Posts

Showing posts from February, 2023

Week 11 - The Importance of Contractors

  Hi everyone! Welcome back to another installment of Secure with Rich! The topic I want to talk about today is the benefits of hiring contractors. Having a team of knowledgeable professionals is essential, but knowing the areas of opportunity is equally important. In the world of security, how much there is to know can be overwhelming. While we all try to be the best at what we do, we must remember that we are only human. Subject matter experts in different security areas are vital because they specialize in areas where the team is not strong enough. In situations where attacks have been conducted, hiring contractors helps identify and restore systems if it is outside the scope of the internal team. Restoring systems as quickly as possible without compromising the infrastructure any further is essential for any organization. Contractors can assist with the investigation and help lessen the blow during hardship. If you are in a situation that is outside the scope of your expert...

Week 10 - Continual Improvment of Security

Hello everyone! Welcome back to another installment of Secure with Rich! One of the biggest challenges within security is being 100% secure. It is always recommended to be prepared for an attack, not just to prevent it. Unfortunately, nobody is prone to attacks, and it usually is not a matter of if but when. Evaluating security policies and procedures, including tools, is vital to ensuring that when that time comes, organizations are fully prepared. Having these policies can help limit the exposure of an attack saving the reputation of the company and your team. Having an incident playbook helps organization handle attacks and who to conduct to assist with recovery.  

Week 9 - Brute Force Attacks and Tips

Hi everyone!   Welcome to another installment of In the Secure with Rich!   Today I wanted to cover brute force attacks. These attacks are primarily aiming towards cracking easy passwords using dictionary attacks. A dictionary attack uses previously stolen passwords that cross references a list of username and password. It is important to note that using strong passwords is always recommended to prevent the duration of the crack. Unfortunately, no password is safe and eventually will get cracked. A method to avoid password cracking is setting up a policy to change a password once or twice a year. If previous passwords were stolen, it wouldn’t matter due to the duration it would take and the password no longer bring the same!