Practical cybersecurity insights for real-world organisations.
Explore articles, videos and observations from Bytes of InfoSec, covering the everyday security decisions that help organisations become more resilient.
Articles & Insights
Longer-form articles exploring cybersecurity, risk and resilience — written to make complex topics easier to understand and apply.
Cybersecurity Basics
The fundamentals of cybersecurity, explained in straightforward language.
What is a Cyber Threat?
A simple introduction to cyber threats — what they are, where they come from and why understanding them is the first step towards protecting your organisation.
Read on Medium → Navigating the Digital Frontier: Understanding and Defending Against Cyber Threats
Watch on YouTube →Navigating the Digital Frontier: Understanding and Defending Against Cyber Threats
What is Cyber Defense?
An introduction to cyber defense and the practical measures organisations use to protect systems, information and services from cyber threats.
Read on Medium → Building Strong Cyber Defenses: Safeguarding the Digital Kingdom
Watch on YouTube → Building Strong Cyber Defenses: Safeguarding the Digital Kingdom
What is a Cyber Control?
A straightforward explanation of cyber controls and how organisations use them to reduce security risk.
Read on Medium → Understanding Cyber Control for a Secure Digital Space
Watch on YouTube → Understanding Cyber Control for a Secure Digital Space
Controls vs Threats
A simple look at the relationship between cyber threats and the controls organisations put in place to manage them.
Read on Medium → Demystifying Information Security: Understanding the Dynamics between Threats and Controls
Watch on YouTube → Demystifying Information Security: Understanding the Dynamics between Threats and Controls
What are Cybersecurity Tools?
An overview of the tools organisations use to prevent, detect and respond to cybersecurity problems.
Read on Medium → Navigating the Cybersecurity Universe: A Beginner’s Guide
Watch on YouTube → Navigating the Cybersecurity Universe: A Beginner’s Guide
What is a Security Governance Framework?
An introduction to the structures, responsibilities and oversight that help organisations manage cybersecurity consistently.
Read on Medium → Understanding Security Governance Frameworks: A Comprehensive Guide
Watch on YouTube → Understanding Security Governance Frameworks: A Comprehensive Guide
What is an Information Security Policy?
A simple explanation of how information security policies set expectations for protecting information and using technology safely.
Read on Medium → Understanding Information Security Policies: A Comprehensive Guide
Watch on YouTube → Understanding Information Security Policies: A Comprehensive Guide
What is Security Architecture?
An introduction to designing technology and security controls so they work together to protect an organisation.
Read on Medium → Demystifying Security Architecture: Safeguarding Digital Fortresses
Watch on YouTube → Demystifying Security Architecture: Safeguarding Digital Fortresses
What is Security Training & Awareness?
Why helping people recognise cyber risks and make safer decisions is an essential part of an organisation’s security.
Read on Medium → Empowering Cyber Guardians: The Synergy of Security Training and Awareness
Watch on YouTube → Empowering Cyber Guardians: The Synergy of Security Training and Awareness
What is Password Security?
Practical guidance on why passwords matter and how stronger password practices help reduce the risk of account compromise.
Read on Medium → Strengthening Your Digital Fortress: A Comprehensive Guide to Password Security
Watch on YouTube → Strengthening Your Digital Fortress: A Comprehensive Guide to Password Security
Protecting Your Technology
Practical controls and technologies that help protect systems, devices, applications and data. This section explains what these safeguards do, where they fit and how they reduce everyday cyber risk.
Data Encryption
How encryption protects sensitive information by making it unreadable to people who are not authorised to access it.
Read on Medium → Demystifying Data Encryption: Safeguarding Secrets for Confidentiality and Integrity
Watch on YouTube → Demystifying Data Encryption: Safeguarding Secrets for Confidentiality and Integrity
Network-Level Encryption
How encryption can protect information as it travels across networks and between systems.
Read on Medium → Safeguarding Digital Pathways: An In-Depth Look at Network-Level Encryption
Watch on YouTube → Safeguarding Digital Pathways: An In-Depth Look at Network-Level Encryption
End-to-End Encryption
A simple explanation of how end-to-end encryption protects information from sender to intended recipient.
