Search results

Showing 15 of 725 results for "cyber"
Filters
All results (725) PDF (275) Publication (239) Blogs (142) People (38) Services (19) Recent Work (8) News (4)
Preventing Core Technical Failures: Lessons from the Capita Breach The Information Commissioner’s Office (ICO) investigation into Capita’s 2023 cyber attack has concluded with a £14 million fine for the group. Since the date of that attack, there have continued to be many more high-profile cyber attacks, and there is no...
Ransomware Reform: UK Government confirms it will push ahead with new ransomware rules Ransomware remains one of the most serious cyber threats facing the UK today, costing the economy millions and threatening the functioning of a wide range of organisations, including those in critical sectors. In response, the UK Government recently...
Will you have to report paying a ransom? New UK rules proposed Ransomware is one of the top concerns keeping CISO’s (and some GCs) awake, and many think that it’s ‘when not if’ in terms of having to manage a ransomware incident. We regularly speak to clients about their approach to ransomware payments and the factors...
NCSC Publishes Guidelines on Secure AI System Development: a Concerted International Approach Everyone’s talking about AI at the moment (see our round-up of recent developments here and here). A consensus is building across regulators, industry, experts and sceptics, that realising any benefits from AI requires mitigation of its risks. One of the...
UK government publishes responses to consultation on the Computer Misuse Act 1990 Cyber continues to be a key threat for both organisations and governments. The UK government has been considering for some time whether to update its cyber laws, and recently published the results of a consultation initiated in February 2023, which sought...
UK signs joint statement against ransomware payments – “New norm” or status quo? On 2 November 2023, the UK government announced that it and more than 40 countries had signed a Joint Statement strongly discouraging the payment of ransomware demands and pledging that central government funds should not be used to pay ransoms to cyber...
Equifax: a new dawn for FCA enforcement? The FCA’s recent decision to fine Equifax Limited (“Equifax”) £11,164,400 for failing to manage and monitor the security of UK consumer data outsourced to its US-based parent Equifax Inc. - six years after the investigation was first announced - raises...
UK government finalises IoT cybersecurity requirements The UK government has published the final version of the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 providing manufacturers of IoT devices with clarity as to the...
ICO and NCSC sign joint MOU setting out how they will work together When managing a cyber incident, one pressing issue to consider is "who needs to be notified?" Clients are often prepared to discuss whether or not regulators and customers should be informed, but can be less certain when discussing whether to notify the...
Full steam ahead: China publishes interim generative AI measures New week, new measures: such is the current pace of regulatory change regarding AI, each week can bring major new developments in the regulatory landscape. On 13 July 2023, the Cyberspace Administration of China (CAC) published a set of ‘Interim Measures...
UK and US Governments crack down on ransomware criminals Handling ransom demands (and whether it possible and/or desirable to pay) is one of the most critical aspects of managing a cyber attack. This involves considering the applicable, and evolving, sanctions position, among other risks. Last week, the UK and...
New app store Code of Practice In December last year, the Department for Digital, Culture, Media and Sport (DCMS) published a new ‘first of its kind’ code of practice aimed at protecting app users. While the code is voluntary, the Government is expecting app store operators and app...
Organisations could face new security requirements under ‘cyber duty to protect’ plans? Government call for information suggests new security requirements could be introduced to protect online accounts and user data from hackers Last year saw a 159% increase in unauthorised access to personal information (including hacking) and an 89% rise...
Is the NIS regime working? Changes proposed in new review This month, the Government published its second post-implementation review of the 2018 Network and Information Systems (‘NIS’) Regulations. The NIS regime is designed to help protect the UK, and in particular certain essential services (hospitals, energy,...
Has the ICO just told lawyers not to advise clients to pay ransoms? Ransomware attacks are on the rise, and more organisations have been paying the ransoms in recent months. In light of this, the ICO and National Cyber Security Centre (‘NCSC)’ have published a joint letter they sent to the Law Society regarding ransomware...