Search results

Showing 15 of 744 results for "cyber"
Filters
All results (744) PDF (286) Publication (246) Blogs (144) People (37) Services (19) Recent Work (8) News (4)
Organisations could face new security requirements under ‘cyber duty to protect’ plans? Government call for information suggests new security requirements could be introduced to protect online accounts and user data from hackers Last year saw a 159% increase in unauthorised access to personal information (including hacking) and an 89% rise...
Is the NIS regime working? Changes proposed in new review This month, the Government published its second post-implementation review of the 2018 Network and Information Systems (‘NIS’) Regulations. The NIS regime is designed to help protect the UK, and in particular certain essential services (hospitals, energy,...
Has the ICO just told lawyers not to advise clients to pay ransoms? Ransomware attacks are on the rise, and more organisations have been paying the ransoms in recent months. In light of this, the ICO and National Cyber Security Centre (‘NCSC)’ have published a joint letter they sent to the Law Society regarding ransomware...
Ransomware attacks: Are you ready? New ICO guidance can help The ICO’s new ransomware guidance could not have come at a more pertinent time. This week  Joe Biden, told US business leaders it was their “patriotic obligation” to strengthen their digital defences against Russian cyberattacks and last month the...
First ICO ransomware fine: what lessons can we learn? Last week the ICO fined leading criminal solicitors Tuckers LLP £98,000 for breaches of its security, and other, obligations under the GDPR which came to light following a ransomware attack. The monetary penalty notice provides some useful lessons for all...
NCSC helps boards tackle the Log4j vulnerability - the 'most severe computer vulnerability in years' The National Cyber Security Centre (NCSC) has reminded boards of their role in mitigating cyber risk in their organisations, publishing a blog just before Christmas on a critical new vulnerability impacting a wide range of companies. In their blog the...
A groundbreaking change for the internet of things? The UK Government has published new “groundbreaking” rules to protect our smart devices from an increased cyber threat, including large fines for non-compliance. From the smart TVs that many of us have in our homes, to egg trays that tell you when your...
Will you be ready when quantum breaks encryption? Steps to take now to prepare… While the potential opportunities quantum brings are impressive, the seismic risk it poses to current encryption methods cannot be ignored. Do you know the steps your organisation should be taking now to reduce your quantum cyber risk? Last week Rob...
No fine too small: ICO fines Mermaids £25,000 for personal data breach Last week, the ICO fined the charity Mermaids £25,000 for failure to implement an appropriate level of organisational and technical security measures, in contravention of its obligations under Articles 5(1)(f) and 32(1) and (2) of the UK GDPR. While this...
NCSC says think twice about using DLT The UK’s National Cyber Security Centre (NCSC) recently published a short whitepaper on distributed ledger technology (DLT) to help decisions makers in organisations decide whether it is an appropriate technology for their use case. Key benefits of DLT...
Reporting ransomware payments and regulating cryptocurrencies: international task force publishes new plan to tackle ransomware As a new international action plan calls for urgent action to tackle ransomware, the NCSC reminds organisations of what steps they can take now to protect themselves from this growing threat  The ransomware threat is increasing – both in terms of scale...
Close collaboration: operational resilience and cyber resilience Last week the Financial Conduct Authority (FCA), the Prudential Regulation Authority (PRA) and the Bank of England published long-awaited policy statements and supervisory materials setting out their final rules and guidance on operational resilience....
Ofcom updates NIS guidance Ofcom has updated its guidance for those in the digital infrastructure subsector who are caught by The Network and Information Systems Regulations (the “NIS Regulations”). The NIS Regulations set out measures to “boost the overall level of security (both...
When should you notify a data breach? New EDPB guidance provides practical examples New guidelines published on 14 January provide both practical examples of when to notify a data breach and “advisable measures” which organisations can take to mitigate their cyber risk.  Since the introduction of GDPR, the ICO has received over 30,000...
Combatting cybercrime: the new Nominet and PIPCU landing pages for suspended criminal domains What happens when Nominet suspends a domain name for fraudulent activity?  Does it go back for sale? Does the affected brand owner buy it and maintain it as a defensive registration? What should happen? In what is reportedly the first registry-led...