---
title: NetWorks Group Blog | Amanda Berlin
description: "Amanda Berlin is a Senior Security Analyst at NetWorks Group. She has spent over a decade in different areas of technology and sectors providing infrastructure support, triage, and design. Amanda has been involved in implementing a secure Payment Card Industries (PCI) process and Health Insurance Portability and Accountability Act (HIPAA) compliance as well as building a comprehensive phishing and awards-based user education program. She is the author for a Blue Team best practices book called “Defensive Security Handbook: Best Practices for Securing Infrastructure” through O’Reilly Media. She is a co-host on the Brakeing Down Security podcast and writes for several blogs."
---

- info@networksgroup.com
- [Contact Us](https://www.networksgroup.com/contact/)

- <https://www.facebook.com/networksgroupinc/>
- <https://www.facebook.com/networksgroupinc/>
- <https://twitter.com/networksgroup>
- [mailto:info@networksgroup.com](mailto:info@networksgroup.com)

[![NetWorks Group](https://email.networksgroup.com/hubfs/Networksgroup%20August%202017/Images/NWG_Black_Logo_300-154x42.png "NetWorks Group") ![NetWorks Group](https://email.networksgroup.com/hubfs/Networksgroup%20August%202017/Images/NWG_Black_Logo_750px.png "NetWorks Group") ![NetWorks Group](https://email.networksgroup.com/hubfs/Networksgroup%20August%202017/Images/NWG_Black_Logo_1500px.png "NetWorks Group")](https://www.networksgroup.com/)

- [Home](https://www.networksgroup.com/)
- Detect & Respond 
    - [Managed Detection & Response](https://www.networksgroup.com/managed-detection-response/)
    - [Endpoint Managed Detection & Response](https://www.networksgroup.com/managed-detection-response/endpoint-mdr/)
- Ethical Hacking 
    - [Full Scope Penetration Test](https://www.networksgroup.com/full-scope-penetration-test/)
    - [Web Application Security Test](https://www.networksgroup.com/web-application-security-test/)
- Security Services 
    - [Managed Security Infrastructure](https://www.networksgroup.com/managed-security-services/)
    - [Compliance Services](https://www.networksgroup.com/pci/)
    - [Vulnerability Management](https://www.networksgroup.com/vulnerability-management/)
    - [Security Architecture Review](https://www.networksgroup.com/security-architecture-review/)
- Resources 
    - [Blog](http://blog.networksgroup.com/)
    - [Library](https://www.networksgroup.com/library/)
- Company 
    - [About](https://www.networksgroup.com/about/)
    - [Contact Us](https://www.networksgroup.com/contact/)
    - [Careers](https://www.networksgroup.com/careers/)
    - [Partners](https://www.networksgroup.com/partners/)

<https://email.networksgroup.com/author/amanda-berlin#sidr>

[![NetWorks Group](https://email.networksgroup.com/hubfs/Networksgroup%20August%202017/Images/NWG_Black_Logo_750px.png "NetWorks Group")](https://www.networksgroup.com/)

- [Home](https://www.networksgroup.com/)
- Detect & Respond 
    - [Managed Detection & Response](https://www.networksgroup.com/managed-detection-response/)
    - [Endpoint Managed Detection & Response](https://www.networksgroup.com/managed-detection-response/endpoint-mdr/)
- Ethical Hacking 
    - [Full Scope Penetration Test](https://www.networksgroup.com/full-scope-penetration-test/)
    - [Web Application Security Test](https://www.networksgroup.com/web-application-security-test/)
- Security Services 
    - [Managed Security Infrastructure](https://www.networksgroup.com/managed-security-services/)
    - [Compliance Services](https://www.networksgroup.com/pci/)
    - [Vulnerability Management](https://www.networksgroup.com/vulnerability-management/)
    - [Security Architecture Review](https://www.networksgroup.com/security-architecture-review/)
- Resources 
    - [Blog](http://blog.networksgroup.com/)
    - [Library](https://www.networksgroup.com/library/)
- Company 
    - [About](https://www.networksgroup.com/about/)
    - [Contact Us](https://www.networksgroup.com/contact/)
    - [Careers](https://www.networksgroup.com/careers/)
    - [Partners](https://www.networksgroup.com/partners/)

