...available. Where relevant, you must also notify law enforcement and regulators about the data breach. 4. Analyse the data Once you’ve gathered the relevant information about the cyber incident, you...
...about DSP requirements Comparable to breaches under the GDPR (General Data Protection Regulation) and DPA (Data Protection Act) 2018, organisations must report “significant” or “substantial” incidents to their competent authority...
...work in Dubai for a few days, they shouldn’t be granted access to employee records – i.e. personal data – as that’d constitute a data transfer outside the UK or...
...like ISO 27001 and the PCI DSS [Payment Card Industry Data Security Standard]. What if your supplier doesn’t have such certification? You could get an independent third party to assess...
Risk management lies at the heart of security. Virtually every best-practice framework and law related to cyber security or data privacy takes a fundamentally risk-based approach, including: The UK and...
...data breaches have taught us anything, it’s that you can never be too cautious about the data privacy practices of multinationals. With Pepsi not clarifying who was affected in the...
...the compromised data within the logs of info-stealing malware traded on various underground websites. Info-stealers are a form of malware that target account data stored on web browsers. This can...