Collaborate Disseminate
We’re back with another round-up of some of the most notable information security stories of the past month. In this edition, we discuss a hospital employee who abused their power to contact patients, an update on last year’s Ticketmaster d… Continue reading Monthly cyber security review: December 2019
As we enter December, many organisations slow down as they turn their attention to Christmas. Office parties, secret Santas and discussions of when it’s acceptable to put the tree up start to take precedence over work, as employees kill time hopi… Continue reading Monthly cyber security review: November 2019
Accountability is an essential principle of the GPDR (General Data Protection Regulation). It requires organisations to take responsibility for compliance and to demonstrate their actions. The concept was implicit in the GDPR’s UK predecessor, th… Continue reading What you need to know about accountability under the GDPR
ISO 27001 compliance is a complex, ongoing process, which organisations should track using KPIs (key performance indicators). In this blog, we explain what KPIs are and how they fit into your ISO 27001 compliance project, and provide examples that can … Continue reading Why you should use KPIs for ISO 27001 compliance
You won’t get far with your GDPR (General Data Protection Regulation) compliance activities if you don’t know what’s considered personal data. But it’s not as simple as identifying whether the information you’re processing… Continue reading How to identify sensitive personal data
Each year, Ponemon Institute surveys organisations around the world to estimate the financial effects of data breaches. Its 2019 report found that the average cost was $3.92 million (about £3.17 million). This is a steady increase on last yearR… Continue reading Average cost of a data breach rises to £3.18 million
With cyber attacks regularly making the headlines, there is growing pressure on regulators to root out organisations that fail to comply with their obligations to protect data. To stay secure and avoid regulatory action, organisations need to identify … Continue reading How to comply with information security laws and regulations
As we’ve seen with the EU General Data Protection Regulation (GDPR), many organisations fail to prepare for laws and regulations because they don’t realise they are subject to them. Of course, ignorance is no excuse, and non-compliance coul… Continue reading Finding laws and regulations that are relevant to your organisation
Personal data is the lifeblood of many organisations, but they need to keep that information secure. If they don’t, they face reputational damage, lost time and money recovering from the incident and maybe even fines. Regulators will impose fines… Continue reading The importance of robust information security