3 ms·

I'm not seeing details of how, though. Was it some leaked tokens? Employee credentials? Also shouldn't this be called a security incident rather than event. h

I'm not seeing details of how, though. Was it some leaked tokens? Employee credentials? Also shouldn't this be called a security incident rather than event. https://advisera.com/27001academy/blog/2018/12/03/iso-27001-information-security-event-vs-incident-vs-non-compliance/ https://advisera.com/27001academy/blog/2018/12/03/iso-27001-...

Godel_unicode 4y ago
Everyone uses those words differently and no two groups agree. Event is often used since it’s the most generic. Also, many companies have requirements around their use of certain words and this might not meet their lawyers definition of incident.
Vanit 4y ago
A company I previously worked at would call this a CRI; critical room for improvement.
- dgb23 4y ago
  A good reminder to use fun and absurd names for things. Life's too short.
- int0x2e 4y ago
  A former boss used to use the term OFE - Opportunity For Excellence :-)