Episode 51 — Safeguard 11.2 – Testing data recovery
Safeguard 11.2 requires organizations to test their data recovery capabilities on a regular basis, validating that backup systems and restoration procedures function as intended. Backups only hold val...
18 Okt 202510min
Episode 50 — Safeguard 11.1 – Backup process design
Safeguard 11.1 directs organizations to establish and maintain a documented data recovery process that defines how, where, and when critical information is backed up. The process must specify scope, r...
18 Okt 202510min
Episode 49 — Overview – Planning for inevitable failures
Control 11—Data Recovery—acknowledges an unavoidable truth in cybersecurity: failures, whether caused by attacks, accidents, or system errors, are inevitable. The focus of this control is to ensure th...
18 Okt 202510min
Episode 48 — Remaining safeguards summary (Control 10)
The remaining safeguards under Control 10 reinforce malware defense through layered, automated protection and proactive monitoring. These include automatic signature updates, disabling autorun and aut...
18 Okt 20259min
Episode 47 — Safeguard 10.2 – Endpoint detection and response (EDR)
Safeguard 10.2 expands traditional anti-malware defenses by introducing Endpoint Detection and Response (EDR)—a technology designed to detect, analyze, and contain threats that bypass signature-based ...
18 Okt 20259min
Episode 46 — Safeguard 10.1 – Anti-malware solutions
Safeguard 10.1 directs organizations to deploy and maintain anti-malware software on all enterprise assets to provide a frontline defense against malicious code. This includes endpoints, servers, and ...
18 Okt 20259min
Episode 45 — Overview – Malware threats and defenses
Control 10—Malware Defenses—addresses the ongoing challenge of detecting, preventing, and mitigating malicious code across the enterprise. Malware encompasses a broad spectrum of threats, including vi...
18 Okt 20259min
Episode 44 — Remaining safeguards summary (Control 9)
The remaining safeguards under Control 9 expand email and web browser protection into a comprehensive strategy against social engineering and content-based attacks. They include implementing DNS filte...
18 Okt 20259min
