andrea-chiarelli

I have over 20 years of experience as a software engineer and technical author. Throughout my career, I've used several programming languages and technologies for the projects I was involved in, ranging from C# to JavaScript, ASP.NET to Node.js, Angular to React, SOAP to REST APIs, etc.

In the last few years, I've been focusing on simplifying the developer experience with Identity and related topics, especially in the .NET ecosystem.

Principal Developer Advocate

Andrea Chiarelli

This in-depth guide shows you how to secure your AI chatbot built with .NET Blazor using the RAG pattern, ensuring users can only access information from documents they have permission to view.

Secure a .NET RAG System with Auth0 FGA

auziros:jeana-tahnk

Jeana has been in the tech industry for 15+ years, both as a communications professional and writer. As Director of Global Communications at Auth0, she works with her internal team and external agencies to amplify the company's visibility worldwide and establish its leadership in the identity industry. When she is not working, she can most likely be found on a field watching one of her three kids playing sports, or cleaning up after her one-year-old retriever who chews everything.

Senior Director, Global Communications

Jeana Tahnk

U.S. Navy veteran and former security leader from Nike joins Auth0 C-Suite



**BELLEVUE, Wash. – March 1, 2021 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced that [Jameeka Green Aaron](https://www.linkedin.com/in/jameeka/) has joined the company as Chief Information Security Officer (CISO). Aaron brings more than 20 years of industry experience and will be responsible for the holistic security and compliance of Auth0’s platform, products, and corporate environment. 

Aaron is a recognized industry thought leader and has dedicated two decades to managing and improving information security systems at each of her previous positions, including Nike, Hurley, Lockheed Martin, and the U.S. Navy. She is also committed to advancing women and people of color in Science, Technology, Engineering, and Mathematics (STEM) fields, and she participated in the U.S. State Department’s TechWomen program and the National Urban League of Young Professionals. She currently sits on the board of the California Women Veterans Leadership Council, is an advisor for U.C. Riverside Design Thinking Program, and is a member of Alpha Kappa Alpha Sorority, Inc.

“Jameeka is an incredible addition to our executive team, not only for her deep experience and leadership but for her leadership outside of the security industry as well,” said Eugenio Pace, CEO, and co-founder of Auth0. “As a company with a mission of inclusivity and access to technology, we were taken by Jameeka’s stewardship to her causes and looked forward to driving lasting positive change together. Her unmatched security expertise and dedication is an inspiration and invaluable asset to Auth0.”

The web of complexity involved in managing a competitive digital business broadens each day. Auth0 continues to innovate and evolve its identity management platform to make security, privacy, and compliance easier for global enterprises. The company is solving complex and large-scale identity use cases for global companies, and Aaron will help Auth0 and its customers ensure that they meet the highest levels of security and compliance.  

“In addition to the amazing roster of customers that puts their trust in Auth0 and fuels its growth, I was very much struck by the humanity of everyone I met with—a level of empathy that has been a rarity throughout my career,” said Aaron. “Being a CISO is a very unique job and is one that largely centers around accountability. I am approaching this position at Auth0 with a mission to ensure the optimal security of our platform, as well as be a strong collaborator and partner to both customers and employees alike.”

<include src="asides/AboutAuth0" />
### Media Contacts
Auth0 Global Communications<br />
[press@auth0.com](mailto:press@auth0.com)<br />

Matter for Auth0<br />
[auth0@matternow.com](mailto:auth0@matternow.com)<br />


Auth0 Names Jameeka Green Aaron as Chief Information Security Officer

annybell-villarroel

Anny believes in a people-centric trust-based approach for security culture and awareness &mdash; one where we help people learn about cybersecurity in a fun way, and make them feel empowered, rather than afraid. She also leads the Madrid chapter for WoSEC &mdash; Women of Security.

Security Culture Manager

Annybell Villarroel

Our security best practices checklist will help you, and the kids you know, stay safe online.



Today, it’s hard to think about a part of our lives that’s not connected to the internet in one way or another. Work, relationships, entertainment, growth, finances, health, home appliances, cars. They all can have an **online component**.

