ElevenPaths #7 - The Path after a Security Analysis

: How is a company's path after a security analysis? It is becoming increasingly common for companies of all sizes to decide to carry out a security analysis, but what steps should be taken next?

In practice, things develop as follows: a company hires a security analysis in which, through various tests, a team of professionals discovers certain vulnerabilities and their impact. After this discovery, the company asks itself what is the roadmap to follow: do I generate an action plan with responsibilities, which vulnerabilities do I solve first, do we implement compensatory controls, is it necessary to invest in training, infrastructure, solutions...?

In this new chapter of our podcast on "News with our CSAs" we review these and many other questions that arise in companies after conducting analysis or security audits with our CSA Deepak Daswani, a professional with extensive experience in this field.

ElevenPaths Radio #6 - Securing the Supply Chain

All companies in the world have a chain of suppliers, which increasingly require them to connect to their services and networks. However, the lack of controls on suppliers can lead to very critical risks to information security. In this chapter of "Cyber Security News with our CSAs", Claudio Caracciolo presents several publicly known cases where, after the analysis of large incidents, it was found that it was the exploitation of security breaches in suppliers that allowed attackers to put information at risk.