# NetWorks Group Blog

## Amanda Berlin

![](https://email.networksgroup.com/hubfs/Amanda%20Berlin.jpg)

Amanda Berlin is a Senior Security Analyst at NetWorks Group. She has spent over a decade in different areas of technology and sectors providing infrastructure support, triage, and design. Amanda has been involved in implementing a secure Payment Card Industries (PCI) process and Health Insurance Portability and Accountability Act (HIPAA) compliance as well as building a comprehensive phishing and awards-based user education program. She is the author for a Blue Team best practices book called “Defensive Security Handbook: Best Practices for Securing Infrastructure” through O’Reilly Media. She is a co-host on the Brakeing Down Security podcast and writes for several blogs.

Find me on:

<https://www.linkedin.com/in/amandaberlin/> <https://twitter.com/infosystir>

### Recent Posts

## [HIPAA vs Security: Building security into medical purchasing decisions](https://email.networksgroup.com/hipaa-vs-security)

 Posted by [Amanda Berlin](https://email.networksgroup.com/author/amanda-berlin) on Jan 23, 2018 10:37:00 AM

- [Tweet](https://twitter.com/share)

[![](https://email.networksgroup.com/hubfs/shutterstock_772546597.jpg)](https://email.networksgroup.com/hipaa-vs-security)

What the security community says about a specific industry vertical usually holds true for a good percentage of what is seen in the wild. You can ask any hacker, defender, CISO, etc what industries struggle the most and there are common themes in their answers. Top of the list includes healthcare, manufacturing, government, and financial. Some of the most heavily compliance controlled and regulated are also some of the least secure. Why is this? Is it due to administrators and senior management taking compliance standards as gospel? Maybe it’s a lack of knowledgeable staff like the blind leading the blind.

[Read More](https://email.networksgroup.com/hipaa-vs-security)

 0 Comments [Click here to read/write comments](https://email.networksgroup.com/hipaa-vs-security#comments-listing)

 Topics: [Information Security](https://email.networksgroup.com/topic/information-security), [Compliance](https://email.networksgroup.com/topic/compliance), [Healthcare](https://email.networksgroup.com/topic/healthcare), [HIPAA](https://email.networksgroup.com/topic/hipaa)

## [Spectre & Meltdown: Important Vulnerability Advisory](https://email.networksgroup.com/spectre-and-meltdown-advisory)

 Posted by [Amanda Berlin](https://email.networksgroup.com/author/amanda-berlin) on Jan 4, 2018 4:09:27 PM

- [Tweet](https://twitter.com/share)

[![](https://email.networksgroup.com/hubfs/Networksgroup%20August%202017/Images/header4-02.png)](https://email.networksgroup.com/spectre-and-meltdown-advisory)

# Spectre 

Release Date (01-03-18) CVE-2017-5753 & CVE-2017-5715

[Read More](https://email.networksgroup.com/spectre-and-meltdown-advisory)

 1 Comment [Click here to read/write comments](https://email.networksgroup.com/spectre-and-meltdown-advisory#comments-listing)

 Topics: [Ethical Hacking](https://email.networksgroup.com/topic/ethical-hacking), [Threat Management](https://email.networksgroup.com/topic/threat-management), [Threat Advisory](https://email.networksgroup.com/topic/threat-advisory)

## [Data Loss Prevention: Fundamentals](https://email.networksgroup.com/data-loss-prevention-fundamentals)

 Posted by [Amanda Berlin](https://email.networksgroup.com/author/amanda-berlin) on Sep 29, 2017 12:05:42 PM

- [Tweet](https://twitter.com/share)

[![](https://email.networksgroup.com/hubfs/Blogs/data-loss-prevention.jpg)](https://email.networksgroup.com/data-loss-prevention-fundamentals)

## Where to start with Data Loss Protection

DLP or Data Loss Protection is a strategy for ensuring that end users or malicious actors do not send sensitive or critical information outside the corporate network either maliciously or accidentally. A DLP strategy should only be introduced within organizations that already have a mature security infrastructure.