Read on Medium → Safeguarding Digital Conversations: Understanding and Implementing End-to-End Encryption
Watch on YouTube → Safeguarding Digital Conversations: Understanding and Implementing End-to-End Encryption
File Integrity Monitoring
How organisations can detect unexpected or unauthorised changes to important files and systems.
Read on Medium → Understanding File Integrity Monitoring (FIM) in Cybersecurity
Watch on YouTube → Understanding File Integrity Monitoring (FIM) in Cybersecurity
Asset Management
Why knowing what devices, systems, software and information you have is fundamental to protecting them.
Read on Medium → Digital Treasure Hunt: Demystifying Asset Management in IT/Information Security
Watch on YouTube → Digital Treasure Hunt: Demystifying Asset Management in IT/Information Security
DNS Traffic Filtering
How filtering DNS requests can help block access to malicious or inappropriate internet destinations.
Read on Medium → Navigating the Digital Landscape: DNS Traffic Filtering Unveiled
Watch on YouTube → Navigating the Digital Landscape: DNS Traffic Filtering Unveiled
Configuration Management
Why securely managing system settings and changes helps reduce vulnerabilities and prevent avoidable security problems.
Read on Medium → Navigating Cybersecurity: Configuration Management and Controlling Profiles
Watch on YouTube → Navigating Cybersecurity: Configuration Management and Controlling Profiles
Penetration Testing
How controlled security testing can identify weaknesses before attackers have the opportunity to exploit them.
Read on Medium → Unveiling the Essentials of Information Security: Penetration Testing and Cybersecurity Insights
Watch on YouTube → Unveiling the Essentials of Information Security: Penetration Testing and Cybersecurity Insights
DNS/Registry Integrity Monitoring
How monitoring domain and registry information can help detect unauthorised changes that may put services or users at risk.
Read on Medium → Ensuring DNS Security: A Comprehensive Guide to DNS/Registry Integrity Monitoring
Watch on YouTube → Ensuring DNS Security: A Comprehensive Guide to DNS/Registry Integrity Monitoring
Patch Management
Why keeping software and systems updated is one of the most important ways to reduce exposure to known vulnerabilities.
Read on Medium → Safeguarding Your Digital Realm: A Comprehensive Guide to Patch Management and Control Profiles
Watch on YouTube → Safeguarding Your Digital Realm: A Comprehensive Guide to Patch Management and Control Profiles
Network Redundancy
How alternative network paths and services can help organisations remain available when technology fails or is disrupted.
Read on Medium → Safeguarding Networks: The Power of Redundancy Against DDoS Attacks
Watch on YouTube → Safeguarding Networks: The Power of Redundancy Against DDoS Attacks
Secure SDLC
How security can be built into the software development lifecycle rather than added only after a system is completed.
Read on Medium → Integrating Security: A Comprehensive Look at Secure Software Development Life Cycle (SDLC)
Watch on YouTube → Integrating Security: A Comprehensive Look at Secure Software Development Life Cycle (SDLC)
Secure SDLC Training
Why developers and technology teams need practical security knowledge throughout the software development lifecycle.
Read on Medium → Demystifying Secure Software Development Life Cycle (SDLC) Training
Watch on YouTube → Demystifying Secure Software Development Life Cycle (SDLC) Training
Network Segregation
How separating networks and systems can limit access and reduce the impact of a security incident.
Read on Medium → Enhancing Cybersecurity: Network Segregation and Access Controls Explained
Watch on YouTube → Enhancing Cybersecurity: Network Segregation and Access Controls Explained
Micro-Segmentation
How more granular separation of systems and workloads can restrict unnecessary communication and limit attacker movement.
Read on Medium → Micro-Segmentation Unveiled: Fortifying Your Digital Fortresses
Watch on YouTube → Micro-Segmentation Unveiled: Fortifying Your Digital Fortresses
Cloud Access Security Broker (CASB)
An introduction to how CASB technology can help organisations understand and control the use of cloud services.
Read on Medium → Safeguarding Your Digital Kingdom: Understanding Cloud Access Security Brokers (CASBs)
Watch on YouTube → Safeguarding Your Digital Kingdom: Understanding Cloud Access Security Brokers (CASBs)
Code Inspection
How reviewing software code can help identify security weaknesses before applications are released.
