Series
Secure and resilient
Back-ups you can restore, access per person, NIS2 and ISO 27001 without panic.
After this series you can:
- You have a restore tested and record, per system, how much loss and downtime you accept.
- You give each role only the access it needs, and have someone test where an attacker gets in.
- You check whether NIS2 applies to you and record who does what in an outage or incident.
06 · Basic
Secure and resilient
Back-ups you can restore, access per person, NIS2 and ISO 27001 without panic.
What this series does not cover
- Legal advice: whether NIS2 or the GDPR applies to you is checked case by case.
- Which security products or brands to buy.
- What backups, a penetration test or an audit cost.
Terms
- test restore
- Restoring a backup to a test system and noting what returns, and how fast.
- recovery time
- How long a system may be down, measured in a real restore rather than guessed.
- zero trust
- Access per request, only to the system that fits your role and your device.
- NIS2
- Cybersecurity rules with a duty of care and a duty to report incidents.
- reporting procedure
- One page recording who confirms an incident, who reports it, where, and with what text.
- ISO 27001
- A standard for information security: you choose reasoned measures and show that they work.
- SPF, DKIM and DMARC
- Three DNS records: who may send for your domain, a signature, and a failure rule.
- failover
- A second server that automatically takes over the work when the first one fails.
