Governance, Risk, & Compliance
My thoughts, observations, and readings on different facets of GRC.
In case you are following my previous posts (link 1, link 2), you must be aware that I have been reading and posting a lot of thoughts on different ISO frameworks. But reading about these frameworks reminds me of a quote by Socrates – The more I know, the more I realize I know nothing….
In 2010, John Kindervag of Forrester Research piqued a new concept, the ‘Zero Trust’ model. In the traditional information security model, there are essentially 2 zones – the trusted zone which is regarded as ‘secure’ and the untrusted zone as ‘insecure’. The zero trust model essentially says not to trust anyone on the network –…
Backup and Archive are prominently used interchangeably and are considered the same, but that’s far from the case. The terms are entirely different and are best illustrated by the following definitions: A data backup is a copy of a data set currently in use that is made for the purpose of recovering from the loss…