Articles
Technical notes from penetration testing, vulnerability research and the defensive side.
In Turkey a SOME (CSIRT) is the team responsible for detecting and responding to cyber incidents; public institutions and critical infrastructure operators are expected to establish one under regulation, coordinating with the national centre USOM.
The notification window starts the moment a breach becomes known; managing it depends on having a response plan, available evidence sources and a designated decision-maker in place beforehand.
KVKK compliance consists of building a data inventory, tying each processing activity to a lawful basis, setting retention and destruction policy, issuing privacy notices, implementing technical and administrative measures, preparing a breach response plan, and registering with VERBİS.
A vulnerability scan uses automated tools to produce a list of known flaws; in a penetration test an expert actually exploits those flaws to prove their impact and uncover chained attack paths.
Talk to our team about a penetration test or training plan that fits your scope.