Lmst
Login

#GRC

unicis_techunicis_tech@mastodon.xyz
2025-06-19

Unicis: A New Standard of Resilience for GRC in SMEs
Read more on our new blog post unicis.tech/blog/new-standard-

#GRC #Resilience #Europe #cybersecurity

Leading Testing Activitiesleading-testing-activities.ghost.io@web.brid.gy
2025-06-18

127 Requirements are Never Equal

fed.brid.gy/r/https://leading-

<img alt="127 Requirements are Never Equal" src="https://leading-testing-activities.ghost.io/content/images/2025/06/photo-1598791318878-10e76d178023.jpeg" /><p>The feeling when (TFW) you are handed 127 requirements and need to establish a way to implement them as a part of a delivery. As with most requirements at the end of the day they will be put to a test (audit, verification), hence they are often non-negotiable. I have this challenge currently about once a month. Often it&apos;s contractual requirements, often around <a href="https://leading-testing-activities.ghost.io/enter-compliance-requirements/" rel="noreferrer">(non-functional) security and compliance requirements</a>. But the same approach below is similar effective for classical functional requirements and for <a href="https://leading-testing-activities.ghost.io/we-work-with-risks-questions-and-requirments/" rel="noreferrer">other people working with requirements</a>.</p><blockquote>If you are given a non-trivial amount of requirements - they are never equally important to your stakeholder and never equally possible the implement.</blockquote><p>One way to have a dialog with your customer with regards to their understanding of the requirements would be to <a href="https://leading-testing-activities.ghost.io/problem-solving-from-the-stakeholders-point-of-view/" rel="noreferrer">make a map</a>. Examine why the customer have added them. I have recently experienced customers pulling cumbersome requirements from the l
Rene Robichaudnerowild
2025-06-11

Une clé USB perdue de la GRC tombée entre les mains de criminels
lapresse.ca/actualites/justice

Tanya Janca | SheHacksPurple :verified: :verified:SheHacksPurple@infosec.exchange
2025-06-07

Great offer alert! My friend Gerald Auger from SimpleCyber has a #GRC course "GRC Jumpstart: GRC Foundations in Modern Cybersecurity" and he gave me permission to share his 'Pay What You Can' Code: GRCJUMPSTARTZERO !

twp.ai/4in5Xm

PS If you can afford to pay the $20, please pay.

XTROVERSOXtroverso
2025-06-06

Once, €3,000/month meant you could rent for €1,000. Now, you need €4,000 to qualify, for the same house. The rent didn’t change. You didn’t either. But the system did quietly, unfairly, structurally. This isn’t a market shift. It’s a silent exclusion. And it’s warping what “eligible to live” means.

xtroverso.com/blog/real-estate

Paria sans portefeuillePariaSansPortefeuille@jasette.facil.services
2025-06-04

« #CJPMO a envoyé une lettre au ministre de la Justice Sean Fraser pour lui demander des éclaircissements sur la possible enquête de la #GRC sur les #crimesDeGuerre dans les actions militaires israéliennes à #Gaza. »

Lettre au ministre Fraser – Crimes de guerre : enquête canadienne

fr-cjpme.nationbuilder.com/202

#polCan #Palestine #Israël @palestine @israel

RefsTENTErefstente
2025-06-02

0753 ΕΚΤΟΞΕΥΤΗΣ ΠΥΡΑΥΛΩΝ -LANZACOHETES-

Serie: Scorpion
País: GRC
Fab/Dist: TENCO, EXIN
Año: 1984

Más info en: refstente.com/id/1361

RefsTENTErefstente
2025-05-31

0333 TRANSBORDADOR
(CORFU)

Serie: Combi Mar
País: GRC
Fab/Dist: TENCO, EXIN
Año: 1984

Más info en: refstente.com/id/1336

LeeRaylleerayl@infosec.exchange
2025-05-29

Apparently there is a setting that defaults 2fa as active when a factor is added that was not set #grc

LeeRaylleerayl@infosec.exchange
2025-05-29

Apparently this is not enough for Vanta to accept I have an acceptable form of “MFA”.

I have a Passkey, “Fantastic” strength random PW, OTP through a secure Authenticator, and SSO through the HRIS with all but a Passkey.

This is what your $7k USD gets ya in the form of Compliance. Pretty sure most GPT bots could do this
#grc

Screenshot showing Passkey, password as Fantastic and a One Time Password setup with a secure Authenticator
SecBurgsecburg@infosec.exchange
2025-05-29

Open Source CSF Profile Assessment Database by Steve McMichael

secburg.com/posts/open-source-

#tools #tool #grc #opensource

WalkerWalker@infosec.exchange
2025-05-28

Are GRC analysts the latest group of IT workers getting laid off?