Read on Medium → Code Inspection Unveiled: Static and Dynamic Analysis in Information Security
Watch on YouTube → Code Inspection Unveiled: Static and Dynamic Analysis in Information Security
Data Loss Prevention
How organisations can identify and reduce the unauthorised loss, disclosure or movement of sensitive information.
Read on Medium → Safeguarding Sensitive Information with Data Loss Prevention (DLP)
Watch on YouTube → Safeguarding Sensitive Information with Data Loss Prevention (DLP)
Network Admission Control
How organisations can check devices and users before allowing them to connect to a network.
Read on Medium → Securing the Digital Gates: Understanding Network Admission Control (NAC)
Watch on YouTube → Securing the Digital Gates: Understanding Network Admission Control (NAC)
Network Access Control
How access controls can restrict network connectivity to authorised users, devices and systems.
Read on Medium → Network Access Control (NAC): Safeguarding Your Digital Realm
Watch on YouTube → Network Access Control (NAC): Safeguarding Your Digital Realm
Unauthorised MAC Detection
How monitoring device identifiers can help identify unexpected or unauthorised devices connecting to a network.
Read on Medium → Safeguarding Your Network: Unraveling the Essentials of Unauthorised MAC Detection
Watch on YouTube → Safeguarding Your Network: Unraveling the Essentials of Unauthorised MAC Detection
Digital Rights Management
How controls can help manage how protected digital information is accessed, copied and shared.
Read on Medium → Navigating the Digital Realm: Understanding Digital Rights Management and the Encryption Dance
Watch on YouTube → Navigating the Digital Realm: Understanding Digital Rights Management and the Encryption Dance
Web Application Firewall (WAF)
How a web application firewall can help protect internet-facing applications from common malicious requests and attacks.
Read on Medium → Understanding Web Application Firewalls (WAFs) and Their Role in Cybersecurity
Watch on YouTube → Understanding Web Application Firewalls (WAFs) and Their Role in Cybersecurity
Cloud IaaS Configuration Management & Monitoring
Why cloud infrastructure needs secure configuration, continuous visibility and monitoring to reduce avoidable exposure.
Read on Medium → Unlocking the Basics of Cloud IaaS Configuration Management and Monitoring
Watch on YouTube → Unlocking the Basics of Cloud IaaS Configuration Management and Monitoring
Outbound Web Connection Filtering
How controlling outbound internet connections can reduce access to malicious sites and limit unwanted communications.
Read on Medium → Navigating the Digital Frontier: Outbound Web Connection Filtering Explained
Watch on YouTube → Navigating the Digital Frontier: Outbound Web Connection Filtering Explained
Database Firewall
How specialised controls can monitor and restrict suspicious or unauthorised activity involving databases.
Read on Medium → Safeguarding Your Data: Understanding Database Firewalls
Watch on YouTube → Safeguarding Your Data: Understanding Database Firewalls
Media Usage Controls
How organisations can manage removable media and other storage devices to reduce malware and data-loss risks.
Read on Medium → Safeguarding Information: A Comprehensive Look at Media Usage Controls in Cybersecurity
Watch on YouTube → Safeguarding Information: A Comprehensive Look at Media Usage Controls in Cybersecurity
Wireless Access Security
How organisations can secure wireless networks and control which users and devices are allowed to connect.
Read on Medium → Unveiling the World of Wireless Access: A Comprehensive Exploration
Watch on YouTube → Unveiling the World of Wireless Access: A Comprehensive Exploration
Pre-Screening of Links
How checking links before users visit them can help prevent phishing, malware and other web-based threats.
Read on Medium → Strengthening Cybersecurity: The Essentials of Link Pre-screening Based on Threat Intelligence
Watch on YouTube → Strengthening Cybersecurity: The Essentials of Link Pre-screening Based on Threat Intelligence
Detection of Spam Emails
How email filtering can identify unwanted or suspicious messages before they reach users.
Read on Medium → Unveiling the World of Spam Emails: A Comprehensive Exploration
Watch on YouTube → Unveiling the World of Spam Emails: A Comprehensive Exploration
Stripping of Attachments
How removing potentially dangerous email attachments can reduce the chance of malicious files reaching users.
