The ICO is Reviewing its Approach to Public Sector Fines: What Should it Decide?
Data breach fines are on the rise. According to the ISMS.online State of Information Security Report 2024, the average fine amount responding busin...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
The Chevron Deference is Dead. Now What?
This summer saw the end of a 40-year legal doctrine that promises to have significant ramifications for cybersecurity—and many other sectors. What ...
Information Security Management in ISO 27001: Your People Are Your Power
It’s widely accepted that information security management is a responsibility that spans entire businesses. It falls not to a sole informatio...
The CrowdStrike Outage: A Case for Reinforcing Incident Response with ISO 27001
In July 2024, a botched software update by CrowdStrike led to a significant global IT outage, affecting numerous organisations, including airlines,...
Is Negotiation Your Best Strategy When It Comes To Ransomware?
Rather than just paying a fee to get out of a ransomware predicament, could you negotiate your way out with the proper steps and skills? Dan Raywoo...
How Much Does Cybercrime Really Cost UK Businesses?
Cybercrime poses an ongoing threat to UK businesses. With many organisations reliant on a digital supply chain and using cloud-based platforms to s...
What Are Infostealers and Why Should My Business Be Concerned?
In June this year, a mass extortion campaign against customers of data cloud specialist Snowflake was discovered. According to reports, victims wer...
From RSA to SolarWinds: Lessons Learned from a Decade of Supply Chain Breaches
Over the past decade, supply chain attacks have become one of the leading causes of breaches. Connections into a network bring exploitable vulnerab...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
How Businesses Can Prepare For The Implementation of DORA
Financial institutions and IT service providers have just six months to comply with the European Union’s Digital Operational Resilience Act (...
Essential Cybersecurity and Data Privacy Takeaways from the King’s Speech
King Charles III’s speech at the opening of the UK Parliament last week outlined critical legislative measures the new government intends to ...
Federal Government Moves to Shore Up Critical National Security
The Colonial Pipeline attack in 2021 was a turning point for critical infrastructure in the U.S. When a ransomware attack on a pipeline operator...
As NIS2 Approaches, How Can Organisations Mitigate Life-Threatening Cyber-Attacks?
NIS2 will be transposed into law across all EU member states in three months. It mandates enhanced baseline security, incident response, supply cha...
Avoiding the Next MediSecure: Cybersecurity Lessons for Businesses
The MediSecure cybersecurity catastrophe serves as a stark wake-up call for businesses: neglect digital defences at your peril or risk becoming the...
CMMC Explained: Unpacking the U.S. Defense Community’s New Cybersecurity Goals
Cybersecurity has become a critical concern in the defence industry, with increasing threats targeting sensitive information and critical infrastru...
Trends in Security and Compliance: Five Takeaways From Infosecurity Europe 2024
Every year, the cybersecurity industry comes together at Europe’s largest industry event: Infosecurity Europe. The scale of the show—at Londo...
ISMS.online named G2® Leader for Governance, Risk & Compliance- Summer 2024
We’re delighted to share that ISMS.online has been named a Leader in the G2 Grid® Reports for Summer 2024. G2 is a leading peer-to-peer review site...
The Power of the Deepfake: Misinformation in the UK Election
Artificial intelligence (AI)-powered deepfake technology is not a new phenomenon. The term ‘deepfake’ has been used to describe synthetic media sin...