I have had a bunch of GRC analysts applying for jobs this past week.

If they are, I worry about the compliance culture of our corporate environments for the next 5 years.

#grc #jobsearch #infosec

Corey Neskeycneskey@infosec.exchange
2025-05-27

You're biased. Knowing you are is a start, but not enough. You don't need to openly admit you have a biased decision-making problem because every human 100% does. Fortunately establishing cognitive and technical routines works and tools and resources are available and even fun to use #grc #risk #crq #cybersecurity #deriverisk deriverisk.com

BCWHSBCWHS
2025-05-27

Wade Bachelder is a ColdFusion Application Developer, Systems Security Engineer, G.R.C. Analyst, and Consultant.
wadebach.blackcatwhitehatsecur

ColdFusion Application Developer Systems Security Engineer GRC Analyst Consultant Wade Bachelder is a ColdFusion Application Developer, Systems Security Engineer, G.R.C. Analyst, and Consultant.
CyberkidCyberkid1987@defcon.social
2025-05-25

Cybersecurity Roles & Domains: Where Do You Fit In? 🛡️💼🔍

Cybersecurity isn’t one-size-fits-all — it includes a wide range of roles and domains, each with unique skills and responsibilities.

🎯 Whether you enjoy coding, problem-solving, analyzing data, or working with policy — there's a role for you in cybersecurity.

Disclaimer: This content is for educational and career guidance purposes only.

#CyberSecurityCareers #InfoSec #SecurityRoles #RedTeam #BlueTeam #EducationOnly #CareerInCyber #TechJobs #GRC #DevSecOps #AppSec

RefsTENTErefstente
2025-05-25

Serie ASTRO (GRC)

Serie: Astro
País: GRC
Fab/Dist: TENCO, EXIN
Año: 1984

Más info en: refstente.com/id/1340

(GRC)

XTROVERSOXtroverso
2025-05-21

AEX closed at 933.32 (+0.24%)—a calm day, but not a passive one. No drama, just strategic restraint. In the silence lies the signal: investors are poised, not paused. For entrepreneurs, this is the moment to tighten strategy, not chase noise.
New insight now live on the Xtroverso blog—read between the decimals.

xtroverso.com/blog/today-s-pul

XTROVERSOXtroverso
2025-05-21

By 2030, Dutch employers will no longer be allowed to deduct housing costs from minimum wage. What some call overreach, we call overdue. This isn’t about policy—it’s about dismantling silent control. At Xtroverso, we say: ethical wages require ethical structures.
Public consultation open until June 6. Read the full breakdown on our blog.

xtroverso.com/blog/governance-

XTROVERSOXtroverso
2025-05-21

The Netherlands looked stable in 2024—on paper. But Q1 2025 tells a deeper truth: wage stagnation, housing strain, and underfunded systems are compounding. This isn’t decline—it’s quiet erosion. At Xtroverso, we say: don’t confuse snapshots with structure.
New blog live now—governance is pattern recognition.

xtroverso.com/blog/wise-4/the-

Marco Ciappelli🎙️✨:verified: :donor:Marcociappelli@infosec.exchange
2025-05-21

As we look ahead to Infosecurity Europe, we’re also taking a moment to look back — just a bit more — on what made #RSAC2025 such a powerful event.

🎙️ In this Brand Story conversation recorded on the show floor, I met once more with Steve Schlarman, to hear the Archer Integrated Risk Management perspective on the current state and future direction of #risk, #compliance, and #AI in #cybersecurity.

💡 From regulatory complexity and AI-driven policy generation to the challenge of translating risk data into business decisions — this episode is packed with grounded insights and real-world applications.

▶️ Watch the video: youtu.be/7c6kKbwlfgE

🎧 Listen to the podcast: brand-stories-podcast.simpleca

📝 Read the article: itspmagazine.com/their-stories

🙏 And once again — a huge thank you to Archer for sponsoring our #RSAC 2025 coverage and helping us bring conversations like this to life.

🎧 Missed any of our RSAC 2025 episodes? Catch them all here: itspmagazine.com/rsac25

🎯 Want to meet us at Infosecurity Europe and tell your story with ITSPmagazine? 👉 itspmagazine.com/infosec25 or just DM me (Marco Ciappelli) or Sean Martin, CISSP

#RSAC2025 #Cybersecurity #BrandStory #ITSPmagazine #InfosecurityEurope #GRC #RiskManagement #AI #Compliance #CyberRisk #EventCoverage #Archer #SteveSchlarman #MarcoCiappelli

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst