System Hardening & Secure Configuration
From NIS2, ISO 27001, and DORA to CER, and eIDAS, all the way to CRA, CSA2, and WLA-SCS: Companies and organizations are facing an increasing number of stricter IT security requirements that call for secure configuration and system hardening. Find out what these requirements are here.
The AuditTAP offers a practical risk score. This may cause some surprise. We’ll explain how to correctly read and interpret the improved and clear compliance report.
We are often asked why we do not carry out System Hardening on the basis of Group Policies or Group Policy Objects. The quick answer: Because the handling is massively inefficient and the results are therefore unsatisfactory! We explain why this is the case in this article.
Continue reading “Group Policy vs. System Hardening: Why GPOs don’t provide sustainable security”
With its step-by-step approach, the NIST Cybersecurity Framework offers very good guidance for the protection of IT systems. In our experience, one relevant point is often neglected during implementation. You can find out what this is here.
Continue reading “NIST Security Framework: There’s a lot to do – but don’t forget this one measure”
The IT security specialists of two large US authorities have joined forces to write a guide. The topic is the secure configuration of IT systems. These are the recommendations and advice from NSA and CISA.
Continue reading “What do the NSA and CISA advise for securing IT systems? System hardening!”