But the online world is a hard thing to perceive. We can’t quite touch it. We can only experience it through a screen, headphones, or a microphone. So the associated risks and consequences sometimes may not seem as real and bad as a hurricane, an armed theft, or as cutting a finger while cooking. But *are they*? 

Yes, they are!

But it also depends on you, and your “threat model”, which is just a fancy (and possibly intimidating) word to sum up the answers to these six questions:

* What are my assets? 
* Who are my adversaries?
* What can my adversary do?
* How likely is it that I will have to protect my assets?
* How bad are the consequences if I fail?
* What can I do to defend myself against my adversaries?

The questions also sound a bit intimidating, but it’s just about listing what you value, who can hurt you, how, what are the odds of being affected, what the consequences could be and what are your defenses. It works for online and offline risk.

Since so much of our lives are online today, we all have **valuable assets on the web**. Our online identity, our private identifiable information (name, birthdate, home address, phone number, email accounts), our social media, credit card numbers, pictures, work data. We all have information to protect, and we all have a responsibility to protect it too, [_including children_](https://auth0.com/blog/auth0-cybersafe-camp/).

![Auth0 family security](https://images.ctfassets.net/23aumh6u8s0i/4VW4wTpm0aesOHQS6GZJiu/071af53dace08a20a87351ce43a5554d/auth0-personal-security)

And since there have been so many [_data breaches_](https://auth0.com/blog/what-is-a-data-breach/) up until now, we all have adversaries. All the data that has been breached is up for sale for a cheap price on the dark web, and it could be used against us in different ways. Depending on who we are and what we do, we may be an interesting target as well. 

In general, the consequences of an attack can be tremendously hurtful. Identity theft, ransom, data or financial loss, cyberstalking, and even physical damage. 

Now, we can all get ready and protect ourselves, and that is what **October National Cybersecurity Awareness Month** is about. A yearly effort aimed at helping you stay safe online. 

At Auth0 we care very deeply about cybersecurity, and we want to help make the internet safer. Not only by [_increasing the security of your business_](https://auth0.com/blog/how-auth0-makes-your-apps-more-secure/) through our platform, by helping you enable password policies, anomaly detection, and MFA quickly, and by protecting the credentials of your users which helps prevent data breaches. But also by spreading awareness about cybersecurity, and partnering up with the [_US government_](https://www.dhs.gov/national-cyber-security-awareness-month), the [_EU_](https://cybersecuritymonth.eu/), and [_Australia_](https://www.staysmartonline.gov.au/get-involved/stay-smart-online-week) during October National Cybersecurity Awareness Month.

So we have prepared an **easy checklist** to help you, and the kids you know, stay safe online. Download the [Personal Cybersecurity Checklist](https://auth0.com/resources/whitepapers/personal-cybersecurity-checklist)!

We believe in making cybersecurity accessible for everyone, so we’ve translated it to **9 languages** with the help of Auziros from all over the world. 

Follow us on [_Twitter_](https://twitter.com/auth0), where we’ll be sharing 31 days of tips and best practices, and also come talk to us in [_our online meetup_](https://www.meetup.com/Auth0-Online-Meetup/), [_Seattle_](https://www.meetup.com/Seattle-Identity-and-Security-Meetup/), [_London_](https://www.meetup.com/London-Identity-and-Security-Meetup/), and [_Hamburg_](https://cybersecmonth-hamburg.de/). 

Cybersecurity is everyone’s responsibility. We all have to Own It. Secure It. Protect it, so we can stay safe online.


Personal Information Security Checklist for Family and Friends

Data security is top priority for Auth0. Introducing our latest information security certification: ISO 27001.



**BELLEVUE, Wash. -- July 31, 2018 --** [Auth0](https://auth0.com/), a global leader in Identity-as-a-Service (IDaaS), today announced it has achieved ISO 27001:2013 and ISO 27018:2014 certification, signifying Auth0’s ongoing commitment to providing its customers with the highest standards for information security. These certifications provide a more comprehensive way for Auth0’s customers to address their own privacy and security requirements.

