ISM Logs

BSI 200-1 defines general requirements for an ISMS, targeting management. It's compatible with the ISO 27000 series and is considered well-structured and easy to understand. Key characteristics: Target audience: Management Defines general requirements for an ISMS Compatible with...

Quiz: ISM / Standards & Frameworks I (ISO, BSI) | updated: Jul 30, 2026

Standards provide proven frameworks, reduce risk through best practices, enable certification for market trust, and ensure regulatory compliance. Key benefits include: Proven methodology — No need to reinvent the wheel; leverage decades of industry experience Common language — S...

Quiz: ISM / Standards & Frameworks I (ISO, BSI) | updated: Jul 30, 2026

Defensive/blue team protects and reacts — it builds resilience using monitoring and controls; offensive/red team tests and simulates threats — it hunts for weaknesses using attacker techniques, ethically. Think of it as castle guards versus a hired team of friendly burglars. The...

Quiz: ISM / Threat & Impact Modelling | updated: Jul 30, 2026

(1) Identify your industry, (2) identify your core/high-value asset, (3) identify a relevant threat actor using the Threat Matrix, (4) develop a realistic adversary scenario with their tactics/techniques/procedures, (5) estimate the potential damage, (6) determine current and des...

Quiz: ISM / Threat & Impact Modelling | updated: Jul 30, 2026

By picking a real threat group from the ATT&CK "Groups" knowledge base and walking through the specific tactics, techniques and procedures (TTPs) that group actually uses. MITRE ATT&CK catalogues named adversary groups (APTs and criminal crews) and, for each, the techniques they...

Quiz: ISM / Threat & Impact Modelling | updated: Jul 30, 2026

Prevention stops the attack (segmentation, access management, multi-factor authentication); detection catches what slips through (XDR monitoring, run by the SOC); response contains and recovers (a rehearsed incident-response plan, run by the CSIRT). * Defence in depth — each lay...

Quiz: ISM / Threat & Impact Modelling | updated: Jul 30, 2026

BSI 200-2 (IT-Grundschutz Methodology) provides practical guidance for building and operating an ISMS, including creating a security concept and selecting appropriate security measures. BSI 200-2 concretizes BSI 200-1 by describing: IT security management tasks — Roles and respo...

Quiz: ISM / Standards & Frameworks I (ISO, BSI) | updated: Jul 30, 2026

The BSI 200-x series modernized the structure: 200-1 expanded from 4 to 6 phases, and 200-2 reorganized from 5 technical layers to process-oriented and system-oriented building block layers. BSI 100-1 vs 200-1 (ISMS): BSI 100-1 (old) BSI 200-1 (new) 1. Initiate security pr...

Quiz: ISM / Standards & Frameworks I (ISO, BSI) | updated: Jul 30, 2026

The Cyber Kill Chain is a short, linear 7-stage model of an intrusion; MITRE ATT&CK is a large, detailed catalogue of attacker tactics organized into stages but not strictly sequential. * The Cyber Kill Chain — seven sequential intrusion stages, Reconnaissance through Actions on...

Quiz: ISM / Threat & Impact Modelling | updated: Jul 30, 2026

Because the industry you operate in shapes which assets are valuable, which threat actors target you, and which attack types and regulations apply — it sets the context for everything that follows. Examples of industries on the list include automotive, healthcare, manufacturing,...

Quiz: ISM / Threat & Impact Modelling | updated: Jul 30, 2026