Summer Reads: ISMS.online’s Top 5 Most Read Blogs of 2024
2024 has been a significant year for developments in security standards and regulations. The EU Artificial Intelligence (AI) Act came into force on...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
Businesses Urged to Track ‘Fast-Evolving’ AI Regulations
Artificial Intelligence (AI) is transforming the information technology sector at a dizzying rate. AI has transformed applications, including data ...
The ICO is Reviewing its Approach to Public Sector Fines: What Should it Decide?
Data breach fines are on the rise. According to the ISMS.online State of Information Security Report 2024, the average fine amount responding busin...
The Chevron Deference is Dead. Now What?
This summer saw the end of a 40-year legal doctrine that promises to have significant ramifications for cybersecurity—and many other sectors. What ...
Information Security Management in ISO 27001: Your People Are Your Power
It’s widely accepted that information security management is a responsibility that spans entire businesses. It falls not to a sole informatio...
The CrowdStrike Outage: A Case for Reinforcing Incident Response with ISO 27001
In July 2024, a botched software update by CrowdStrike led to a significant global IT outage, affecting numerous organisations, including airlines,...
Is Negotiation Your Best Strategy When It Comes To Ransomware?
Rather than just paying a fee to get out of a ransomware predicament, could you negotiate your way out with the proper steps and skills? Dan Raywoo...
How Much Does Cybercrime Really Cost UK Businesses?
Cybercrime poses an ongoing threat to UK businesses. With many organisations reliant on a digital supply chain and using cloud-based platforms to s...
What Are Infostealers and Why Should My Business Be Concerned?
In June this year, a mass extortion campaign against customers of data cloud specialist Snowflake was discovered. According to reports, victims wer...
From RSA to SolarWinds: Lessons Learned from a Decade of Supply Chain Breaches
Over the past decade, supply chain attacks have become one of the leading causes of breaches. Connections into a network bring exploitable vulnerab...
How Businesses Can Prepare For The Implementation of DORA
Financial institutions and IT service providers have just six months to comply with the European Union’s Digital Operational Resilience Act (...
Unlock Your Competitive Advantage with ISO 27001
Businesses can access more sensitive customer data than ever. Consequently, they must take appropriate steps to protect that information or risk fi...
Essential Cybersecurity and Data Privacy Takeaways from the King’s Speech
King Charles III’s speech at the opening of the UK Parliament last week outlined critical legislative measures the new government intends to ...
Federal Government Moves to Shore Up Critical National Security
The Colonial Pipeline attack in 2021 was a turning point for critical infrastructure in the U.S. When a ransomware attack on a pipeline operator...
As NIS2 Approaches, How Can Organisations Mitigate Life-Threatening Cyber-Attacks?
NIS2 will be transposed into law across all EU member states in three months. It mandates enhanced baseline security, incident response, supply cha...
Avoiding the Next MediSecure: Cybersecurity Lessons for Businesses
The MediSecure cybersecurity catastrophe serves as a stark wake-up call for businesses: neglect digital defences at your peril or risk becoming the...
CMMC Explained: Unpacking the U.S. Defense Community’s New Cybersecurity Goals
Cybersecurity has become a critical concern in the defence industry, with increasing threats targeting sensitive information and critical infrastru...
