Articles, write-ups, and musings concerning the world of cybersecurity and technology.
Most incident response plans are written for companies. Mine covers a house: virus, power failure, fire, flood, ISP outage, and the scenario most home plans skip, what happens if I'm not around.
How the 2017 NotPetya ransomware attack crippled Maersk's global shipping operations, and the real story of the domain controller recovery that saved the company's network.
CND sounds like a DoD acronym because it is one. A quick look at where the term came from, the NIST definition behind it, and the four-part structure — prevent, react, review, anticipate — worth using
The BIA and the Disaster Recovery Plan get lumped together, but they answer different questions: one asks what matters most, the other asks how to get it back. NIST SP 800-34, the four site types, and
