forumNew topic

Cybersecurity

Attack surface, penetration testing, incident response.

2,991 topics · 44,743 messages
New topic

Latest topics

TopicReplyViewsLast post

They asked for a "pentest / penetration test" — what does it mean, and does a small business like ours really need one?

Serkan G***·last month#penetration test#pentest#information security#cybersecurity
72replies
7.4Kviews
Rabia Ç*** · 14 days ago

They brought up "penetration testing" — is it really necessary for our scale, what does it actually do?

Doruk Ş***·16 days ago#penetration test#information security#cybersecurity#website
34replies
5.4Kviews
İsmail Ş*** · 14 days ago

Public tender now requires compliance with the penetration testing circular, what do we need at our scale?

Aslı G***·16 days ago#penetration testing circular#public tender#information security#tse certificate
36replies
5.6Kviews
Ufuk V*** · 14 days ago

How does the penetration testing process work, and what do we need to prepare internally beforehand?

Kübra M***·15 days ago#penetration testing#penetration test#information security#scoping
36replies
2.2Kviews
Necati T*** · 14 days ago

Do honeypots and canary tokens make sense for a small business, are there risks?

Polat Ç***·21 days ago#honeypot#cybersecurity#honeytoken#server security
41replies
22.1Kviews
Leyla A*** · 14 days ago

We're an SME: is penetration testing legally mandatory for us or purely voluntary?

Pınar B***·15 days ago#penetration test#smb security#legislation#vendor audit
44replies
6.7Kviews
Sinan B*** · 14 days ago

Granting remote incident response access to a vendor — what belongs in the access agreement?

Polat G***·16 days ago#incident response#access permission#contract#information security
32replies
5.1Kviews
Vahide A*** · 14 days ago

How can we do our own site security testing, and what should we check before a pentest?

Yavuz·17 days ago#website security testing#penetration test#web security#vulnerability scanning
44replies
7.8Kviews
Yavuz T*** · 14 days ago

Our client told us the NIS2 directive affects us, what exactly is this and is it mandatory in Spain?

Tuğçe T***·18 days ago#nis2 directive#cybersecurity#european union#spanish regulations#supply chain
36replies
5.7Kviews
Mustafa P*** · 14 days ago

Does the NIS2 Directive actually apply to our company, and how do we verify it?

Beyza K***·17 days ago#who nis2 applies to#cyber regulations#smb compliance#european union
32replies
5.2Kviews
Meryem K*** · 14 days ago

What is the cybersecurity compliance required in Saudi tenders, and how much does it cost?

Veli·21 days ago#cybersecurity#tender specifications#security compliance#information security
47replies
46.3Kviews
Gamze D*** · 14 days ago

Major enterprise client asked for ISO 27001 certification, can we handle it ourselves without hiring a consultant?

Ebru O***·19 days ago#iso 27001 certification#information security#audit#consulting#certification
46replies
4.9Kviews
Uğur A*** · 14 days ago

We received a ransomware warning for our server, what should we prep before it hits us?

Burak O***·19 days ago#ransomware#data backup#server security#cyberattack#disaster recovery
31replies
3.8Kviews
Polat A*** · 14 days ago

How should we clean three years of customer data before an audit under the Saudi personal data protection law?

Levent A***·21 days ago#data protection#saudi arabia#pdpl#customer data#data disposal
40replies
43.9Kviews
Necati B*** · 14 days ago

Our systems were encrypted by ransomware — can I get our files back without paying the ransom?

Oya O***·20 days ago#ransomware file recovery#ransomware#digital forensics#data recovery
34replies
7Kviews
Kadir Ç*** · 14 days ago

Approved for Phase B of the Cyber PME program: how does it work and what do we get out of it?

Yasemin K***·18 days ago#cyber pme stage b#cybersecurity#france smb#security incentive
32replies
2.5Kviews
Fatih A*** · 14 days ago

Reviewing inherited code — where to start with an OWASP Top 10 code review?

Mustafa E***·23 days ago#source code#code review#security vulnerability#software security
39replies
3.5Kviews
Tülay Ç*** · 14 days ago

Saved trips piling up on Google Maps — should I keep them as personal data, and how do I delete them?

Tuğçe Y***·22 days ago#google maps#location history#personal data#device security
37replies
8Kviews
Nuri U*** · 14 days ago

We've been asked to send logs to a SOC — for our size, which team or role should handle this?

Barış S***·21 days ago#soc#information security#log management#system administration
47replies
6.6Kviews
KORİ · 14 days ago

We got hit by ransomware — writing about the process and lessons learned

Orhan·28 days ago#incident response#backup#lesson
36replies
81.2Kviews
Mert P*** · 15 days ago