Read on Medium → Enhancing Email Security: Stripping Attachments and Empowering Users
Watch on YouTube → Enhancing Email Security: Stripping Attachments and Empowering Users
Anti-Virus Detection
How anti-malware tools identify and block known or suspicious malicious software.
Read on Medium → Understanding Antivirus Detection: Balancing Signatures and Heuristics for Cybersecurity
Watch on YouTube → Understanding Antivirus Detection: Balancing Signatures and Heuristics for Cybersecurity
Detonation of Attachments
How suspicious files can be opened safely in isolated environments to determine whether they contain malicious behaviour.
Read on Medium → Enhancing Email Security: Detonation of Attachments and Safe Attachments in Office 365 ATP
Watch on YouTube → Enhancing Email Security: Detonation of Attachments and Safe Attachments in Office 365 ATP
Vulnerability Scanning
How automated scanning can help organisations identify known weaknesses across systems and software.
Read on Medium → Safeguarding Your Digital Realm: A Comprehensive Guide to Cybersecurity
Watch on YouTube → Safeguarding Your Digital Realm: A Comprehensive Guide to Cybersecurity
Vulnerability Assessment
How organisations can evaluate identified weaknesses, understand their significance and prioritise remediation.
Read on Medium → Unveiling the Digital Fortress: A Comprehensive Look at Vulnerability Assessment
Watch on YouTube → Unveiling the Digital Fortress: A Comprehensive Look at Vulnerability Assessment
Content Delivery Networks (CDN)
How distributed delivery services can improve website availability and resilience while providing useful security capabilities.
Read on Medium →The Power of Content Delivery Networks (CDNs) in Enhancing Internet Speed and Security
Watch on YouTube → The Power of Content Delivery Networks (CDNs) in Enhancing Internet Speed and Security
Identity & Access
Who can access your systems and what they are allowed to do matters. These topics explain authentication, identity management and the controls organisations use to protect accounts and privileged access.
Mobile Device Management
How organisations can centrally manage and secure phones, tablets and other mobile devices used for work.
Read on Medium → Mobile Device Management (MDM): A Comprehensive Guide
Watch on YouTube → Mobile Device Management (MDM): A Comprehensive Guide
Mobile Application Management
How organisations can control and protect business applications and information on mobile devices.
Read on Medium → Securing Mobile Environments: A Comprehensive Guide to Mobile Application Management (MAM)
Watch on YouTube → Securing Mobile Environments: A Comprehensive Guide to Mobile Application Management (MAM)
Strong Authentication
Why stronger authentication methods, including multi-factor authentication, make it harder for attackers to misuse stolen passwords.
Read on Medium → Strengthening Digital Security: A Deep Dive into Strong Authentication
Watch on YouTube → Strengthening Digital Security: A Deep Dive into Strong Authentication
Identity & Access Management
How organisations manage digital identities and ensure people receive appropriate access to systems and information.
Read on Medium → Demystifying Identity and Access Management (IAM) in Cyber Security
Watch on YouTube → Demystifying Identity and Access Management (IAM) in Cyber Security
Privileged Access Management
How organisations protect and control powerful administrator and other privileged accounts.
Read on Medium → Safeguarding Your Digital Kingdom: An In-Depth Look at Privileged Access Management
Watch on YouTube → Safeguarding Your Digital Kingdom: An In-Depth Look at Privileged Access Management
Third-Party Secure Remote Access
How organisations can provide suppliers and partners with remote access while limiting unnecessary security exposure.
Read on Medium → Navigating the Secure Digital Gateway: A Comprehensive Overview
Watch on YouTube → Navigating the Secure Digital Gateway: A Comprehensive Overview
Out-of-Band Administration
How separating sensitive administrative access from normal user activity can provide additional protection for critical systems.
Read on Medium → Out-of-Band Administration in Information Security: Simplified Explanation
Watch on YouTube → Out-of-Band Administration in Information Security: Simplified Explanation
Managing Cyber Risk
Cybersecurity is ultimately about making informed business decisions. This section looks at how organisations identify, assess, monitor and manage cyber risk, including risks involving suppliers and critical services.
Information Security Strategy
How an information security strategy connects security priorities and investment to the organisation’s wider objectives.
