Direct book connectionAlert Triage
Alert triage is the rapid, evidence-based process of validating a security alert, estimating urgency and impact, and deciding the correct next action.
Open article →Direct book connectionBusiness Impact Analysis
A business impact analysis identifies essential activities, dependencies, outage consequences, and recovery priorities so continuity and disaster-recovery plans reflect business needs.
Open article →Direct book connectionCloud Deployment Models
Cloud deployment models describe how cloud infrastructure is owned, shared, located, and connected across public, private, community, and hybrid environments.
Open article →Direct book connectionCryptographic Key Management
Cryptographic key management governs key generation, registration, distribution, storage, use, rotation, backup, recovery, revocation, archival, and destruction.
Open article →Direct book connectionDigital Forensics
Digital forensics applies repeatable methods to identify, preserve, collect, examine, analyze, and communicate evidence from digital systems and services.
Open article →Direct book connectionMAC Addresses
A media access control address is a link-layer identifier used by network interfaces and local network technologies to deliver frames within a broadcast domain.
Open article →Direct book connectionMaximum Tolerable Downtime
Maximum tolerable downtime is the longest disruption a business process can endure before consequences become unacceptable.
Open article →Direct book connectionSecurity Events, Alerts, and Incidents
A security event is an observable occurrence, an alert is a notification that selected activity may need attention, and an incident is an event or series of events that meets defined criteria for harmful or policy-violating impact.
Open article →Direct book connectionSocial Engineering
Social engineering manipulates trust, urgency, authority, fear, helpfulness, or curiosity to influence a person into taking an unsafe action.
Open article →Direct book connectionWireless Network Security
Wireless security protects radio-based network access through strong authentication, encryption, secure configuration, monitoring, and controlled coverage.
Open article →Related topicData Loss Prevention
Data loss prevention identifies and controls sensitive information as it moves through endpoints, networks, applications, cloud services, and storage locations.
Open article →Related topicData Loss Prevention (M1057)
Identify and constrain unauthorized movement, disclosure, or handling of sensitive information across endpoints, networks, applications, and cloud services. This original Bare Metal Cyber profile explains implementation, validation, evidence, failure modes, ownership, and responsible use with ATT&CK.
Open article →