IT Governance

JULY 29, 2019

This blog has been updated to reflect industry developments. Protecting your organisation against cyber crime can sometimes feel like a never ending game of security whack-a-mole. Just as soon as you’ve secured one weakness, it seems as though another vulnerability rears its head. Originally published Mar 19, 2018.

Information Security 66

Information Security Security Risk Phishing 66

IT Governance

JULY 25, 2024

The PCI DSS consists of a standardised, industry-wide set of requirements and processes for: Policies; Procedures; Software design; Security management; Network architecture; and Critical protective measures. The Standard also has a requirement for security awareness training. Review your awareness programme at least annually.

Security awareness 77

Security awareness Compliance Data breaches Phishing 77

Thales Cloud Protection & Licensing

DECEMBER 18, 2018

Many years ago, a board member said to me, “We’ve employed you to do information security, so why do we have to do anything?” Instead we will see organisations start proactively approaching information security experts for actionable advice and guidance. This was fairly typical.

Information Security 75

Information Security Security Risk GDPR 75

IT Governance

MARCH 6, 2019

Yes, most information security experts will be able to explain what confidentiality, integrity and availability mean, but other terms, like ‘risk’, are surprisingly vague. There’s a good reason for this: information security best practice is constantly evolving, meaning any advice listed in the Regulation could soon be out of date.

Information Security 74

Information Security GDPR Data breaches Compliance 74

IT Governance

DECEMBER 22, 2023

In addition, DORA requires that financial entities only contract with providers that “comply with appropriate information security standards”. What “information security standards” are considered “appropriate”? Book now The post The Third-Party Threat for Financial Organisations appeared first on IT Governance UK Blog.

Risk 102

Risk Information Security Compliance GDPR 102

IT Governance

OCTOBER 21, 2021

Cyber security roles are often technical and require knowledge of the threat landscape, detection/monitoring, technical protection, risk management and cyber incident response. Information security is a broader category that protects all information assets, whether in hard copy or digital form. Structured learning paths.

Security 110

Security Information Security GDPR Data Privacy 110

IT Governance

SEPTEMBER 26, 2024

Extending your ISMS to address Cloud security risks ISO 27001 sets out the specification – the requirements – for an effective ISMS (information security management system). But did you know you can extend your ISO 27001 ISMS to cover specific aspects of Cloud security ? Finding this blog useful? What is ISO 27018?

Cloud 88

Cloud Risk Information Security Security 88

IT Governance

OCTOBER 26, 2022

Implementing an ISO 27001-compliant ISMS (information security management system) can seem complex, and it’s often difficult to know how the Standard’s specifications should be applied to your organisation. Our ISO 27001 Roles Learning Path provides a unique guide to help you decide which training courses and?qualifications

Compliance 96

Compliance Risk Education Information Security 96

Troy Hunt

MAY 31, 2018

At the gala dinner last night, without any warning beforehand, I somehow walked away with this: #AusCERT2018 Award for Information Security Excellence goes to @troyhunt @AusCERT 2018 Gala Dinner pic.twitter.com/9lxmwX0tdR — ValdemarJakobsen???? jamver) May 31, 2018. Yes, that guy is wearing a cape, it was a Star Wars thing.).

Information Security 53

Information Security Security Data breaches IT 53

IT Governance

OCTOBER 3, 2024

In this blog Security challenges of the Cloud Legal and contractual requirements Who’s responsible for what? In fact, various standards and frameworks now list explicit Cloud security requirements. This includes ISO 27001:2022 , which has a new control for ‘information security for use of Cloud services’.

Cloud 99

Cloud Risk Security GDPR 99

IT Governance

JULY 6, 2022

It’s not simply a case of sitting your employees down on a training course and considering it ‘job done’. Fortunately, the creator of the forgetting curve, Hermann Ebbinghaus, explained that when training courses are done correctly, they can improve learners’ retention levels. Take information security staff awareness for instance.

Information Security 101

Information Security Data breaches Education Phishing 101

IT Governance

FEBRUARY 17, 2022

If you’re serious about information security, you should consider gaining a Microsoft qualification. ISO 27001 is often considered the go-to qualification for information security professionals. The most comprehensive advice comes via ISO 27017, the international security standard for Cloud services.

