensures Safe Data Transfers; IEEE Releases New Standard for LiFi Communications; EU Health Sector Security Risks; and JupyterLab 4.0.
    more »
comments powered by Disqus