Read on Medium → Safeguarding Digital Assets: A Comprehensive Guide to Information Security Strategy and Incident Response
Watch on YouTube → Safeguarding Digital Assets: A Comprehensive Guide to Information Security Strategy and Incident Response
Service Level Agreements
How clear service expectations and responsibilities can help organisations manage technology and supplier risk.
Read on Medium → Understanding Service Level Agreements (SLAs) in Information Security
Watch on YouTube → Understanding Service Level Agreements (SLAs) in Information Security
Third-Party Cyber Risk Management
How organisations can understand and manage cybersecurity risks introduced by suppliers, partners and service providers.
Read on Medium → Navigating the Cybersecurity Realm: Understanding and Mitigating Third-Party Cyber Risk
Watch on YouTube → Navigating the Cybersecurity Realm: Understanding and Mitigating Third-Party Cyber Risk
Cyber Risk Management
A practical introduction to identifying, assessing and treating cyber risks in line with business priorities.
Read on Medium → Navigating the Digital Landscape: Understanding and Managing Cyber Risk
Watch on YouTube → Navigating the Digital Landscape: Understanding and Managing Cyber Risk
Cyber Insurance
A practical look at what cyber insurance is, what it can cover and why organisations should understand it as part of their wider approach to managing cyber risk.
Read on Medium → Safeguarding Your Digital Frontier: A Comprehensive Guide to Cyber Insurance
Watch on YouTube → Safeguarding Your Digital Frontier: A Comprehensive Guide to Cyber Insurance
Cyber Risk Monitoring & Reporting
How organisations can track cyber risk over time and provide decision-makers with useful information about changing exposure.
Read on Medium → Navigating the Digital Frontier: Understanding and Mitigating Cyber Risks
Watch on YouTube → Navigating the Digital Frontier: Understanding and Mitigating Cyber Risks
Information Classification & Handling
How classifying information helps organisations apply appropriate protection based on its sensitivity and importance.
Read on Medium → Safeguarding Information: A Comprehensive Guide to Information Classification and Handling
Watch on YouTube → Safeguarding Information: A Comprehensive Guide to Information Classification and Handling
Critical Business Service Mapping
How mapping critical services, technology, people and suppliers helps organisations understand dependencies and resilience risks.
Read on Medium → Navigating the Cybersecurity Landscape: A Guide to Critical Business Service Mapping
Watch on YouTube →Navigating the Cybersecurity Landscape: A Guide to Critical Business Service Mapping
Business Impact Assessment
How organisations identify the activities and services that matter most and understand the consequences if they are disrupted.
Read on Medium → Navigating Information Security: Unveiling the Essentials of Business Impact Assessment
Watch on YouTube → Navigating Information Security: Unveiling the Essentials of Business Impact Assessment
Detecting & Responding
Prevention alone is not enough. These topics explore how organisations spot suspicious activity, investigate what is happening and respond effectively when a cyber incident occurs.
Threat Intelligence
How information about attackers, vulnerabilities and emerging threats can support better security decisions.
Read on Medium → Navigating the Cybersecurity Landscape: Unveiling Threat Intelligence for Informed Defense
Watch on YouTube → Navigating the Cybersecurity Landscape: Unveiling Threat Intelligence for Informed Defense
Security Event Logging
Why recording important system and security activity is essential for detecting problems and investigating incidents.
Read on Medium → Safeguarding the Digital Realm: Unveiling the Power of Security Event Logging
Watch on YouTube → Safeguarding the Digital Realm: Unveiling the Power of Security Event Logging
Incident Response
How a structured incident response process helps organisations contain cyber incidents, recover effectively and learn from what happened.
Read on Medium → Demystifying Incident Response in Cybersecurity: Detecting, Triage, Classify, and Respond
Watch on YouTube → Demystifying Incident Response in Cybersecurity: Detecting, Triage, Classify, and Respond
Anomalous Behaviour Detection
How identifying unusual activity can help organisations detect potential compromise or misuse earlier.
Read on Medium → Unraveling Anomalous Behavior Detection in Cybersecurity: A Comprehensive Guide
Watch on YouTube → Unraveling Anomalous Behavior Detection in Cybersecurity: A Comprehensive Guide
Intrusion Detection Systems
How monitoring systems and networks for suspicious activity can provide early warning of potential attacks.
