Author page: Ángel López

Ángel López

PCI DSS Qualified Security Assessor (QSA) and Qualified PIN Assessor (QPA). Over ten years in information security across banking, retail and payment service providers in Latin America. CISM, CISA, ISO/IEC 27001 auditor, CEH and CHFI. Named in the Top 10 Cyberinfluencers Award 2020. He has led PCI DSS assessments (ROC and AOC) and worked on incident response, digital forensics and cryptographic key management.

3 articles published

Timeline of a security incident: detection, containment and recovery

SOC & DFIR

Incident response plan template: what to write in each section

Most incident response plans are written for an auditor and read for the first time at 3 a.m., by someone who did not write them.…

ISO 27001

ISO 27001 certification: the real process, the evidence, and how long it takes

A customer asks for "your ISO 27001 accreditation" before signing. Someone forwards the request to IT, IT forwards it to whoever owns policies, and three…

Four quarterly external scans; a single finding above CVSS 4.0 fails the whole scan

Compliance (PCI)

What an Approved Scanning Vendor (ASV) does, and how to pass your quarterly PCI scan

Your acquirer asks for a passing scan every quarter. Your scanning tool says you are clean. The report still comes back failed, and nobody in…

NSOC 24/7 (Managed SOC)

PCI DSS Compliance

Incident Response (DFIR)

Cybersecurity Arsenal

Threat Hunting

MSSP | Google Cloud

Compromise Assessment

Cyber Threat Intelligence (CTI)

Critical Access Management (PAM/IAM)

Vulnerability & Exposure Management

Adversary Simulation (Red Teaming)

Attack Surface Management (ASM)

NSOC 24/7 (Managed SOC)

PCI DSS Compliance

Incident Response (DFIR)

Cybersecurity Arsenal

Threat Hunting

MSSP | Google Cloud

Compromise Assessment

Cyber Threat Intelligence (CTI)

Critical Access Management (PAM/IAM)

Vulnerability & Exposure Management

Adversary Simulation (Red Teaming)

Attack Surface Management (ASM)

NSOC 24/7 (Managed SOC)

PCI DSS Compliance

Incident Response (DFIR)

Cybersecurity Arsenal

Threat Hunting

MSSP | Google Cloud

Compromise Assessment

Cyber Threat Intelligence (CTI)

Critical Access Management (PAM/IAM)

Vulnerability & Exposure Management

Adversary Simulation (Red Teaming)

Attack Surface Management (ASM)

Ángel López

Incident response plan template: what to write in each section

ISO 27001 certification: the real process, the evidence, and how long it takes

What an Approved Scanning Vendor (ASV) does, and how to pass your quarterly PCI scan

Search

Categories

Recent Posts