ISO 27001 is a globally recognized standard and code of practice to ensure proper implementation of an Information Security Management System (ISMS). The standard specifies the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving a documented ISMS within the context of the organization’s overall business risks. It sets forth a risk-based approach that focuses on adequate and proportionate security controls that protect information assets and give confidence to interested parties. Auth0's certification is an independent testament of compliance to these rigorous standards by a certified third party.

"The time and investment it takes to gain these important certifications is completely worthwhile since they give us the ability to service our customers even better," said Joan Pepin, CISO and VP of Operations at Auth0. "The addition of ISO 27001 and 27018 gives customers assurance that Auth0 is complying to an internationally-accepted information security framework." 

The certification was performed by Schellman & Company, LLC, an ANAB and UKAS accredited Certification Body based in the United States. Details of ISMS certification are publicly available at [https://www.schellman.com/certificate-directory](https://www.schellman.com/certificate-directory).

For more information about Auth0’s approach to security, please visit: [https://auth0.com/security](https://auth0.com/security). 

## About Schellmann

Schellman & Company, LLC is a leading national provider of attestation and compliance services - and the only company in the world that is a CPA firm, an ANAB and UKAS accredited ISO Certification Body, a globally licensed be PCI Qualified Security Assessor Company, a HITRUST assessor, and a FedRAMP 3PAO. Schellman’s approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives using a single third party assessor. For more information visit [www.schellman.com](https://www.schellman.com/).

<include src="asides/AboutAuth0" />

### **Media Contact:**

Jeana Tahnk<br/>
Corporate Communications<br/>
Auth0<br/>
[jeana.tahnk@auth0.com](mailto:jeana.tahnk@auth0.com)

Kasia Hall<br/>
Matter for Auth0<br/>
[khall@matternow.com](mailto:khall@matternow.com)<br/>
971-246-7898

---


Auth0 Achieves ISO 27001:2013 Certification

1097492785caf9ffeebffeb624202d8f?s=200 avatar

1097492785caf9ffeebffeb624202d8f?s=200

Prosper is a great speaker, community leader, open source hacker, technical consultant, and a fervent Developer Advocate. He is a full-stack software engineer who has worked on biometric, health and developer tools. Prosper recently co-founded a startup called Eden that’s focused on improving the quality of lives in Nigeria and currently leads the engineering team. He also co-founded forloop, the largest developer community in Africa.

Former Auth0 Employee

Prosper Otemuyiwa

Help your family and friends being secure with this printable security guide


**TL;DR:** The digital age is upon us. As much as it has blessed us and made collaboration and work easier, faster and more efficient, it also has its downsides. A lot of damage can be done by someone in a remote village over the internet. Cybercriminals carefully exploit loopholes to steal information and perform unauthorized transactions across devices and applications that are not secured enough.

This article aims to serve as a personal information security identity guide for you, family and friends. Follow this guide and keep your family and friends safe from cybercriminals this season!

<div class="alert alert-info alert-icon">
  <i class="icon-budicon-500"></i>
  <strong>Find the printable guide to give it to your family and friends here: <a href="https://cdn.auth0.com/blog/personal-info-security-guide/Personal-Information-Security-Guide.pdf">Personal Information Security Guide for Family and Friends PDF</a>.</strong>
</div>

## The Guide

We came up with a list of questions that sums up the common security challenges that a lot of people experience and also provided answers that can guide you below:

### How do I make sure my email is secure?

* Set up [Two-Factor Authentication](https://auth0.com/learn/two-factor-authentication/). This adds an additional step to verifying a user logging into their email, e.g Your email provider sends a code to your phone that you must enter into a form to successfully authenticate and gain access to your email.
* Avoid sending confidential information such as passwords or social security numbers through email.
* Assume links in your emails are not from a secure and reputable source e.g links that lead to banking services and billing sites. Type the address in the browser to go to these sites instead.

