Does your org have a policy banning TikTok specifically on contractor devices?

Security Strategy & RoadmapThreat & Vulnerability Management

Yes, specifically TikTok32%

Yes, specifically, but not only TikTok41%

No24%

Don’t know…2%

476 PARTICIPANTS
24.5k viewscircle icon2 Comments
Sort by:
Director of IT in Software2 years ago

An Org’s control should be limited to the devices they purchase for employees / contractors.

Business Development Manager in IT Services2 years ago

India has already banned TikTok countrywide so we don't really need it.

Content you might like

What are the main 10 features requested in a GRC platform?

Read More Comments

Seeking input: Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models. 
Scope includes Environment Setup: 
Cloud provisioning, configuration, testing.
Connectors/Parsers: Custom data source integration.
Content Development: Rules, use cases, threat feeds.
Performance Tuning: Query/index optimization.
Runbooks: Operational procedures.

Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation. 
Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.

How likely are you to use Kaspersky’s new online cybersecurity training program to enhance your team’s skills?

Very likely4%

Likely41%

Moderately likely25%

Moderately unlikely9%

Unlikely13%

Very unlikely6%

Unsure

View Results

When it's time to renew your firewall, what would be the way to ''challenge / validate'' the appliance specsheet? Since we can't test with that benchmark ourself, is there some certificates, standards or even external auditor that i can ask for? I don't want to blindly believe numbers vendors give me. 

Which cybersecurity assessments do you prefer to conduct internally?

Threat assessments31%

Risk evaluations48%

Control reviews36%

Policy reviews35%

Change management process assessments18%

Incident reviews24%

Training program validation13%

Issue remediation18%

Application assessments13%

System assessments13%

Baseline assessments15%

Other (I’ll explain in the comments)

View Results