@scottalanmiller said in What to ask for in a Cybersecurity Auditor ...:

@travisdh1 said in What to ask for in a Cybersecurity Auditor ...:

Let us know if you find a competent auditor. I've worked in IT for quite a few years and have yet to meet/find a decent auditor.

Do you want competence? Or do you want an auditor? You need to choose.

Exactly, lol!

I find it to not be of concern. I would never have it happen, because it's a bizarre and problematic way to handle internal DNS. But anyone who can exploit private IP mapping can figure it out without DNS in the first place. So I see no reason to want to hide it.

@IRJ said in Doublecheck the Security of Your Linux:

Just a couple notes from the article:

You cannot set a bootloader password for AWS or other cloud services

Apt Armor is specific to Ubuntu / Debian. SELinux is used on RHEL / CentOS / Fedora

AppArmor is default on SUSE as well. And you can run SELinux on Debian / Ubuntu if you want.

BTW, AppArmor just replaced SELinux as default on Debian 10. So that was only a couple of months ago.