![2FA](https://images.ctfassets.net/23aumh6u8s0i/3aoXPDNrzYX9QSlwQ811HU/94256dc0e5937a702adf56f09bee237e/tfa-what)

### How do I secure my social network accounts and prevent them from being hacked?

* Don’t use the same password across multiple online services.
* Use a password manager such as [LastPass](https://www.lastpass.com) or [1Password](https://1password.com) to store and also generate secure passwords.
* Change passwords frequently.
* Register yourself on [Have I Been Pawned](https://haveibeenpwned.com) to ensure your accounts haven't been hacked.
* Set up [Two-Factor Authentication](https://auth0.com/learn/two-factor-authentication) if it’s available on the social network.

### Is my home network secure?

When setting up your wireless network at home, ensure you have a very strong WPA-2 (Wi-Fi Protected Access 2) password by following this process:

* Log into your account
* Open the wireless tab to edit your wireless settings
* Click to enable **WPA-2** from the dropdown option
* Set a strong password. Check out how to pick a good password on question #5

![WPA-2 Settings Dialog](https://images.ctfassets.net/23aumh6u8s0i/qxKEKQUBsAA4YtkNpIkXX/4ec646da1616fe96a06426fa9d900f26/X5wMl)

### How do I detect phishing emails?

**Phishing** emails are emails designed to look like legitimate messages from actual banks, businesses, and other organizations. In reality, they are crafted messages from cyber-criminals intended to steal your identity, personal information, or money. 

Do not click on any links that you do not recognize, especially if they come from an unknown source. Better still, assume all links from emails are phishing attempts. If it’s a mail from the bank, type the address in the browser rather than clicking on the link. Often, phishing emails do not include your name but something generic like **“Dear Client,”...**. 

Watch out for such emails.

![Phising Email](https://images.ctfassets.net/23aumh6u8s0i/6kvkEo4fq3jmKVoqTh5Tmf/27b93bfaed750d2ba87fc8c608565ee0/phishingemail)

_Phishing Email_

### How to pick a good password?

* Your password should be at least 10 characters long.
* It should be a combination of alphanumeric, special, lower and uppercase characters.
* Check out this [guide](https://auth0.com/docs/connections/database/password-strength) for more information on defining a strong password.

![How to pick a good password](https://images.ctfassets.net/23aumh6u8s0i/4Fi0J601exBxy5EBXti6jD/2840507af25ad497fd94a665ab872627/password-strenght)

### Do I need antivirus software on my computer?

Yes, antivirus software is needed on your computer. It detects, prevents, and removes malicious software on your computer. You can install trusted antivirus software like [Kaspersky](https://www.kaspersky.com) or [Avast](https://www.avast.com) on your computer.

### Why is it not good to share too much information about yourself and family on social media platforms?

If you post too much information about yourself, friends and family, an identity thief can find information about your life, use it to answer *challenge* questions on your accounts, and get access to your money and personal information.

Make as little content as possible public. For example, *share only with friends*, is a good default option for Facebook accounts.

![Sharing too much information on social media](https://images.ctfassets.net/23aumh6u8s0i/1FVp2HYk6ZhMp4DjoYZntp/d1c112dc22fea1d50bb54210e1e36d6b/2016-09-30-1475236577-9265213-socialmediaimage)

_Source: Huffingtonpost.com_

### Should I care about security while connecting to Wireless Networks?

While connected to public WiFi networks, ensure that the sites you visit or submit  information to are secure by ensuring that the URL starts with **https** instead of **http**.

Enable the firewall on your computer. You can configure the application firewall on your Mac by going through the [apple support instructions](https://support.apple.com/en-ng/HT201642). You can also configure the application firewall on your Windows PC by going through this [instructions](https://goo.gl/CKKPcB).

### How do I detect phone scams?

**What are Phone Scams?** Phone scams are text messages or phone calls designed to trick you into providing sensitive information to unauthentic authorities. 

 * Make sure you check out for typos
 * Watch out for “Too good to be true” deals sent via text messages.

