Information Security
Integrating NIS2, ISO/IEC 27001, and KSZI requirements
Combining NIS2 directives, ISO/IEC 27001 processes, and KSZI requirements without redundant workflows. A practical appro...
// author
Oleh Kravchenko
Cybersecurity Engineer
Specializes in protecting critical infrastructure and enterprise systems: Zero Trust models, access management, DLP, ISO/IEC 27001 compliance. Over 10 years designing and auditing information security systems.
47 articles
Cybersecurity & Compliance
Information Security
Cybersecurity as a discipline: threat modeling, architecture, and business risks
Moving from chaotic software procurement to systematic cyber resilience through threat modeling, architectural controls,...
Information Security
How to detect cloaking on a compromised website
Cloaking hides signs of website compromise by displaying spam content only to search bots. We analyze the threat mechani...
Information Security
Offboarding in 24 hours: securing access across IAM, VPN, SaaS, and service accounts
A practical guide for CISOs and IT administrators on turning employee termination into a controlled security process wit...
Information Security
Zero Trust for legacy ERP without rewriting: IAP, PAM and microsegmentation
How to secure legacy ERP systems without rewriting code. Implement Zero Trust using IAP, PAM, and microsegmentation to m...
Information Security
Managing mass URL injection and SEO threats
A sudden surge in indexed URLs may signal a security breach or a technical configuration issue. Learn how to localize th...
Information Security
Unknown sitemap in Google Search Console: legacy CMS or compromise indicator
The appearance of an unauthorized sitemap in GSC is a critical signal of potential compromise via content injection. Why...
Information Security
SEO after site hack: removing spam URLs from index
Server cleanup does not remove indexed hacked content. Learn how to perform a URL audit, implement correct HTTP status c...
Information Security
Casibom in Search Console: detecting corporate website compromise
Unusual gambling queries in Google Search Console indicate website compromise via cloaking. Learn how to detect hidden S...
Information Security
Assessing infrastructure readiness for cyberattacks: beyond compliance
Building real enterprise cyber resilience in the NIS2 era, avoiding paper audit traps, and protecting infrastructure thr...
Information Security
Zero Trust for Hybrid Infrastructure: Where the Network Perimeter No Longer Works
The transition to hybrid infrastructures has rendered the traditional network perimeter obsolete. Oleh Kravchenko explai...
Information Security
From compliance to proactive cybersecurity for the public sector
CERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public o...
- ← Previous
- 1
- 2
- 3
- 4
- Next →