The Good, the Bad and the Improvable of PCI DSS v4
...specify what the assessor must do to mark a requirement as ‘in place’. One requirement that often catches organisations out is the need to have a documented procedure for any...
Your Search Results
Your search results for ‘catches of the month’ returned 129 results
How to Address AI Security Risks With ISO 27001
...what are the top controls for protecting yourself from malicious use of AI? It’s really a case of looking through the controls and seeing what catches your eye. Things like...
What Happens if You Get PCI DSS Compliance Wrong?
...to merchants. These can be substantial and are typically applied on a monthly basis until compliance is demonstrated – they’re not a one-off penalty. Increased transaction fees Acquirers may also...
List of Data Breaches and Cyber Attacks – June 2023
...We break down the month’s cyber security landscape for each month, and you can find more information about our list and the biggest security incidents of the month. On this...
The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023
Welcome to this week’s round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will...
Sophie Sayer on the IT Governance Partner Programme
...how much our partner programme has developed over the past six years. We have 400 registered partners, and this number is growing month on month. When you partner with us,...
ICO Enforcement Action: £4.63 Million in PECR Fines
...notice. When were the fines issued? On average, the ICO issues 1.4 PECR fines a month. However, as you can see in the graph below, the ICO tends to issue...
Global Data Breaches and Cyber Attacks in September 2026 – At Least 252.8 Million Breached Records
...on 4 September. No attacker has been named. Trends in September 2026 This is our first monthly report since October 2025, so we’re making no month-on-month comparisons this time. However,...
Defining the scope for Cyber Essentials certification
...are pursuing Cyber Essentials Plus certification, your technical audit must be completed within three months of your Cyber Essentials certification date. 5 Cyber Essentials Plus only – technical audit All...
How to Respond to a DSAR (Data Subject Access Request)
...be extended by two additional months, but the individual must be informed within the initial month, along with reasons for the extension. Who is responsible for responding to DSARs? Typically,...