Cloud 97

Cloud Systems administration Information Security Security 97

Lenny Zeltser

JUNE 13, 2024

Creating an informative and readable report is among the many challenges of responding to cybersecurity incidents. This blog highlights my advice on writing such incident reports. Each of these high-level questions conceals other questions--too many to list in this blog post. Detail the steps taken and what remains to be done.

Cybersecurity 107

Cybersecurity Communications IT Security 107

AIIM

FEBRUARY 27, 2020

In several recent posts, I’ve talked about professional development options for information management professionals and provided guidance on how to determine whether a particular course or certification is a good fit. For the most part, I’ve stayed away from blogging about AIIM's training for two reasons.

ECM 119

ECM Records Management Metadata Information governance 119

IT Governance

OCTOBER 31, 2018

Organisations are always looking for ways to improve their cyber security defences, but they often overlook the value of enrolling their employees on cyber security training courses. If you want to keep your organisation secure, you need your employees to know what they’re doing. Which course is right for you.

Security 96

Security GDPR Information Security Data breaches 96

IT Governance

OCTOBER 31, 2018

Organisations are always looking for ways to improve their cyber security defences, but they often overlook the value of enrolling their employees on cyber security training courses. If you want to keep your organisation secure, you need your employees to know what they’re doing. Which course is right for you.

Security 96

Security GDPR Information Security Data breaches 96

The Last Watchdog

JANUARY 8, 2023

In golf there’s a popular saying: play the course, not your opponent. This smarter form of security fills a glaring gap in today’s solution-saturated market; strategy, and the strategy that can only come from getting a full view of the course. Smart security also means doing more with less so the company as a whole can run lean.

Risk 214

Risk Cybersecurity Manufacturing Security 214

IT Governance

AUGUST 1, 2022

In this blog, we look at the key issues you must address if you are to maintain ISO 27001 compliance. Your ISMS (information security management system) was built to address risks that you identified during the certification process, but the threat landscape is constantly evolving. How often do you need recertify to ISO 27001?

Compliance 106

Compliance Information Security Risk Data breaches 106

IT Governance

FEBRUARY 9, 2021

Given the amount of data that marketing agencies collect, it’s essential that staff have a hands-on role in protecting their organisation – which is why an ISMS (information security management system) is essential. The system helps organisations manage, monitor and improve their security practices in one place.

Marketing 108

Marketing Security GDPR Privacy 108

IT Governance

MARCH 17, 2021

Some people attend training courses to pick up the knowledge of ISO 27001, and others go one step further, hiring an ISO 27001 consultant to guide them through the process. Now in its seventh edition, IT Governance – An International Guide to Data Security and ISO 27001 gives guidance on implementing effective information security management.

Information Security 111

Information Security Government GDPR Risk 111

IT Governance

JANUARY 19, 2023

It’s one of several measures that we recommend in our Information Security and Cyber Security Staff Awareness E-Learning Course. This online training course is the ideal way to teach your employees about data protection threats.

Passwords 100

Passwords Phishing Risk Access 100

IT Governance

MARCH 15, 2019

Earlier this month we caught up with Geraint Williams, CISO for GRC International Group plc, to find out more about information security and how he raises awareness within the workplace. Interactive e-learning courses are a time- and cost-effective way to educate staff on key organisational issues in a structured manner.

Education 57

Education Security awareness Information Security Risk 57

IT Governance

NOVEMBER 29, 2018

A version of this blog was originally published on 10 November 2017. Those seeking a qualification that demonstrates a broad understanding of information security management should consider the British Computer Society CISMP (Certificate in Information Security Management Principles). Get qualified today.

Information Security 50

Information Security Data Privacy Government Marketing 50

IT Governance

OCTOBER 27, 2020

So, for example, if you’re interested in becoming a penetration tester, you should take the Certified Ethical Hacker (CEH) Training Course , and if you’re interested in information security auditing, you should take the Certified ISO 27001 ISMS Lead Auditor Training Course.

