The Cloud Security Alliance’s (CSA) Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™) is an emerging, cloud-centric threat matrix designed to address the unique and rapidly evolving security risks in cloud… Read More »CSA Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™): An Emerging Threat Matrix for Industry Collaboration
The FIRST CVSS Calculator is an interactive tool provided by the Forum of Incident Response and Security Teams (FIRST) that enables users to assess the severity of software vulnerabilities using… Read More »FIRST Common Vulnerability Scoring System (CVSS) Calculator Version 4.0
NIST SP 800-221 serves as the critical functional bridge between enterprise-level strategy and technical delivery, focusing on the Enterprise Impact of Information and Communications Technology (ICT) Risk. It moves beyond… Read More »NIST SP 800-221 Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio
The CISA #StopRansomware Guide is a comprehensive, one-stop resource designed to help organizations prevent, detect, respond to, and recover from ransomware and data extortion incidents. Developed collaboratively by CISA, the… Read More »CISA Stop Ransomware Guide ★★★★★
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
The Cloud Security Alliance Cloud Controls Matrix (CSA CCM) is a comprehensive cybersecurity control framework specifically designed for cloud computing environments. It consists of 197 control objectives organized into 17… Read More »CSA Cloud Controls Matrix (CCM) v4 ★★★★★
NIST Special Publication 800-53 (NIST SP 800-53) provides a comprehensive catalog of security and privacy controls designed to protect federal information systems and organizations from a wide range of risks. The… Read More »NIST SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations
The MITRE Common Attack Pattern Enumeration and Classification (CAPEC) is a publicly available, comprehensive catalog that documents and categorizes common attack patterns used by adversaries to exploit software and systems.… Read More »MITRE CAPEC – Common Attack Pattern Enumeration and Classification Version 3.9
NIST SP 800-39 serves as the overarching flagship for information security risk management, providing the high-level governance necessary to align cybersecurity efforts with an organization’s core mission and business objectives.… Read More »NIST SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View
MITRE’s Common Weakness Enumeration (CWE) is a community-developed, comprehensive list and classification taxonomy of common software and hardware weaknesses that can lead to security vulnerabilities. It identifies and describes these… Read More »MITRE CVE (Common Vulnerabilities and Exposures)