In modern cybersecurity, vulnerability analysis and penetration testing are two of the most common preventative measures enterprises take to keep their data and digital assets a step ahead of potential threats. Both processes involve examining systems, websites, web apps, mobile apps, wireless networks, internal networks, external networks, and even the entire IT ecosystem of a...

Should pentest exercises be performed? Why? How often? When it comes to cybersecurity, nobody is immune to the risks. Penetration testing is a cybersecurity technique that mimics a cyber attack to identify and exploit vulnerabilities throughout an organization’s on-premise and/or cloud systems. Some of the most important penetration testing methodologies and standards include OWASP, MASVS...

When it comes to cybersecurity, nobody is immune to the risks. Organizations of all sizes, from major international corporations like Sony and eBay to small, independently-owned local businesses, need to be vigilant about emerging threats. A common refrain throughout the industry is that there are only three types of companies: those that have been hacked,...

Late last month, California-based managed IT provider Flugel entered into a new service partnership with Vanta, a specialized tool that automates the security monitoring of compliance standards like SOC 2, HIPPA, and ISO 27001, among others. Initiated as part of the company’s long-standing commitment to Security & Compliance, this strategic partnership will ensure that Flugel’s...

There are lots of factors to consider when evaluating potential new tech partnerships. You want to work with providers who are honest, trustworthy, and transparent, but you also need to make sure that they have the skills, capabilities, and qualifications required to get the job done. There’s also turnaround time, availability, communication, experience, and flexibility...

In an industry that is increasingly saturated with security standards and regulations, it is important to know their scope, applicability, and how they relate to each other. Compliance, whether voluntary or mandatory, will depend on the type of company and/or its residence. Below is a general vision of the majority of security standards, regulations, and...

This article describes how to deploy a basic serverless app using the Serverless Framework. We will be covering a brief introduction of Serverless, a comparison with other frameworks/tools, and finally, the step-by-step to make the code to deploy a basic API GW-Function app in AWS using Serverless.   Serverless Framework Serverless Framework is an open-source...

Over the past decade or so, microservice system architecture has become increasingly popular with companies looking for increased flexibility. Unlike monolithic single-unit applications, microservices are essentially a collection of small, independently deployed services that form a larger application. One of the earliest companies to switch to microservices was Netflix – back in 2009, before the...

If you’re running a business in 2022, you already know the importance of SOC 2 compliance. Short for Service Organization Controls 2, this voluntary compliance standard was created by the American Institute of CPAs to govern the data security, availability, confidentiality, and privacy of an organization’s information system.  Legally speaking, SOC 2 compliance is not...

Business-to-business (B2B) companies are responsible for keeping their clients’ data safe and secure. Increasing cybersecurity threats like ransomware, malware, phishing, or man-in-the-middle attacks can lead to data loss or theft. B2B companies need robust internal processes and infrastructure to protect their customer data against cyberattacks, business risks, and human mistakes. Service Organization Controls 2 (SOC2),...

General Data Protection Regulation (GDPR) has emerged as a global standard for the security and compliance community. The European Commission launched GDPR in 2016 to protect the personally identifiable information (PII) of European Union (EU) citizens. As most modern companies are global, protecting personally identifiable information of customers and employees has become a business priority...

For this article, we will be getting to understand what a Service Mesh is, why it is needed, and how it works in relation to Kubernetes (Orchestration framework). Definitions, terminologies will be broken down so you can better understand the aforementioned concept. Without further-ado, let’s get right into it.   Photo by Clint Adair on...

An emerging role in organizational leadership is the CISO or Chief Information Security Officer. In fact, the first CISO was appointed by Citibank in 1995. However, despite the growing threat of cybersecurity attacks, many organizations do not have a CISO. This is especially true for startups that find having a CISO expensive and prohibitive. Instead,...

At Flugel.it, we talk a lot about how the cloud can be used to optimize costs. It can offer unlimited scalability and lower your IT costs. That being said, many companies are wasting money in the cloud. Up to 70% of cloud costs are potentially wasted because of poor adoption or underutilized features. It’s critical...

For many years managing your company’s IT infrastructure was a challenging job. IT teams had to manually configure all the software and hardware used to run your applications. Teams would set up physical servers and configure and manage them manually. This effort required large teams of people and dedicated physical space for servers. Luckily this...

Disclaimer This is not an opinion article; we don’t judge the decisions made by the Chinese government. We respect the laws of the country in which we’re operating, just like other companies doing business in China. With that out of the way, let’s continue. Most of us know that internet laws and regulations are different...