18 - IT Trust questions

18 - IT Trust questions

How does your IT-Trust landscape look like now?

  • Are we facing with unmanaged risks?
  • Are all our web server certificates up to date and valid?
  • Are all our communication certificates up to date and valid?
  • Are all our code signing certificates up to date and valid?
  • Which one will retire when?
  • Do we have enough time for exchange?
  • Which certificates are weak and need to be renewed?
  • Are all SIEM and APT systems synchronized with our valid trust landscape?
  • I will like to exchange all Apache certificates which expires in the net 30 days tomorrow. How many systems are affected?
  • I would like to remove a specific country from my trusted list, how many programs and computers are affected?
  • Which risks does my Operating systems contain?
  • Which risks does my partner/supplier landscape contain?
  • Do we have unknown software on our computers?
  • How many certificates do we have in total?
  • How do we mange this, manually or automated?
  • Are we prepared for IOT and Industry 4.0? Which steps are missing?
  • Are we using the optimal infrastructure and devices?
  • How secure is our network and our company?

How long do you need to answer all these questions?

 

Answers by your IT-responsible or with Dashboards by www.certnkey.com

 

CAVT product page online with demo video

CAVT product page online with demo video

Complex Algorithmic Vision Technologies (CAVT)

Data-Warehouse GmbH has launched its latest product portfolio for complex video analysis.

 

You can find the new page here:Complex Algorithmic Vision Technologies (CAVT)

PCert Version 3 Alpha available for download to our partners

PCert Version 3 Alpha available for download to our partners

Our brand new version of PCert for Pinning Cryptografic Elements and Remidiate Technology is advancing into a major release. With a fresher GUI and a bunch of new functionalities like:

- Automated forwarding of scanning results via REST to other services.
- Export scans to XML.
- Meshing of remote agents to simplify rollout with only one deployable.
- Online analysis of all rolled out agents.
- Policies enhancement for more automation with fewer clicks.
- enhanced subnet scanning without agents
- more results within less time (up to 3 times faster scans)
- SaaS Version with multitenant management

and several more fantastic features. 

Webinar 30.6.2020, 11:00 "Certificates and keys in the context of cyber security"

Webinar 30.6.2020, 11:00 "Certificates and keys in the context of cyber security"

Registration and information at: https://cybersicherheitsrat.de/2020/06/18/webinar-zertifikate-und-schlussel-im-kontext-der-cybersicherheit/

What is the status of your certificates and keys in your area of responsibility? Do you still have them all under control?

What legal/compliance requirements do you have to meet?
What is the status of your networks? What is the status of your servers and devices?
What is the status of your delivered products? Do you deliver vulnerabilities?

Do you have a complete overview?
Can you prove it?

Now that the IT-SA has been canceled, I am presenting our latest innovation for the first time, which will be important for corporations and large environments. This functionality provides the basis for a large number of new security functions that we will gradually introduce. In this way, we are creating additional options and flexibility for companies and reducing their complexity to a minimum. Keys and certificates as the basis of cyber security are just the beginning of the journey.

Cybersecurity, Made in Germany.

 

Certificates and keys form the basis of almost every security product or security strategy. Nevertheless, they often lead a shadowy existence in the context of cyber security and are considered a special topic for nerds. In practice, however, services unfortunately fail far too often because of certificates, even though these areas are supposedly managed (ISO 27001, SOX, GDPR, NATO RM, etc.). Faulty certificates can also be used to break into systems, encrypt data, intercept communications, exploit state privileges for espionage and deliver insecure or non-compliant products.

Accordingly, the strategic consideration of computer certificates and keys represents a major challenge for decision-makers and IT experts. However, the management methods used to date have been unstructured and based on manual handling and reactive management. Newer services in established structures make the task even more difficult. In view of this challenge and the clearly quantifiable costs arising from incorrect or mismanaged certificates, automated and depersonalized management methods can clearly provide a remedy here and lead to cost savings with increased security gains for companies.

In this joint webinar by the Cyber Security Council Germany and its member Data Warehouse, you will therefore receive an overview of the basics of cyber-secure, trustworthy and automated certificate management. Using examples, you will learn more about the impact on cyber security and gain the necessary overview for individual decision-making. Practical examples and current contexts will be demonstrated live. A special focus will also be placed on computer certificates, which have received little attention to date and act as abasis for trust and authorizations. Although these certificates are present in large numbers in every computer (client, server, devices) and form the basis for the encryption of devices and communication between participants, these trust relationships have not been managed to date and represent a major security risk for companies.

Postponed: X.509 workshop for decision-makers

Postponed: X.509 workshop for decision-makers

The workshop "IT transformation: minimizing cyber risks through key management" on 10.05.2019 is aimed at decision-makers. The aim is to convey the basics and provide support for strategic decisions regarding information security in the areas of communication, digitalization and IoT.

The workshop "IT transformation: minimizing cyber risks through key management" is aimed at decision-makers. The aim is to convey the basics and provide support for strategic decisions relating to information security in the areas of communication, digitalization and IoT.

Topics of the workshop:

  • Is IT transformation (IoT, Industry 4.0) sensible or even possible without an IT trust?
  • Why is digital key management just as important as real user access?
  • Risks for or in your company
  • How can I treat them? What is the state of the art?
  • What requirements for my company arise from GDPR, MaRisk, SOX, ISO 27001?
  • How can I prove compliance or minimize liability risks?
  • Which decisions are necessary, which are optional and with what consequences?

The 4-hour workshop in Munich (Ottobrunn) deals with these questions, with which decision-makers and managers can carry out their individual risk/opportunity assessment and become capable of making decisions together with the technical team.

Date

TBA

Venue

Data-Warehouse GmbH
Beethovenstr. 35
85521 Ottobrunn