ISMS.online Blog
Keeping you up-to-date on the world of information security and compliance.
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organisations using Anthropic’s Claude Fable 5 and...
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
Catch up with the stories that have caught our eye this month
What does the 700Credit breach show about the financial data system and supply chain risks, and what lessons can be learned? By Kate O’Flaherty In ...
Organizations fret about security and privacy risk. And more recently, they’ve paid attention to AI risk. But how often do they think of all ...
The GDPR was always meant to be vague. By not listing prescriptive technical controls – as, for example, PCI DSS does – the regulation does a bette...
The European Union’s Cyber Resilience Act (CRA) is the first major regulation to treat cybersecurity as a product safety requirement rather t...
May was not a good month for Latvian national Deniss Zolotarjovs. The US Department of Justice secured a 102-month sentence against him for his rol...
Organisations have long understood the challenge of translating cyber into business risk. The CISO-boardroom communication breakdown is real and we...
Nation states are ramping up destructive attacks utilising ransomware and wipers. What can be done to manage the risk? In 2017, Russia-linked adver...
Insider risk was until recently largely considered to be limited to isolated incidents. Dangerous, yes. But usually, the result of negligent employ...
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
The EU AI Act is already in force, penalties are already active, and most enterprises cannot classify their own AI systems. The governance gap is n...
Cyber resilience has emerged as one of the key areas of focus for the cyber-industry of the past few years. Even the government has cited it in a c...
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Summer 2026. We achieved eleven badges in the Summer Report! G2, a leading pee...
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
Old social engineering attackers never die; they just evolve and get better. Here’s a story of an attack group audacious enough to keep compr...
What can be done to regain control as the financial industry’s shadow AI issue gets worse? As tools such as OpenAI’s ChatGPT become ubiquitous, sha...
The state opening of parliament is an occasion filled with the kind of pomp and ceremony Britain still does better than any other country. What it’...
How can healthcare organisations resolve gaps in trust and data governance to realise the full benefits of AI? By Kate O’Flaherty The healthcare s...
Cybersecurity and compliance have always been good at one thing: taking uncertainty and forcing it into structure. We take something abstract, thre...
The Cyber Security and Resilience Bill (CSRB) continues to make its way through parliament. But the end of a lengthy legislative process is slowly ...
Company number: 04922343
Nile House, Nile Street, Brighton, England, BN1 1HW
