Posts Categorized: Publications

Submit request for ISO standards file

Posted February 2025 by & filed under Publications.

Please complete the form below to request the relevant ISO/IEC file prepared by itrust consulting:
Please enable JavaScript in your browser to complete this form.
Name of individual or Organization
Email ID for communication
Choose one of the choices from the list of standards ISO or open standards available. The options of language available so far is in quotes (EN-English, FR-French, DE-German)
The license number must be visible on the licensed copy of the standard.
Please provide a screenshot of a page that clearly displays license information, including any watermark or copyright notice, where the details of the license are prominently visible.
Date of purchase
Obtain consent from ILNAS
This consent is only needed in absence of supporting documents proving the purchase of standard AND if you have acquired the license at ILNAS
Additional communication message
Communication consent

Alpha release of IDPS-ESCAPE

Posted September 2024 by & filed under News, Publications.

Abstractions Lab released the Alpha version of IDPS-ESCAPE on GitHub.

IDPS-ESCAPE, part of the CyFORT suite of open-source cybersecurity software solutions, addresses various aspects of cybersecurity as an ensemble, targeting different user groups, ranging from public to private and from CIRT/CSIRT to system administrators. The design of IDPS-ESCAPE is targeted to cloud-native deployments, with an eye on CERT/CSIRT-operated monitoring systems.

Click here to read the whole article










itrust Abstractions Lab released the Beta version of C5-DEC on GitHub

Posted July 2024 by & filed under News, Publications.

itrust Abstractions Lab released the Beta version of C5-DEC on GitHub. This release includes many new functionalities, mainly to assist with Common Criteria evaluations and efficient creation of technical documentation throughout the Secure Software Development Lift Cycle (SSDLC).


We will be happy to receive your feedback at info@abstractionslab.lu

Publication of OpenTRICK as open source tool

Posted June 2024 by & filed under Publications.

itrust consulting published the open source version of TRICK Service and added it the product list. OpenTRICK is a web-application supporting risk assessment and treatment.


OpenTRICK (formerly called TRICK Service) is a full-featured risk management tool, assisting in assessing risk, planning actions, as required by an ISO/IE 27001 compliant information security management system (ISMS). It accompanies you throughout the whole risk management process; starting with the definition of the risk context, covering risk estimation and treatment, and communicating the results. OpenTRICK prepares you to be certified for ISO 27001, to comply with the requirements of the GDPR, to export the RISK information in the json format requested by the LU regulator ILR or in order to respond to CSSF circular 12/544.

 

It covers a wide variety of features such as quantitative/qualitative analysis of risk scenarios, estimation of Return on Security Investment (ROSI) based on risk reduction factors (RRF), embedding of custom or pre-defined catalogues for rated security controls (27002, GDPR, 22301, IoT, …), multi-user support and access control, import/export, and versioning. It allows several risk assessment for different customers or contexts to share information such security and risk parameters over a central knowledge Base, thus explaining its name TRICK = Tool for Risk management of an ISMS based on a Central Knowledge base. Note that such information, e.g., ISO/IEC 27002 is copyright protection, i.e. cannot be part of this release, but it can be imported easily, based on formatted documents available at ILNAS.public.lu (e.g.) upon acquisition of the standard’s copyrights (in near future).

 

OpenTRICK comes with user access management, activity logs, two-factor authentication, and smart input output feature interacting with Word and Excel.