Information Security

The figure of the CISO has ceased to be purely technical and has become a key element within business strategy. In a context marked by increasing cyber risk, regulatory pressure, and the need to ensure…

As cyber threats become more sophisticated, companies are under growing pressure to reinforce access controls across their systems and applications. In that context, two-factor authentication, or 2FA, has become one of the most effective and…

For a long time, cybersecurity training has been understood as a periodic obligation: a session, a course, a presentation and a generic message for the entire workforce. But that model is no longer enough. Threats…

In the cybersecurity ecosystem, we tend to focus our efforts on development security. We invest significant resources in auditing proprietary code, looking for programming flaws, misconfigurations, or technical vulnerabilities in our own systems. However, the…

In many organizations, the plan to prevent data leaks can be summarized as “let’s implement a DLP.” Solutions such as Microsoft Purview, Zscaler, Netskope or other Data Loss Prevention technologies are essential, yes — but…

The new amendment affecting the ISO/IEC 27001:2022 AMD 1:2024 standard is auditable from May 2024 and marks a significant evolution in integrating sustainability alongside organizational security. This amendment was published by the International Organization for…