Best Practices for Kubernetes Containers

Sep 30, 2021 Continuum GRC 0 Comment

The future of high-performance and secure cloud computing is in containers. Lightweight cloud containers are fast replacing resource-sucking virtual machines, and Kubernetes is fast becoming the de facto standard for container orchestration.

If you are using containers, however, you may be exposing users and applications to security threats or non-compliance penalties. Here, we’ll discuss how Kubernetes containers work and best practices for using them safely.

Awareness Continuum GRC

What is ISO 27002 and Why Do I Need to Know About It?

Sep 22, 2021 Continuum GRC 0 Comment

Cybersecurity is integral to any data-driven business, but building an effective cybersecurity apparatus can be challenging, if not outright daunting. Outside of industry-specific regulations, simply grasping the complexity of modern security threats and IT infrastructure has become an intellectual discipline on its own. That’s why compliance frameworks exist to help companies like yours best implement environments that can meet modern cyber threats.

One organization, the ISO, has dedicated significant resources to develop best practices and frameworks for organizations like yours to build effective and scalable cybersecurity systems that meet both the challenges of modern threats and the demands of modern compliance. ISO has released a series of documents, called the ISO 27000 series, to speak directly to these challenges.

While we have previously discussed ISO 27001 and its importance to data-driven businesses, we will now expand that discussion into the next document, ISO 27002, and why it’s important to your organization.

Awareness Continuum GRC

How Can Penetration Testing Help with Risk Assessment and Management?

Sep 16, 2021 Continuum GRC 0 Comment

Risk management is emerging as a necessary practice for large enterprise businesses and SMBs alike. It isn’t the case that you can simply plug into a cloud provider, operate a few servers on-prem and install firewall and malware protection to call it a day. Risk management is a real process that requires insights into your systems and their operations, and practices like penetration testing and vulnerability scanning can help with that process.