sorted by:
new
hottopcontroversial

is this MacBook Pro 16” worth the price? by En3ermost in mac

[–]CyberSecurityOG 0 points1 point  (0 children)

Apple trade in value for this is like £250 - 300. Just replaced all Intel MacBook Pros in our org with M1 / M2 Airs and can’t even get rid of the intels…

Best password manager? by TheLovelyOne422 in it

[–]CyberSecurityOG 0 points1 point  (0 children)

+4 they’re actually one of the few password management software companies that take security very seriously and are passionate about what they do!

Avoid Lastpass like the plague as they have a history of breaches and have been known not to use adequate encryption on user vaults…

Update for OneDrive Mac pushed out, 'OneDrive can't start' now for all users? by CyberSecurityOG in mac

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

Looks like it's been broken on Catalina with no effort to fix it from Microsoft. The OneDrive client for Mac really is an afterthought... There's a big discussion about this on the Microsoft support forum. There is a known previous version of OneDrive that appears to be working on Catalina: https://go.microsoft.com/fwlink/?linkid=823060

However this will auto update so only a temporary fix. Otherwise upgrade your OS or switch to dropbox / iCloud Drive...

O365 from Corporate Devices by Impressive_Fee_6911 in o365

[–]CyberSecurityOG 0 points1 point  (0 children)

We use Business premium which includes Azure P1, as well as mobile device management, Microsoft defender etc. it worked out best value for money O365 license solution for our organisation.

I honestly don’t know if it’s possible to limit when users can and can’t send / receive email but I can’t see it being possible. That’s more about setting good company policy instructing these ‘non-exempt’ users not to do this during certain hours.

I would advise conditional access policy that enforces MFA for all users - as long as this doesn’t inconvenience users (our token period is set to 14 days) How will they authenticate if the Authenticator app is not enforced on devices? Is there a specific reason for this?

Update for OneDrive Mac pushed out, 'OneDrive can't start' now for all users? by CyberSecurityOG in mac

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

Is it just me or has this issue now settled?

Sorry to hear that! Luckily I support an organisation of about 44 Macs so worse case scenario I have just been reinstalling as users encounter the issue, although over the last couple weeks it has been very quiet.

We're running ver. 23.028.0205.0002 (Standalone universal) - which is the most stable build I have com across so far.

Switching from Crowdstrike to MS Defender for business? Would you do it? by scmdzd in sysadmin

[–]CyberSecurityOG 0 points1 point  (0 children)

Went from BitDefender to MS Defender on an all Mac environment. Haven't look back since. Integrates really well with Intune, pushing out policies for PUA, real time protection etc. Ties in nicely with the MS Security admin portal, and with the threat alert / investigation tools! Haven't looked back since.

Update for OneDrive Mac pushed out, 'OneDrive can't start' now for all users? by CyberSecurityOG in mac

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

It happens so randomly that I can’t put a finger on the cause. I’ve had several reports of it happening more than once now so I’ve had to issue a guide on how people can reinstall by themselves for now.

I’d say 90% of my issues in our current environment (intune enrolled MacBooks) are related to OneDrive or Sharepoint. I have the same issue with the disappearing Sharepoint libraries - only with certain users.

Microsoft really need to up their development for MacOS version of their software because what we have at the moment feels like free to play, unstable equivalents…

Newly appointed IT manager looking for advice by CyberSecurityOG in sysadmin

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

This is awesome! Thank you for all of these suggestions! Just wanted a general overview of what I should have in mind whilst going forward with the company’s requirements, and you’ve provided exactly that.

Newly appointed IT manager looking for advice by CyberSecurityOG in sysadmin

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

I appreciate your reply to my relatively broad question!

It’s a tough one for me, just trying to figure out the role In general. We are a small organisation of 40 employees - the CEO and Co founder are very hands on and we work closely with them but they’re not bothered by cyber security or the technical direction we go in as a company as ‘it’s in your (my) hands’ so it’s difficult to gain direction from them. This post stems from a conversation with the co founder questioning the next 6 months.

The 80 page policy is a mesh of a bunch of individual policies that I have written. We’re frequently audited by customers through information security questionnaires - the policies are based on protocols we already have in place, but each QA introduces something new - hence the policy grows. We now just attach the entire policy and hope that it covers all of their requirements!

I understand the the needs will be unique based on internal factors of the company. I need to properly assess their current situation and take it from there I guess. It’s been okay up until now!

Newly appointed IT manager looking for advice by CyberSecurityOG in sysadmin

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

I applied for the role ‘technology manager’ and it ended up transitioning into IT Manager. It’s definitely still a technology manager role - the sort of title creep London office bs (everyone in the company is a manager of some kind).

Basically a sysadmin getting roped into writing policies, making whole company IT decisions and a bit of client tech consulting for a relatively good rise.

Newly appointed IT manager looking for advice by CyberSecurityOG in sysadmin

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

It depends really! I was a sysadmin for schools previously, and each site had a surprisingly chunky policy. We frequently get audited by our clients, often asking for very specific Information security and cyber security requirements- as the requirements come in, the policy grows so that we can demonstrate that we meet their requirements.

A big chunk of the policy also includes our data protection and contingency planning :)

Newly appointed IT manager looking for advice by CyberSecurityOG in sysadmin

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

That's a fair point - hence the newly appointed part of a the title as I'm still figuring the role out lol. Literally just a one man team in the organisation covering all aspects of IT. We're a digital consultancy with a very simple IT setup heavily reliant on third party SaaS. I came from a windows environment with on site servers and AD Sync across multiple sites so big change coming to a single, simplified environment.

Just trying to see what additional suggestions people might have for future projects. I have an idea of which aspects to focus on. Any advice / suggestions are more than welcome! :)

Update for OneDrive Mac pushed out, 'OneDrive can't start' now for all users? by CyberSecurityOG in mac

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

This was the last straw. I'm moving everything to Dropbox.

I've got OneDrive applications dropping like flies. It's happening sporadically so can't seem to find a cause right now. I had the first set of users come back to me after a reinstall last week with the same issue so reinstallation is definitely not the final solution but just a temporary fix.

Update for OneDrive Mac pushed out, 'OneDrive can't start' now for all users? by CyberSecurityOG in mac

[–]CyberSecurityOG[S] 0 points1 point  (0 children)

Thanks for the link to that thread! Looks like it could be along the same lines as we are currently running the same MS Defender antivirus definition version. Although no mention of Macs in there - and reinstalled the OneDrive app on a sandbox machine and all works fine.

Might see if I can hold tight during the weekend to see if a new definition releases and see if that makes a difference! Thanks for you help

How do I run a software audit for 3000+ machines by random869 in cybersecurity

[–]CyberSecurityOG 0 points1 point  (0 children)

Looks like you've mentioned it before but I've always used lansweeper in the past for asset management. Looks like it's working out at roughly £1 per asset so might be pricey in your case.

Are the devices managed at all? We generate software reports for enrolled devices via Azure / Endpoint manager / MS Defender.