4 ms·

There is an entire ISO norm dealing with this btw. ISO 27k family to be precise.

• bigiain 5y ago
  I have never actually seen any of these, but my gut reaction reading that was to assume that ISO standards are so slow and committee-driven that they're probably way to far behind current threat models in as fast a moving field as consumer computer security. (Having said that, the low hanging fruit of "Update your software/OS promptly, use strong unique passwords and a password manager, use 2FA where available, use full disk encryption where available." has been valid and relevant advice for well over a decade, so...)
  • staticassertion 5y ago
    The're not really far behind so much as they cover a whole bunch of useless shit and the're not particularly prescriptive.