What is an information security framework and why do I need one?

Posted by:

What is an information security framework and why do I need one?

An information security framework, when done properly, will allow any security leader to more intelligently manage their organizations cyber risk.

The framework consists of a number of documents that clearly define the adopted policies, procedures, and processes by which your organisation abides.  It effectively explains to all parties (internal, tangential and external) how information, systems and services are managed within your organisation.

The main point of having an information security framework in place is ...

Read More →
0

Compliance, cyber-security, Data Breach, Information Security, IT Security, Network Security, Penetration Testing, Security Alerts

, , , , , , , ,

The truth about managing Supply Chain risk? It’ not easy

Posted by:

The truth about managing Supply Chain risk? It’ not easy

Ahhh the joys of supply chain risk management. It is a complex beast with many heads, each focusing on the problem from a different operational standpoint.

The goal is of course to build and maintain a resilient system of checks and balances so your organisation’s supply chain is healthy and operating at an acceptable level of risk.

If this sounds easy to you, I am willing to bet you’re a theoretical expert.

Read More →

0

CISO On Demand, Cloud Security, Compliance, Cyber Criminals, cyber-security, Identity Theft, IT Security

, , , , , ,

GDPR: The big myth that could slide US firms into hot water.

Posted by:

GDPR: The big myth that could slide US firms into hot water.

It is now 12 weeks until the new EU GDPR legislation becomes a globally enforceable law. GDPR is an important new EU-mandated regulation: it provides the foundation for how organizations around the globe collate and process sensitive customer information belonging to EU residents.

Some say this is the best thing since sliced bread, in that it gives back a modicum of control to some individuals whose data is being processed willy-nilly in many organizations around the globe. ...

Read More →
0

Cloud Security, Compliance, cyber-security, GDPR, Identity Theft, Information Security, IT Security, Penetration Testing

, , , , , , ,

Blockchain: Can it secure the Internet?

Posted by:

Blockchain: Can it secure the Internet?

The recent Bitcoin bubble thrust the concept of cryptocurrencies firmly into the public consciousness. But attention quickly shifted away from Bitcoin itself – just one of a huge range of crypto-powered digital currencies, after all – and onto the technology that underpins it: the blockchain.

Blockchain has been the focus of huge amounts of research and development for at least a few years now, but it’s only really in the last six months or so that ...

Read More →
0

Blockchain, Data Breach, Identity Theft, Information Security, IT Security, Network Security, Security Alerts

, , , , , ,

Convincing executive stakeholders that even the tiniest cyber-incident can lead to big disasters.

Posted by:

Convincing executive stakeholders that even the tiniest cyber-incident can lead to big disasters.

We published an article recently about how many senior information security professionals, be they CISOs or CIOs, are worried about their systems being vulnerable to breach. One of the main problems is getting senior stakeholders, like the Board or the executive management team, to buy into your information security strategy. We shared a few approaches on how to address this ubiquitous problem.

Achieving executive buy-in on information security policies is much more difficult than ...

Read More →
0

CISO On Demand, Compliance, cyber-security, Data Breach, Incident Response, Information Security, IT Security, Network Security, Penetration Testing

, , , , , , ,

Cybersecurity budget: CISO advice for getting your Board of Directors to take notice

Posted by:

Cybersecurity budget: CISO advice for getting your Board of Directors to take notice

There are many CISOs and CSOs out there hiding their proverbial sweaty palms.

They’re stressed out, worried that it is just a matter of time before their network gets caught up in some embarrassing data debacle – perhaps it will be ransomware, or a targeted attack or an insider leak.

And they know they will then truly be in the hot seat.

Thing is, for many, it is a fingers-crossed game, because ...

Read More →
1

Compliance, Cyber Criminals, cyber-security, Data Breach, Identity Theft, Information Security, IT Security, Network Security, Penetration Testing

, , , , , ,

Cybersecurity predictions 2018: 5 key infosecurity trends to watch out for

Posted by:

Cybersecurity predictions 2018: 5 key infosecurity trends to watch out for

In our last post, we talked about the most significant data breaches of 2017.  And what better way to wrap up 2017 than by pulling out our crystal ball and gazing into the near future.

Using our expertise in infosecurity, here is our shortlist of what to watch out for in the upcoming year:

Expect new EU regulation GDPR to make headlines.

The way in which your website collates ...

Read More →
0

Compliance, Cyber Criminals, cyber-security, Data Breach, Information Security, IT Security

, , ,

Takeaways from 2017’s worst cyber hacks, data leaks and breaches

Posted by:

Takeaways from 2017’s worst cyber hacks, data leaks and breaches

2017 may be remembered as the year where people and organizations were hammered by mega breaches. We estimate that more US residents lost private or sensitive data this year than ever before.

This is largely thanks to massive cyber events which were either designed to steal data, hold a company for ransom, or embarrass organizations by publicizing private data, such as customer details to unreleased television series. Sometimes, however, it’s just do to simple human error. ...

Read More →
0

cyber-security, Data Breach, Information Security, IT Security

, , , , , , , , ,

What to do with the last of your 2017 cyber security budget?

Posted by:

What to do with the last of your 2017 cyber security budget?

Late in the financial year, it can difficult to figure out the best way to spend what’s left over in the information security budget.

No one wants to leave money on the table, especially when it could significantly reduce your exposure to cyber risk. The problem is that for any experienced IT security lead, you know there are thousands of ways that money could be spent: training, new security software, hardware upgrades, policy or system reviews, etc

Any of ...

Read More →
0

Compliance, Data Breach, Information Security, IT Security, Network Security, Penetration Testing

, , , , ,

Getting ahead of a new breed of Ransomware

Posted by:

Getting ahead of a new breed of Ransomware

We typically understand a ransomware attack to be a demand for payment in return for decrypting files. But evolution, even in malware, is inevitable. A fairly new disruptive cyber cell known as The Dark Overlord is relying on the threat of reputation damage to “encourage” its victims to pay up.

You might be thinking that reputation damage wouldn’t be enough to make your firm shake in its boots, but you’d be wrong. These Dark Overlord cyberbullies use nasty tactics ...

Read More →
0

Cyber Criminals, cyber-security, Data Breach, Incident Response, Information Security, IT Security, Network Security, Penetration Testing

, , , , ,

Page 3 of 14 12345...»