mobile-logo
 

Cyber Security Blog

Logo: stylized green line drawing of the Sydney Opera House with the text 'Information Security Manual (ISM)' underneath.
18 Aug

A detailed guide to Information Security Manual (ISM) Australia

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, ISM
Comments

Australia's cyber security environment continues to evolve as government agencies, critical infrastructure operators, large enterprises, and other organisations become increasingly dependent on digital systems. Cloud platforms, operational technology, remote access, third-party services, connected infrastructure, and emerging technologies have created significant opportunities, but they have also expanded the cyber attack surface.   For organisations operating in this environment, cyber security cannot be managed through isolated technical controls. It...

Read More
OCTAVE Risk Assessment
14 Aug

Everything you need to know about OCTAVE risk assessment

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, OCTAVE
Comments

A vulnerability scan can tell you which systems have weaknesses. A threat intelligence platform can tell you which attacks are increasing. Neither necessarily tells you which information assets pose the greatest risk to the business or what you should address first.   That's the problem the OCTAVE framework was made to address.   The Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) provides a structured approach for identifying an...

Read More
Green database stack with two gears, symbolizing data management and configuration.
14 Aug

A detailed guide to configuration management database (CMDB)

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance
Comments

Modern organizations depend on increasingly complex technology environments. Cloud infrastructure, SaaS applications, virtual machines, endpoints, databases, network devices, APIs, containers, and third-party services may all work together to deliver a single business service.   As this environment grows, a basic asset list is no longer enough.   IT, security, risk, and compliance teams need to understand not only what technology exists, but also how individual components are configured, who...

Read More
Software Asset Management
14 Aug

A detailed guide to software asset management

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance
Comments

Software has become one of the most important assets inside modern organizations. From operating systems and productivity platforms to cyber security tools, cloud applications, development software, artificial intelligence services, and specialized enterprise platforms, businesses can depend on hundreds or even thousands of software products to operate every day.   That dependence creates a significant management challenge.   Organizations need to know what software they use, who has access to...

Read More
Logo: green circular badge with a crescent and stars above a white lower half, paired with bold green text 'MAS TRM'
11 Aug

Singapore MAS Technology Risk Management Guidelines: How to comply

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, MAS TRM
Comments

Singapore has established itself as one of the world's leading financial and technology hubs. Banks, insurers, payment providers, fintech companies, capital markets firms, and other financial institutions operate within a highly digital environment where cloud services, APIs, mobile platforms, artificial intelligence, and third-party technology providers are increasingly important.   This digital transformation creates enormous opportunities, but it also introduces technology and cyber risks that can affect customers,...

Read More
FAIR Risk Management Framework
11 Aug

FAIR and ISO 31000: How the frameworks work together

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, FAIR, ISO 31000
Comments

Organizations often use multiple frameworks to manage risk. The challenge arises when teams treat each framework as a separate process, resulting in duplicate assessments, competing terminology, and disconnected risk reporting.   FAIR and ISO 31000 can work together without creating another parallel risk program. ISO 31000 provides principles and a structured approach for managing risk across the organization, while FAIR provides a quantitative method for analyzing information...

Read More