Profile

CommunityPlatform_1350x900.jpg

Roeland Reijers

Edit My Profile

My Content

1 to 11 of 11 total

RE: Blocking ChatGPT

Posted By Roeland Reijers 02-15-2023 01:59:45 PM
Found In Egroup: Cybersecurity \ view thread
Blocking non-malicious sites or services is a no go for us. Even fake newssites or TOR we cannot (and will not) block, due to some extensive research on fake news that is going on and researchers need to use TOR to anonymously do research in several high sensitive areas or in high risk areas of the world. ...

RE: Free National Cybersecurity Awareness Month video

Posted By Roeland Reijers 09-13-2022 07:44:42 AM
Found In Egroup: Cybersecurity \ view thread
Hi Neal, That's a great offer. I'm very interested. With kind regards, Roeland

RE: Looking for recommendations for a SIEM Cloud Solution

Posted By Roeland Reijers 06-15-2022 11:20:00 AM
Found In Egroup: Cybersecurity \ view thread
Totally!

Security logdata or alerts to SIEM

Posted By Roeland Reijers 06-14-2022 02:29:00 PM
Found In Egroup: Cybersecurity \ view thread
Hi, I have a small discussion with my SOC (and IT management). My view is that all (usescase based of course) security logdata should be analyzed in our SIEM, to be able to correlate events to determine if an event is a security incident or not. IT and SOC say that all they need is an alert, ...

RE: Critical Log4j vulnerability - CVE-2021-44228

Posted By Roeland Reijers 12-17-2021 01:22:00 PM
Found In Egroup: Cybersecurity \ view thread
Hi Alex, I think this list is not a list to share incident response or IoC information. For me it is more about sharing knowledge, help each other out with policies, best practices etc. I use other channels for IoC's and incident response. I made three observations. I am wondering if you have the ...

RE: Policy Documents in support of implementing NIST 800-53

Posted By Roeland Reijers 11-22-2021 01:27:00 AM
Found In Egroup: Cybersecurity \ view thread
Hi Mike, Thanks for sharing, that's really great. With kind regards, Roeland

RE: MFA requirements during finals?

Posted By Roeland Reijers 11-17-2021 02:36:00 AM
Found In Egroup: Cybersecurity \ view thread
Hi Jonathan, I am not aware of these delays, I need to check that. We use MS MFA and a MFA solution provided by our NREN. That is based on open source PHP Symphony and OpenConext. Kind regards, Roeland

RE: MFA requirements during finals?

Posted By Roeland Reijers 11-16-2021 02:05:00 PM
Found In Egroup: Cybersecurity \ view thread
Pressed send to fast. And to finsh my email... Hi Jonathan, For employees/teachers: In case resets don't work, or are not fast enough, we have an emergency procedure, in which MFA can be disabled for that user for a certain time. Not completely happy yet with the procedure, but a teacher ...

RE: MFA requirements during finals?

Posted By Roeland Reijers 11-16-2021 02:01:00 PM
Found In Egroup: Cybersecurity \ view thread
Hi Jonathan, For employees/teachers: In case resets don't work, or are not fast enough, we have an emergency procedure, in which MFA can be disabled for that user for a certain time. Not completely happy yet with the procedure, but a teacher that is unable to teach is worse than not having MFA ...

RE: MFA Implimentation

Posted By Roeland Reijers 10-01-2021 06:48:00 AM
Found In Egroup: Identity and Access Management \ view thread
Hi Paul, It's called SURF Secure ID, developed by our NREN (SURF). For LoA2 remote or in-person identity proofing is required (NIST 800-63.3. Tabel 5-1). It is not that MS MFA is unsafe in use, it is the identification process, where there is no absolute guarantee that the person that registers ...

RE: MFA Implimentation

Posted By Roeland Reijers 09-30-2021 01:54:00 PM
Found In Egroup: Identity and Access Management \ view thread
Hi William, How long do you allow MFA to be good for before requiring users to authenticate/MFA again? This depends a little bit. For example access to web based services, people need to login again when the session is closed, with a maximum of 24 hours. Local apps on either desktop ...