Introduction: Protection of data is a critical aspect of information security, and this applies to all stages of data management, including testing. Test data is crucial in validating the effectiveness and efficiency of systems and applications, ensuring that they function as expected. However, the use of operational data for testing […]
A.14
13 posts
Introduction: System acceptance testing is a critical component of ensuring that new systems introduced to a network meet the required standards for IT security. This process includes a comprehensive review of the testing procedures, the quality of tests, and the acceptance criteria for new or updated systems. The testing procedures […]
Introduction: The security of a system is of utmost importance for any organization. In order to ensure that the system is secure, it is necessary to perform regular security checks and testing. This is where the A.14.2.8 control from the ISO/IEC 27001 standard comes into play. This control requires a […]
Introduction: Outsourcing development has become a popular trend in the software industry. However, it is important to ensure that outsourced software is developed in a secure and compliant manner. To achieve this, it is crucial to have controls in place that help mitigate risks associated with outsourced software development. A.14.2.7 […]
Introduction: Secure software development has become a crucial aspect of protecting sensitive information and maintaining the confidentiality, integrity, and availability of systems. Information security management standard, ISO 27001, contains several controls related to secure software development. A.14.2.6 is one such control that pertains to the creation of a secure development […]
Introduction: Technology is at the forefront of almost everything we do, from online shopping to banking, from socializing to working remotely. As such, it’s more important than ever to ensure that the software and systems we use are secure and protected from cyber threats. The A.14.2.5 control from the ISO/IEC […]
Introduction: Information technology (IT) systems are the backbone of modern organizations, and changes to these systems are inevitable due to various reasons such as software updates, hardware changes, and so on. However, any changes to IT systems can introduce vulnerabilities, which can be exploited by attackers. Therefore, it is essential […]
Introduction: In the world of technology, software and hardware are continually updated and patched to keep them functioning optimally and secure. When these changes occur, it is essential to evaluate and review the systems’ security to ensure they remain secure. The A.14.2.3 technical review of applications after operating platform changes […]
Introduction: IT system change management has become critical for organizations to ensure the security, reliability, and performance of their systems. The ISO 27001 standard provides guidance on ensuring effective system change control procedures to manage IT changes in a systematic and controlled manner. This article will discuss ISO 27001’s A.14.2.2 […]
Introduction: In today’s world, the development of software, services, and applications has become increasingly important for businesses of all sizes. However, with the increased use of technology comes an increased risk of cyber threats, and it is essential for organizations to have robust security measures in place. A.14.2.1 of the […]