Tuesday 12 September 2017

Prince 2 Practitioner Exam Format


Prince 2 Practitioner Exam Format



The Practitioner is the second of the two PRINCE2 Examinations you are required to pass to become a PRINCE2 Practitioner.

This level aims to assess whether a candidate would be able to apply PRINCE2 to the real time project within an environment supporting PRINCE2. To demonstrate this candidate needs to exhibit the competence required for the Foundation qualification, and show that they can apply and tune PRINCE2 to address the needs and problems of a specific project.
Precisely the candidates must be able to:

Produce detailed explanations of all processes, components and techniques, and worked
examples of all PRINCE2 products as they might be applied to address the particular circumstances of a given project scenario.

Show they understand the relationships between Principle, Themes, Processes and the PRINCE2 products and can apply this understanding Demonstrate their ability to tailor PRINCE2 to different project environments.

The Practitioner exam presents the following main characteristics:

9 questions, with a scenario background and appendices

Each of the 9 questions is worth 12 marks

An overall score of 59 out of possible 108 is required to pass (55%)


2.5 hours duration


Open book examination (only the PRINCE2 Manual is 
allowed) This will be available to each delegate

Monday 11 September 2017

SAMSUNG IS GIVING “$200,000 PER BUG”, LAUNCHES MOBILE BUG BOUNTY PROGRAM



Bug bounty programs by big tech boys isn’t a new thing to hear. Now, Samsung’s name is also on the list of the companies which give money to security researchers who point out vulnerabilities in their products.

The company has announced their bug bounty initiative called Mobile Security Rewards Program. And as the name suggests, the program would shower cash on bug hunters who reveal security loopholes in Samsung’s range of mobile devices, mostly running the Android operating system.


Currently, there are 38 Samsung mobile devices – includes Galaxy S series, Note Series, A Series, J Series, and Tab series – covered under the program. These devices are receiving regular security updates since October 2015.
There are some software included as well, like, their voice assistant Bixby, Samsung Pay, Samsung Pass, etc. which are eligible for bug bounty submissions. Samsung says the eligible device must be running the latest available Android version and firmware.
The pilot for the rewards program was first introduced in January 2016. Samsung promises to shell out up to $200,000 per successful bug reported. However, things like the severity of the bug and whether the researcher can provide a proof-of-concept would affect the reward amount.
Samsung has created a new web page to provide further details about their Mobile Security Rewards program. Interested user can visit the same to read guidelines and submit vulnerability reports through a dedicated interface.
Bug bounties are a great medium for companies to find out critical flaws in their products. A benefit is they don’t have to make any recruitments. And all the effort is crowd-sourced; they only have to pay if the bug submission is approved.
On the other side, it’s also a unique cookie for security researchers and white hats. They can make money improving their bug finding skills. Companies like Google, Apple, Microsoft, etc. also have their respective bug bounty programs.