Perspectives
Opinion and analysis from the OKIOK team on security practice, regulation, and the decisions organizations actually face.
27 articles
Under the hood of the new OKIOK website
No more WordPress. The new okiok.com is a static Astro 7 site, deployed as code, with a writing workflow an AI assistant can follow.
Testing NotebookLM’s audio overview feature
A few days ago, I discovered NotebookLM and its audio overview feature and I was blown away! I like to listen to podcasts… a lot.
When I Was Hacked by My Own Company
A distressed man that has been phished, generated with the assistance of AI.
The OKIOK MDR Advantage: Elevating SME Security
OKIOK MDR solution provides 24/7 monitoring of your networks, endpoints, and cloud environments to detect, analyze and respond to modern cyber attacks so you…
The Elasticsearch license saga
As you may know from my posts, I like Elasticsearch. However, Elastic, the Elasticsearch company, recently announced it’s decision to change the license of…
Why the SolarWinds hack matters
Maybe you saw the news on the SolarWinds hack. If you didn’t, you should follow me on Twitter: https://twitter.com/TristanDostaler In this post I want to…
Zero Trust Architecture – What it is and what I think of it
I have been reading the Zero Trust Architecture (ZTA) publication from the NIST for quite some time now.
User experience versus security, that’s the challenge!
More and more companies are pointing out that the user support service regularly receives a large volume of requests relating to users who encounter…
The challenges of modern times in information security.The target is now mobile!
Although most employees use network or cloud folders to back up business documents, some employees may back up files locally on their devices (computer…
Understanding online voting – Le Devoir
Online voting would not substantially raise turnout among young voters, and it carries security issues that have to be faced squarely.
Imperfect Security
The world of computer security is always evolving, from anti-virus and firewall, all the way to DDoS protection and monitoring networks using AI, the…
Security in the Era of Cyber Conflicts
Last week was the annual ASIMM Symposium, where several cybersecurity experts discussed fascinating and disturbing news topics.
You believe your emails are safe?
In a society where virtual exchanges are increasingly predominant, methods of identity theft and counterfeiting have evolved in parallel with the means of…
Interesting Article : “New Financial Regulation Forces Cyber Security into the Board Room”
In this article published by SECURITY WEEK, learn more about the new regulation implemented by the New York State Department of Financial Services requiring…
Cybersecurity and the Canadian Armed Forces
A Radio-Canada article showing that cybersecurity is more topical than ever, and that it has to be taken seriously.
BYOR : Dark side of the cloud (Part 2)
In my last post, I presented the different terms and taxonomy related to information security investment and cost optimizing strategy.
BYOR : Cybersecurity Responsibility and Investment (Part 1)
Studying the global trends of information security, throughout the last decade, shows a continuous raise of cyberattack’s frequency, severity and impacts.
BYOR: Bring Your Own Risk (Introduction)
Montreal, February 5th, 2016. The BYOR series, stands for Bring Your Own Risk and are aimed at providing a repository of multiple articles related to the…
The Internet of Things: a secure innovation?
Tens of billions of connected objects are expected by 2020. Ambient intelligence is in fashion, but what about its security?
Study on the legal implications of the public sector’s use of cloud computing
A 200-page study on the legal implications of cloud computing for the Government of Québec, published by the Cyberjustice Laboratory.
The digital forensics expert: the litigator’s new right hand?
Almost every proceeding now involves digital evidence. Without a clear process for handling it, a company’s best evidence can be ruled inadmissible.
Biometrics at La Ronde: some legal considerations
A fingerprint system was installed for season passes without prior validation. Four questions any organization should be able to answer first.
Reconciling cloud computing with Québec law
Québec case law is silent on the statutes that apply to cloud computing. The main private-sector provisions, and the risks of sending data abroad.
Why security policies matter in business
Many companies apply no security policy and do not know the extent of the information resources they hold. Four reasons that is worth fixing.
Does encrypted personal information remain personal?
As long as there is a serious possibility of linking encrypted information back to an individual, it should be treated as personal information.
Canada’s new anti-spam law: how to prepare
CASL will change how businesses handle commercial electronic messages, and the monetary penalties are severe. What to put in place now.
A cloud with your coffee?
Free storage and computing power are never really free. A few questions worth asking before entrusting your digital treasures to anyone.