ISMS.online Blog
Keeping you up-to-date on the world of information security and compliance.
The ACRO case has demonstrated the role of ownership and accountability in patch management. How should CISOs and compliance leaders respond? In August, the Information Commissioner’s Office (ICO) ...
As the Cyber Security and Resilience Bill (CSRB) progresses through Parliament, proposed new powers could give ministers greater control over the u...
Conversations about existential AI risk mask a more pressing issue: Organisations are already deploying AI without effective governance in place to...
Catch up with our favourite stories of the year
The International Organization for Standardization (ISO) released the updated ISO/IEC 27701 standard for privacy information management in October ...
Customers, boards and regulators are all in agreement. If cybersecurity breaches are impossible to prevent 100% of the time, the focus must be on i...
What can be done to regain control as the financial industry’s shadow AI issue gets worse? As tools such as OpenAI’s ChatGPT become ubiquitous, sha...
It’s been a long time in the making, but the Cyber Resilience Act (CRA) is finally here. And it couldn’t have come a moment sooner. As AI empowers ...
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Fall 2026. We achieved nine badges in the Fall Report! G2, a leading peer-to-p...
With the financial results, parliamentary evidence and recovery picture now in view, what the incident really tells us about dependencies, connecte...
AI is transforming the way many businesses work. Some 97% of executives claim they have deployed agents in the past year, with over half (57%) of t...
The European Commission published the Digital Omnibus Package in late 2025, with proposals designed to simplify and harmonise parts of the EU’s dig...
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
Not every data breach starts with a shadowy hacker and an external attack. Sometimes it’s not malicious third parties that overwhelm network defend...
As breaches become part of everyday business, how has the conversation evolved and what do recent incidents reveal about good — and poor — incident...
All good things come to those who wait. At the time of writing, the Cyber Security and Resilience Bill (CSRB) was awaiting its committee stage in t...
Conversations about existential AI risk mask a more pressing issue: Organisations are already deploying AI without effective governance in place to...
It’s been a long time in the making, but the Cyber Resilience Act (CRA) is finally here. And it couldn’t have come a moment sooner. As AI empowers ...
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Fall 2026. We achieved nine badges in the Fall Report! G2, a leading peer-to-p...
The headlines from the 2026 edition of Cost of a Data Breach made for interesting reading, but does it actually demonstrate a better perspective of...
The White House isn’t losing any time preparing for the onslaught of zero-day vulnerabilities that frontier AI tools are expected to surface....
Multiple cyber-attacks against critical infrastructure highlight a need for resilience, operational risk and governance, rather than just technical...
The Copilot SearchLeak vulnerability chain shows how any AI assistant can evolve from a productivity feature into a new path into data that inherit...
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
Company number: 04922343
Nile House, Nile Street, Brighton, England, BN1 1HW