![Phone Scams](https://images.ctfassets.net/23aumh6u8s0i/4wi0zL8pD35Vf6po1lm2b0/10580c8f026dc30e3ce1504c1b6ab445/phonescams)

### How to use a password manager?

A password manager is software that helps store and organize user passwords. It is not advisable to use the same passwords across various websites and services, thus using a password manager helps alleviate the challenge of committing complex and strong passwords to memory. There are several password managers available to use. Notable ones and instructions on how to use them include [1Password](http://www.businessinsider.com/1password-manager-how-to-2015-6), [Dashlane](https://blog.dashlane.com), [LastPass](https://lastpass.com/how-it-works) and [KeePass](http://keepass.info/help/base/firststeps.html).

### Why should I not reuse my password on every website?

Reusing a password on several services is a high-risk venture. If your password is compromised on one service, hackers can have access to your accounts on several services and cause lots of damage.

### How would I know if a website is secure to enter my credit card information?

Look out for the encryption symbol, *padlock*, in the URL. Verify that the site is secure by ensuring that the URL starts with **https** instead of **http** before providing sensitive information to the website. In addition, prefer recognized brands over unknown ones, even if the padlock icon for https is present in the address bar.

![Unsecure Sites](https://images.ctfassets.net/23aumh6u8s0i/7wJqzJ0zgyqqCbHlvqpjdw/cfb8474d9a636d4c621c4c78ec5ea306/Unsecure-Sites)

### How do I make sure a website is real?

Look out for typos in the site name and URL. A typical example is [https://www.paypal.com](https://www.paypal.com) , a fake version of this might be *https://paypa1.com*. Also look out for the encryption symbol, *padlock*, in the URL. Verify that the site is secure by ensuring that the URL starts with **https** instead of **http**.

![secure_website](https://images.ctfassets.net/23aumh6u8s0i/2zmsKZfQFzJmycmk6rAdrD/c50f434ca37b8dc0333190ba1f3e8493/secure_website.png)

### How to secure your mobile devices?

* Ensure that your mobile device Operating System(OS) is always up-to-date.
* Have a lock system for your device, e.g password lock, fingerprint lock or pattern lock.
* If there is an option for *“encryption”* in the device settings, enable it.
* Do not use alternate app stores e.g Alternatives to Google Play & App Store

![Fingerprint Hero](https://images.ctfassets.net/23aumh6u8s0i/5mTklB19ML2ZkbRu9nDse6/acc0fb06fdf2323e68e4320a2a4b6f44/Fingerprint-Hero)

### What are your personal backup strategies?

We recommend that you backup your personal information securely on a regular basis. There are several good options for automatically backing up your data. Some popular and trusted options are [Crashplan](https://www.crashplan.com), [Carbonite](https://www.carbonite.com), [SpiderOak](https://spideroak.com) and [BackBlaze](https://www.backblaze.com). For Mac users, you can also use [Apple Time Machine](https://support.apple.com/en-us/HT201250).

![Backups](https://images.ctfassets.net/23aumh6u8s0i/4RMJTko1iCpclEwajl62vz/1d10f933fd5529f1c3a710ca59f0c11d/backup)

## Conclusion

Finally, we would like to give you a word of advice to complement these tips to ensure you, your family and friends stay safe this season and beyond! Keep these things in mind, and we are hopeful that you will enjoy this season with your friends and family.

<div class="alert alert-info alert-icon">
  <i class="icon-budicon-500"></i>
  <strong>Find the printable guide to give it to your family and friends here: <a href="https://cdn.auth0.com/blog/personal-info-security-guide/Personal-Information-Security-Guide.pdf">Personal Information Security Guide for Family and Friends PDF</a>.</strong>
</div>

Merry Christmas and Happy new Year in Advance!


Personal Information Security Guide for Family and Friends

001c9ddc5ceb9829b6aaf24f5d28502a

I am software developer with a keen interest in open-source technologies, Linux, and native development. I've worked on many different platforms Android, iOS, Win32, Linux, FreeRTOS, the Web, and others. I've gone through the whole stack and I enjoy learning and using the latest technologies. I now work as a full-stack developer at Auth0.

Senior Engineer

Sebastian Peyrott

The recent leak of US Navy sailors' personal information puts in the spotlight the difficulties of keeping sensitive data secure, here's what you can do about it

"info sec"