Demystifying Two Different Worlds: ISO 27001 and Red Teaming
On 19 August 2021, Privasec’s team conducted a webinar to uncover the myths behind ISO 27001 and Red Teaming (CORIE & AASE). Check out the event highlights and recording here!
CORIE
A Beginner’s Guide to CORIE
The CORIE Framework – is a new approach to assessing cyber maturity and resilience and you definitely need to be investigating it this year.
Cyber Resilience Testing Under the CORIE Framework
The Council of Financial Regulators (CFR) released a framework in December 2020 that
is used to build red team scenarios to test the level of Australian financial services industry’s cyber resilience.
The Cyber Operational Resilience Intelligence-led Exercises (CORIE) framework is a pilot programme of exercises that will mimic the Tactics, Techniques and Procedures (TTPs) of real-life adversaries, creating and utilising tools, and using techniques that may not have been anticipated and planned for. Read more to understand how the CORIE framework could help Financial Institutions (FI) stay competitive and secure by leveraging an unbiased view, and by third-party providers mimicking real-world Advanced Persistent Threats (APTs).
New CORIE Framework by the Council of Financial Regulators for APRA-regulated financial institutions
A new framework by the Council of Financial Regulators requires APRA-regulated financial institutions to attack themselves in a bid to uplift their cyber preparedness, as APRA orders urgent audits against CPS 234.
The #CORIE framework that has been launched will require banks, super funds and other financial institutions to organize independent red team attack simulations.