My Cybersecurity Blog – jonas.colmsjo.com

ISO 27001, NIST CSF, and CIS Controls: Three Lenses on Cybersecurity Practice

GRC

Cybersecurity

There’s a common misconception in cybersecurity discussions: that ISO 27001, NIST CSF, and CIS Controls are competing standards, and organizations must “choose” one to…

Password Hygiene

Practices

I’ve put together a simple generator for mobile friendly passwords and a password card that can be printed.

Cyber-Physical Systems Under Attack: From Critical Infrastructure to Automotive Security

CPS

Automotive

Cyber-physical systems (CPS) represent the convergence of computation, networking, and physical processes. These systems control critical infrastructure including power…

To what extent do the Swedish Cybersecurity strategy meet the EU NIS2 requirements?

GRC

The new Swedish Cybersecurity strategy, Nationell strategi för cybersäkerhet 2025-2029 (Skr 2024/25:121), was released on 20:th of March 2025. Here is a evaluation to what…

IoT Case Study: Smart Argicultare

IoT

Smart devices are currently flourishing in all parts of our society. There are many gadgets with questionable benefits but also applications with very real benefits. The…

Threat Hunting

Hunting

För att skydda sina servrar bör man givetvis uppgradera alla komponenter med jämna mellanrum och bevaka CVE:s för att kunna patcha allvarliga luckor som dokumenterats. Ofta…

Asset and Attack Surface Management

Hunting

Ett bra sätt att få en känsla för ett nytt område är att titta på jobb-annonser. Jag såg en annons från WSP där dom söker Attack Surface Reduction Analyst. WSP verkar arbeta…