SECTION 9 Cyber Security

Latest Episodes:

Migrating to Microsoft 365: Take 3 - 170 Aug 31, 2020

Show notes

We’re starting over again. Yup! Two steps forward, one step back. This time it’s not so bad. We found more documentation on Microsoft 365. Based on this, we’ve decided to review the signup process. The only way to do that is to start over.

LINKS

1. Microsoft 365: Getting started

FIND US ON

1. Facebook

2. Twitter - DamienHull

CMMC: We Got It Wrong - 169 Aug 24, 2020

Show notes

As the title says, we got it wrong. It happens. Unfortunately this is not a topic you want to get wrong.

LINKS

1. SANS Webcast: Why as a DoD Contractor Do I need to Be CMMC Compliant

2. Certified Professionals and Assessors

FIND US ON

1. Facebook

2. Twitter - DamienHull

Migrating to Microsoft 365: Step 1 - 168 Aug 17, 2020

Show notes

We’re moving forward with our Microsoft 365 migration. Signed up for an account using the 365 Business Premium license. Setup admin accounts for our selves. Getting ready to setup test accounts with Business Premium Licenses.

LINKS

1. Plan your setup of Microsoft 365 for business - We used this document

2. Get started - More documentation on Microsoft 365

FIND US ON

1. Facebook

2. Twitter - DamienHull

Security Polices and Procedures Take 1 - 167 Aug 10, 2020

Show notes

You can’t have a good security program without Polices and Procedures. We’re not the best at writing Polices. Truth is, we’re like most people. Where do I start? How do I write a policy?

Lucky for us, there are resources out there to help us get started. This is a big step in the right direction for us. However, we’re just scratching the surface. We have a long way to go.

SANS Polices

1. Security Policy Templates - All of the SANS policies

2. Software Installation Policy - We will be using this

3. Password Protection Policy - We will be using this

4. Pandemic Response Planning Policy - Never thought we would need this

Security Resources

1. Small Business Cybersecurity Corner

2. Cybersecurity Resources Road Map

3. SANS CIS Critical Security Controls: Guidelines

FIND US ON

1. Facebook

2. Twitter - DamienHull

Can We Migrate to Microsoft 365? - 166 Aug 03, 2020

Show notes

Another episode on migrating to Microsoft 365. Most organizations are using it. It’s almost a standard in the business world. Should we be using Microsoft 365? Can we?

FIND US ON

1. Facebook

2. Twitter - DamienHull

Critical Security Controls and Policies - 165 Jul 27, 2020

Show notes

Time to start thinking about our Critical Security Controls audit. This will include policies and procedures. We can’t avoid good documentation.

FIND US ON

1. Facebook

2. Twitter - DamienHull

pfSense, Documentation and Cloud Security - 163 Jul 13, 2020

Show notes

Lots to talk about in this episode. We’re using pfSense firewalls in our virtual lab environment. We’ve been documenting things on slab.com. And we’ve been evaluating cloud security.

Links

1. pfSense

2. slab.com

3. CMMC - Cybersecurity Maturity Model Certification

FIND US ON

1. Facebook

2. Twitter - DamienHull

Notion.so Security & Data Classification - 162 Jun 29, 2020

Show notes

Time to review the security of notion.so. They are responsible for protecting our data. We are responsible for putting it there. We need to make sure their security meats our requirements. If they don’t, we’ll have to look for a different solution.

LINKS

1. notion.so

2. notion security - an overview of their security

3. 9 Common Questions About SOC 2 Compliance

4. Small Business Information Security: The Fundamentals

FIND US ON

1. Facebook

2. Twitter - DamienHull

Documentation, Notion.so and Security- 161 Jun 22, 2020

Show notes

We’re taking a step back and focusing on documentation. We spend a lot of time looking things up. Time that could have been spent learning new things. Better documentation means less time spent looking things up. To help fix this problem, we’re looking into notion.so.

Notion.so is a web application designed for things like documentation. We’re still in the testing phase. So far, things are looking good. We have a long way to go.

LINKS

1. notion.so

2. notion security - an overview of their security

FIND US ON

1. Facebook

2. Twitter - DamienHull

Purple Teaming Lab - 160 Jun 08, 2020

Show notes

We signed up for the Purple Teaming class put on by Black Hills Information Security. It was a bit overwhelming, but we learned a lot.

LINKS

1. Class Git Hub Repository

2. Sysmon