Skip to content

Sorin Mustaca – Security & Technology

Cybersecurity, AI, Automotive Security, Antimalware Software, Product Management, Agile, Secure Software Development, SSDLC

  • Security
    • IT Security News English
    • IT Sicherheit News Deutsch
    • Securitate in limba Romana
    • Tipps und Ratschläge – IT Sicherheit
  • News
    • In the news
    • Quoted
  • About
    • About me
    • Contact
    • “Improve your security” free eBook
    • Scuba Diving Blog
  • Privacy Policy
  • Cyber Security Consulting
  • Work with me

Category: GRC

Policy vs Standard vs Procedure: why, what, how
Article ECS Educational GRC

Policy vs Standard vs Procedure: why, what, how

Ever wondered what the differences between these terms are? We use them in GRC very often, but we rarely think what they mean. This creates in time some stretching of these concepts, meaning that their meanings overlap to a certain degree.   A Policy is a high-level, mandatory statement of principles and intent. A Standard […]

September 3, 2025
Sorin Mustaca on Twitter Sorin Mustaca on Facebook View Sorin Mustaca's profile on LinkedIn Sorin Mustaca on XING
Subscribe to me on Substack

Categories

Top Posts & Pages

  • Implementing ISO 27001:2022 Annex A.18 - Compliance
  • Sign files unattended in batch mode while having an eToken (no password popup!) (updated)
  • Defender Application Control or Defender SmartScreen - what can you do to not be blocked by it
  • NIS2: 1. Perform a gap analysis
  • TISAX: new Catalogue ISA v6 available
  • Understanding ISO 27001:2022 Annex A.8 - Asset Management
  • Understanding ISO 27001:2022 Annex A.14 - System Acquisition, Development, and Maintenance
  • How to implement an Information Security Management System (ISMS)
  • Implementing ISO 27001:2022 Annex A.16 - Information Security Incident Management

Work with me

Endpoint Cybersecurity

www.endpoint-cybersecurity.com

- Consulting in building your security products for Windows, MacOS, Linux, iOS, Android
- Pentests and Security tests for applications
- Cybersecurity Management Systems for Automotive(CSMS/ISO 21434, WP.29, ISO 16949)
- Support in TISAX(r) audits
- Support in ISO 27001, NIS2, CRA audits

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Join 152 other subscribers

Pages

  • About
  • Contact
  • Cybersecurity and AI Collection
  • Download the free eBook
  • In the news
  • ISO 27001:2022 Collection
  • NIS2 Collection
  • Privacy Policy
  • Securitate in limba Romana
  • Tipps und Ratschläge – IT Sicherheit
  • Work with me
RSS feed: IT Security News (EN) IT Security News (EN)
  • Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
  • Is this link safe? Find out with Malwarebytes Scam Link Check
  • Legal Aid Agency cyberattack: Compromised data goes back to 1978
  • X purges 13,000 accounts linked to suspected meddling ahead of US midterms
  • Hackers Steal UK Legal Aid Records Dating Back to 1978 in Major Cyberattack
  • Researchers Uncover Thousands of Phishing Domains Hiding Behind Inactive Pages
  • Italy Probes Microsoft Video Game Makers Over Transparency
  • New Aoki Infostealer Targets AI Coding Assistant Credentials
  • How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
  • Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
RSS feed: IT Sicherheitsnews (DE) IT Sicherheitsnews (DE)
  • [UPDATE] [mittel] Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation und Denial of Service
  • C2PA-Signaturen: Die tatsächlichen Anforderungen des Produktivbetriebs
  • ASOS-Cyberangriff zeigt Risiken durch Identitätsdiebstahl und Drittanbieter-Plattformen
  • [UPDATE] [mittel] libxml2: Schwachstelle ermöglicht Denial of Service
  • AdFection: Wie Online-Werbung zum Einfallstor für Staatstrojaner wird
RSS feed: Improve Your Security Ebook Improve Your Security Ebook
  • Protecting Our Teens: A Guide to Creating Awareness About Online Dangers
  • A Guide to Teaching Online Safety and Navigating Cyber Dangers
  • How to easily secure your smartphone
  • Conclusion: The Ultimate Parent Guide for Protecting Your Child on the Internet
  • Online predators: The Ultimate Parent Guide for Protecting Your Child on the Internet

Copyright © 2001 - 2026 Sorin Mustaca – Security & Technology | Marvel Blog by Ascendoor | Powered by WordPress.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Loading Comments...

You must be logged in to post a comment.