Organisations that process, transmit and/or store cardholder data or SAD (sensitive authentication data), or can affect their security, must comply with the PCI DSS (Payment Card Industry Data Security Standard)....
...of the creation of hardcopy material 11.3 Control and logging of data restoration 11.4 Protecting data on storage media leaving the premises 11.5 Use of unencrypted portable storage media and...
Article 32 of the GDPR (General Data Protection Regulation) requires businesses to implement appropriate technical and organisational measures to ensure a high level of information security. Although examples of security...
...What are key challenges when implementing a security programme? Resources and costs are often top of the list. Many organisations have a tight budget for security, and lack in-house specialist...
...– ranked #1 in the OWASP Top 10 list of web application vulnerabilities. It is a gift to threat actors due to the significant impact it causes, and combatting such...
...Essentials scheme, ISO 27001, and the GDPR [General Data Protection Regulation] and DPA [Data Protection Act] – the PCI DSS [Payment Card Industry Data Security Standard] too. Compensating controls such...
...Backing up data Finally, you’re asked whether your organisation backs up its data. While not a formal requirement of Cyber Essentials, having a reliable backup strategy is strongly recommended. Backups...
Explore our cyber security knowledge centre for expert insights, practical guidance and resources on compliance, data protection and risk management.
Browse real world case studies showcasing how organisations have successfully addressed cyber security, data protection and compliance challenges.
Explore our press releases for the latest company news, industry announcements and updates across cyber security, data protection and compliance.