Cyber Security Risk Management
...risk management Risk management is a key requirement of many information security standards and frameworks, and laws such as the GDPR (General Data Protection Regulation) and NIS Regulations (Network and...
...risk management Risk management is a key requirement of many information security standards and frameworks, and laws such as the GDPR (General Data Protection Regulation) and NIS Regulations (Network and...

...– sensitive authentication data), you should never store data you don’t need. The same applies to personal information and the GDPR (General Data Protection Regulation): the data minimisation principle says...

...requirements like Article 32 of the GDPR (General Data Protection Regulation), which demands “appropriate technical and organisational measures” to ensure data security. ‘Integrity and confidentiality’ is also one of the...

...Irish Data Protection Commission following last year’s massive Facebook GDPR fine, and the third stage of a cyber-defence-in-depth strategy: management. Now available on Spotify, Amazon Music, Apple Podcasts and SoundCloud....

...embedded within the core principles of your business. The introduction of the GDPR (General Data Protection Regulation) and its UK equivalent has greatly increased the burden on organisations to manage...

...advantage and could help you land higher-value contracts. Most notably, penetration testing is a requirement for several laws and regulations. Article 32 of the GDPR mandates organisations to regularly conduct...

...core principles, such as accountability and transparency. Meanwhile, this requirement is fundamentally at odds with the protections outlined in the GDPR (General Data Protection Regulation), which protects EU and UK...

This week, we discuss a data breach affecting users of Progress Software’s MOVEit file transfer app, GDPR fines for LinkedIn and Spotify, and the delay of Google Bard’s EU launch...

This week, we discuss another GDPR fine for TikTok relating to its processing of child users’ personal information, more data breaches caused by MOVEit Transfer, including Sony Interactive Entertainment, and...

...way that the GDPR [General Data Protection Regulation] is a little vague on what constitutes a reportable personal data breach. This is for the simple reason that what is ‘major’...