[Read More](https://email.networksgroup.com/data-loss-prevention-fundamentals)

 0 Comments [Click here to read/write comments](https://email.networksgroup.com/data-loss-prevention-fundamentals#comments-listing)

## [Equifax breach: A learning opportunity to get ahead of the constant threats](https://email.networksgroup.com/equifax-breach-a-learning-opportunity-to-get-ahead-of-the-constant-threats)

 Posted by [Amanda Berlin](https://email.networksgroup.com/author/amanda-berlin) on Sep 8, 2017 12:10:43 PM

- [Tweet](https://twitter.com/share)

[![](https://email.networksgroup.com/hubfs/Blogs/cyber-security-1805246_1280.png)](https://email.networksgroup.com/equifax-breach-a-learning-opportunity-to-get-ahead-of-the-constant-threats)

If you haven’t heard already, Equifax one of the “big-three” U.S. credit bureaus has announced a data breach that may have affected 143 million Americans, including consumer Social Security numbers, birth dates, addresses and some driver’s license numbers. For a good rundown of what has transpired so far, Krebs on Security has a solid in-depth article on it [here](https://krebsonsecurity.com/2017/09/breach-at-equifax-may-impact-143m-americans/). Every time there is a breach in the news, most other outlets swarm to a few different types of articles. Some popular directions are attribution, defense advice, or sensationalist journalism.

[Read More](https://email.networksgroup.com/equifax-breach-a-learning-opportunity-to-get-ahead-of-the-constant-threats)

 0 Comments [Click here to read/write comments](https://email.networksgroup.com/equifax-breach-a-learning-opportunity-to-get-ahead-of-the-constant-threats#comments-listing)

 Topics: [Managed Detection & Response](https://email.networksgroup.com/topic/managed-detection-response), [Ethical Hacking](https://email.networksgroup.com/topic/ethical-hacking), [Information Security](https://email.networksgroup.com/topic/information-security), [Threat Advisory](https://email.networksgroup.com/topic/threat-advisory)

[All posts](https://email.networksgroup.com/all)

### Subscribe to our blog!

### Stay Informed!

### Recent Posts

### Posts by Topic

- [Information Security (50)](https://email.networksgroup.com/topic/information-security)
- [Threat Management (34)](https://email.networksgroup.com/topic/threat-management)
- [Ethical Hacking (31)](https://email.networksgroup.com/topic/ethical-hacking)
- [Managed Detection & Response (25)](https://email.networksgroup.com/topic/managed-detection-response)
- [Penetration Testing (21)](https://email.networksgroup.com/topic/penetration-testing)
- [Vulnerability Management (12)](https://email.networksgroup.com/topic/vulnerability-management)
- [Compliance (11)](https://email.networksgroup.com/topic/compliance)
- [Security Monitoring (11)](https://email.networksgroup.com/topic/security-monitoring)
- [Healthcare (9)](https://email.networksgroup.com/topic/healthcare)
- [Threat Advisory (8)](https://email.networksgroup.com/topic/threat-advisory)
- [Threat Hunting (7)](https://email.networksgroup.com/topic/threat-hunting)
- [Security Architecture Review (6)](https://email.networksgroup.com/topic/security-architecture-review)
- [HIPAA (5)](https://email.networksgroup.com/topic/hipaa)
- [Device Management (4)](https://email.networksgroup.com/topic/device-management)
- [Incident Response (4)](https://email.networksgroup.com/topic/incident-response)
- [Events (1)](https://email.networksgroup.com/topic/events)
- [PCI (1)](https://email.networksgroup.com/topic/pci)

see all

###### About Us

NetWorks Group is a Managed Detection & Response (MDR) and Ethical Hacking Service provider. We help organizations detect and respond to advanced cyber security threats through a powerful combination of our proprietary threat detection platform, expertise and security tools. Our unique approach to security not only helps you stay ahead of cyber criminals but also helps you reduce cost and increase efficiency.

###### More Links

- [Home](https://www.networksgroup.com/)
- [Blog](http://blog.networksgroup.com/)
- [About](https://www.networksgroup.com/about/)

###### Contact Us

(888) 798-1012  
 info@networksgroup.com  
 www.networksgroup.com

- <https://www.facebook.com/networksgroupinc/>
- <https://www.linkedin.com/company/networks-group>
- <https://twitter.com/networksgroup>

© 2017 - NetWorks Group