Can healthcare organisations address their challenges with a single cyber...
It’s no secret that the healthcare industry is a leading target for cyber criminals. 2017 saw an exponential rise in data breaches affecting both healthcare providers and industry partners, with...
View ArticleHow your organisation can achieve cyber resilience
In today’s evolving threat landscape, traditional cyber security measures such as firewalls and antivirus software are proving inadequate. To ensure your organisation’s survival in 2018, you must...
View ArticleNIS Directive consultation feedback published – how to comply
In August 2017 the UK government issued a consultation document on compliance requirements for the upcoming Directive on security of network and information systems (NIS Directive). There were more...
View Article5 reasons why business continuity management is essential to your...
Business continuity management is the most comprehensive approach to organisational resilience, and involves managing risks to critical business functions to ensure continuity of service in the event...
View ArticleRise in cyber attacks leads to cyber insurance business soaring
The world is changing rapidly and cyber criminals are adapting fast. Targeted cyber attacks by skilled and persistent criminals are now a worrying business reality. Increased interest in cyber...
View ArticleWhat documentation do I need to achieve cyber resilience?
Organisations have a harder time than ever staying cyber secure. Cyber criminals are constantly looking for new ways to launch attacks, so even the most vigilant organisation can get caught out. After...
View ArticleAlign your cyber resilience strategy with government best practice
A Cyber Resilience Strategy for Scotland: Public Sector Action Plan 2017/18 was developed by the Scottish government and the National Cyber Resilience Leaders Board (NCRLB) to enhance the cyber...
View ArticleWeekly discussion podcast: Critical Information Infrastructure, Part 4
This week’s extract is taken from Toomas Viira’s book Lessons Learned – Critical Information Infrastructure Protection, which is a vital source of information and thought-provoking insights into...
View ArticleHow Cyber Essentials plays a key role in cyber resilience strategies
The increasing frequency and severity of cyber attacks means it’s no longer enough to trust that you can defend against every potential attack. Statistics suggest it’s inevitable that your organisation...
View ArticleKey deadlines for the Scottish Public-Sector Action Plan on cyber resilience
Scottish public-sector bodies and their key partners are required to take certain measures to improve cyber security and promote cyber resilience by the end of 2018, according to the Scottish Public...
View ArticleThe 5 biggest information security concerns facing organisations
When implementing defences to keep data secure, organisations should rightly put a lot of effort into preventing external actors penetrating them, but as the 2018 BCI Horizon Scan Report reminds us,...
View ArticleWeekly podcast: Reports galore and more cryptojacking
This week, we discuss new reports from Cisco, McAfee and the CSIS, and Big Brother Watch, and hear more about malicious Monero mining. Hello and welcome to the IT Governance podcast for Friday, 23...
View ArticleThe NIS Directive – Free updated compliance guide
The Directive on Security of Network and Information Systems (NIS Directive) ((EU) 2016/1148) aims to achieve a high common level of network and information systems security across the European Union....
View ArticleHow digital service providers should prepare for the NIS Directive
Many organisations are focused on the EU General Data Protection Regulation (GDPR), but this May sees another EU legislation coming into effect: the Directive on security of network and information...
View ArticleFree green paper: essential compliance guidance for the NIS Directive
The Directive on security of network and information systems (NIS Directive) must be transposed into national law by May 2018. The Directive requires operators of essential services (OES) and digital...
View ArticleHow ISO 27001 and ISO 22301 can help keep your organisation secure
Most organisations will do anything within their budget to prevent cyber attacks, but senior staff are often given conflicting advice on where to spend their money. Should they invest in the latest...
View Article15% of computers still run on Windows XP at NHS Lothian in Scotland
After the WannaCry attacks in May 2017, many Scottish NHS health boards have still not updated their computer systems. The attack last year had a crippling effect on the NHS: hospitals and surgeries...
View ArticleMyFitnessPal data breach: 150 million app users affected
Last week it was confirmed that the personal details of approximately 150 million users of Under Armour’s MyFitnessPal app were compromised after criminal hackers acquired usernames, email addresses...
View ArticleBS 31111: the new cyber security standard explained
Last month, a new British Standard was launched. BS 31111 is suitable for organisations of any type and size, and provides essential guidance for executive management to manage their cyber risk and...
View ArticleFrequently asked questions about business continuity
Business continuity is a hot topic due to a growing body of legislation and the increased risk of potentially devastating disruptions. However, the concept has been around for a long time, and...
View Article