GRC – NetwerkLABS

NIS2 to ISO 27001:2022 Mapping Table

Complete Control Mapping for Belgian Organizations This comprehensive mapping shows how ISO 27001:2022 controls align with NIS2 Directive requirements, helping organizations leverage existing ISMS implementations for NIS2 compliance. Risk Management Measures 1. Policies on Risk Analysis…

Bharath Narayanasamy NIS2

GRC NIS2 | CyFUN

CyFUN Implementation: A Practical Roadmap

Framework basis: CyberFundamentals (CyFUN) — aligned with NIST CSF and NIS2 objectivesDuration: ~9–12 months initial cycle (Depends on Organizations)Approach: Risk-based, phased rollout with evidence collection from day one 🔹 Phase 1 — Initiation & Scoping ObjectiveKey…

Bharath Narayanasamy CyFUN, NIS2

GRC NIS2 | CyFUN

NIS2: A Complete Article-by-Article Reference

NIS2 Directive: Complete Article-by-Article Guide — TheCyberMatrix TheCyberMatrix GRC & Compliance EU Directive 2022/2555 NIS2: A CompleteArticle-by-Article Guide Category: Regulatory Compliance Coverage: All 46 Articles Applies to: Essential & Important Entities across the EU Effective: October…

Bharath Narayanasamy NIS2

GRC ISO/IEC 27001

ISO 27001 Annex A Controls: A Practitioner’s Guide to the 93 Controls

Most ISO 27001 guides read like a copy of the standard with prettier formatting. This one is written from the practitioner's side of the table — the side where you're the consultant or ISMS manager who…

Bharath Narayanasamy ISO27001

Vulnerability Scanning DETECT GRC

Vulnerability Management: FARADAY

Faraday: Open Source Vulnerability Manager Faraday is a powerful open-source vulnerability management platform designed to help cybersecurity teams streamline their pentesting, vulnerability assessment, and remediation processes. Built with a collaborative and automation-driven approach, Faraday enables security…

Bharath Narayanasamy vuln, faraday

GRC

GRC 101: SimpleRisk Core (Community Edition)

What is SimpleRisk CORE (Community Edition)? SimpleRisk CORE (Community Edition) is an open-source Governance, Risk, and Compliance (GRC) tool designed to help organizations identify, assess, and manage risks effectively. It provides a structured framework for risk…

Bharath Narayanasamy GRC, SimpleRisk

DETECT PROTECT RESPOND

SNORT 101 (Part 03)

Snort Rules Each rule should have a type of action, protocol, source and destination IP, source and destination port and an option. Remember, Snort is in passive mode by default. So most of the time, we…

Bharath Narayanasamy snort

DETECT RESPOND

SNORT 101 (Part 02)

SNORT in IDS/IPS mode IDS/IPS mode with parameter "-A" There are several alert modes available in snort; console: Provides fast style alerts on the console screen. cmg: Provides basic header details with payload in hex and text format. full: Full…

Bharath Narayanasamy snort

INFOSEC Governance and Regulation NIST

NIST Cybersecurity Framework (CSF) and ISO/IEC 27001

NIST Cybersecurity Framework (CSF) and ISO/IEC 27001 NIST CSF Functions and Categories to ISO/IEC 27001 Annex A Controls Identify (ID) Asset Management (ID.AM): A.8 (Asset Management) Business Environment (ID.BE): A.5 (Information Security Policies) Governance (ID.GV): A.6…

Bharath Narayanasamy NIST, 27001

PROTECT

Linux System Hardening

Create a GRUB password grub2-mkpasswd-pbkdf2 PBKDF2 stands for Password-Based Key Derivation Function 2. It is important to note that adding a password for GRUB is not available for systems deployed using cloud service providers (such as our Linux…

Bharath Narayanasamy