Read on Medium → Navigating the Cybersecurity Landscape: Intrusion Detection Systems (IDS) Unveiled
Watch on YouTube → Navigating the Cybersecurity Landscape: Intrusion Detection Systems (IDS) Unveiled
Intrusion Prevention Systems
How security technology can identify suspicious activity and automatically block or disrupt potential attacks.
Read on Medium → Safeguarding Networks: A Comprehensive Look at Intrusion Prevention Systems (IPS)
Watch on YouTube → Safeguarding Networks: A Comprehensive Look at Intrusion Prevention Systems (IPS)
Deception Technology
How decoy systems and information can help detect attackers and reveal malicious activity inside an environment.
Read on Medium → Unveiling the Art of Deception in Cybersecurity
Watch on YouTube →Unveiling the Art of Deception in Cybersecurity
Encrypted Traffic Analysis
How organisations can look for suspicious patterns in encrypted network traffic without necessarily decrypting the content.
Read on Medium → Navigating the Landscape of Encrypted Traffic: Unveiling the Essence of Encrypted Traffic Analysis
Watch on YouTube → Navigating the Landscape of Encrypted Traffic: Unveiling the Essence of Encrypted Traffic Analysis
Cyber Incident Management
How organisations coordinate people, decisions and actions throughout a cybersecurity incident.
Read on Medium → Cyber Incident Management: A Comprehensive Overview
Watch on YouTube → Cyber Incident Management: A Comprehensive Overview
Forensic Investigations
How digital forensic techniques help organisations understand what happened during a cyber incident and preserve useful evidence.
Read on Medium → Forensic Investigations and Cybersecurity: Simplifying Digital Detective Work
Watch on YouTube → Forensic Investigations and Cybersecurity: Simplifying Digital Detective Work
Resilience & Recovery
Security also means being able to continue operating and recover when something goes wrong. This section covers continuity, crisis management, backups, disaster recovery and practical testing.
Cyber Crisis Management
How organisations manage leadership, communication and business decisions during a serious cyber event.
Read on Medium → Navigating the Cyber Storm: An In-Depth Look at Cyber Crisis Management
Watch on YouTube → Navigating the Cyber Storm: An In-Depth Look at Cyber Crisis Management
Crisis Management Exercising
Why practising realistic crisis scenarios helps leaders test plans, decisions and coordination before a real incident occurs.
Read on Medium → Navigating the Waters of Crisis Management and Cybersecurity Preparedness
Watch on YouTube → Navigating the Waters of Crisis Management and Cybersecurity Preparedness
Crisis Management Training
How preparing leaders and teams for their roles can improve decision-making during disruptive cyber events.
Read on Medium → Navigating Business Storms: The Essentials of Crisis Management Training
Watch on YouTube → Navigating Business Storms: The Essentials of Crisis Management Training
Business Continuity Plans
How business continuity planning helps organisations keep critical activities running during disruption.
Read on Medium → Navigating Rough Waters: A Guide to Business Continuity Plans
Watch on YouTube → Navigating Rough Waters: A Guide to Business Continuity Plans
Backups
Why good backups remain one of the simplest and most important ways to protect an organisation from data loss and cyber incidents.
Read on Medium → Safeguarding Your Digital World: Understanding Backups and Cybersecurity Basics
Watch on YouTube → Safeguarding Your Digital World: Understanding Backups and Cybersecurity Basics
IT Disaster Recovery Plans
How disaster recovery plans define the steps needed to restore technology and services after a major disruption.
Read on Medium → Navigating the Digital Storm: Understanding IT Disaster Recovery Plans
Watch on YouTube → Navigating the Digital Storm: Understanding IT Disaster Recovery Plans
IT Disaster Recovery Testing
Why regularly testing recovery arrangements is necessary to know whether systems and data can actually be restored.
Read on Medium → Navigating the Waters of Information Technology Disaster Recovery Testing
Watch on YouTube → Navigating the Waters of Information Technology Disaster Recovery Testing
Scenario-Based Technical Testing
How realistic technical scenarios can test whether security controls, teams and recovery arrangements work as expected.
Read on Medium → Navigating the Landscape of Scenario-Based Technical Testing in Cybersecurity
Watch on YouTube → Navigating the Landscape of Scenario-Based Technical Testing in Cybersecurity