Security 98

Security Information Security Government IT 98

Security Affairs

APRIL 10, 2023

As a result, there is currently no access to our systems, which we deeply regret of course,” reads the security breach notification sent by the company to UK and Ireland customers, as reported by BleepingComputer. We have taken immediate action and have preventively isolated all systems and servers to mitigate any further impact.

Data breaches 88

Data breaches Education Access Privacy 88

IT Governance

MARCH 29, 2019

E-learning courses are a preferred option for training employees because they are cost-effective and can be implemented quickly and with minimal disruption – the training can be taken around existing commitments. Find out more about our e-learning courses and how they can help improve employee awareness within your organisation here.

Security 85

Security Security awareness Risk Information Security 85

IT Governance

JUNE 8, 2020

What does cyber security training teach you? A cyber security training course will increase your IT team’s awareness of your organisation’s wider defence mechanisms. After all, it’s increasingly hard to find qualified information security professionals, with one report estimating that there will be 3.5

IT 75

IT Security Phishing Passwords 75

IT Governance

MAY 7, 2019

Why your employee’s social media use is an information security risk. Our new Social Media Staff Awareness Human Patch E-learning Course is designed to combat the information security risks of social media use by employees. Course contents. Oversharing. Recognising, reporting and managing social media risks.

Education 91

Education Risk Information Security Data breaches 91

IT Governance

MAY 11, 2021

Regular readers of this blog will have seen us lament the growing number of ransomware attacks in the past year. Our Q1 2021 review of data breaches found that almost one in three publicly disclosed security incidents was a ransomware attack, and in April alone, we discovered 53 cases. Find out more. Find out more.

Ransomware 105

Ransomware Data breaches Phishing Government 105

IT Governance

JANUARY 31, 2019

Information security professionals invariably spend most of their time and resources developing measures to prevent crooks breaking into their systems, but did you know that the majority of data breaches are caused by an employee misplacing, stealing or being tricked into handing over sensitive information ? Campaign launch.

Security awareness 82

Security awareness Information Security Data breaches GDPR 82

IT Governance

APRIL 27, 2023

For instance, rather than employing an existing expert, organisations could build an internal security team and encourage employees in security-adjacent roles, such as IT, to take cyber security training courses.

Security 96

Security Digital transformation Data breaches GDPR 96

IT Governance

NOVEMBER 23, 2023

To help navigate such security-specific challenges, organisations may find it useful to reference a best-practice standard like ISO 27005 , which offers guidance on managing information security risks. Certified DORA Foundation Training Course You may also be interested in taking our Certified DORA Foundation Training Course.

Risk 85

Risk Data breaches Authentication Financial Services 85

IT Governance

APRIL 2, 2019

Anyone with an interest in information security will have encountered ISO 27001 , the international standard that describes best practice for an ISMS (information security management system). It’s a supplementary standard that provides advice on how to implement the security controls listed in Annex A of ISO 27001.

Information Security 88

Information Security Compliance Risk Security 88

The Last Watchdog

JANUARY 9, 2023

As the world becomes more digital and connected, it is no surprise that data privacy and security is a growing concern for small to medium sized businesses — SMBs. Related: GDPR sets new course for data privacy. However, SMBs have can struggle with the expense and execution of complying with data security laws in many countries.

Data Privacy 210

Data Privacy Compliance Privacy GDPR 210

IT Governance

MARCH 13, 2019

Their Information Security and Cyber Security Staff Awareness E-learning Course provides an overview of information security weaknesses that criminals often exploit, and allows your employees to apply the knowledge gained, using practical activities throughout the course and an assessment to measure understanding.

Data breaches 84

Data breaches Information Security Phishing Cybersecurity 84

IT Governance

FEBRUARY 25, 2019

A version of this blog was originally published on 8 December 2017. There has never been a better time to get into cyber security, with growing demand for experts promising increased salaries and job opportunities. In this blog, we provide tips for getting your cyber security career started no matter your background.

Security 73

Security Systems administration Information Security Government 73

IT Governance

SEPTEMBER 12, 2024

But for all its potential, there are legitimate concerns around, among other things, data security. Bridget Kenyon is the CISO (chief information security officer) for SSCL, a member of the UK Advisory Council for (ISC) 2 , and a Fellow of the Chartered Institute of Information Security.

Risk 86

Risk Security Education Information Security 86