Anthropic’s Suspension Is a Wake-Up Call for AI Supplier Risk
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
The Next Major Telecom Outage May Not Start With the Telecom Provider
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
The NVD Pullback Should Prompt A Resilience Approach To Vulnerability Management
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
Everything You Need To Know About the Cyber Resilience Act
The European Union’s Cyber Resilience Act (CRA) is the first major regulation to treat cybersecurity as a product safety requirement rather t...
How Ransomware Became a Business Resilience Problem
May was not a good month for Latvian national Deniss Zolotarjovs. The US Department of Justice secured a 102-month sentence against him for his rol...
Cyber-Risk Management Is Fragmented: Here’s How to Fix It
Organisations have long understood the challenge of translating cyber into business risk. The CISO-boardroom communication breakdown is real and we...
Cybercrime Vs Geopolitics: How Ransomware Is Becoming A Geopolitical Tool
Nation states are ramping up destructive attacks utilising ransomware and wipers. What can be done to manage the risk? In 2017, Russia-linked adver...
North Korean IT Workers Are Targeting the UK: What Should You Do?
Insider risk was until recently largely considered to be limited to isolated incidents. Dangerous, yes. But usually, the result of negligent employ...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
The Governance Gap: Why the EU AI Act Is the Moment Boards Can No Longer Treat Compliance as Someone Else’s Problem
The EU AI Act is already in force, penalties are already active, and most enterprises cannot classify their own AI systems. The governance gap is n...
Why Cyber Resilience Remains a Long Way Off for Many UK Businesses
Cyber resilience has emerged as one of the key areas of focus for the cyber-industry of the past few years. Even the government has cited it in a c...
IO Scoops 11 Badges in G2 Grid Leader Report for Summer 2026
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Summer 2026. We achieved eleven badges in the Summer Report! G2, a leading pee...
When The Help Desk Is The Threat
Old social engineering attackers never die; they just evolve and get better. Here’s a story of an attack group audacious enough to keep compr...
Shadow AI Is Already Inside Financial Services, Whether You Like It or Not
What can be done to regain control as the financial industry’s shadow AI issue gets worse? As tools such as OpenAI’s ChatGPT become ubiquitous, sha...
The King’s Speech 2026: How New Laws Will Impact Cybersecurity and Compliance
The state opening of parliament is an occasion filled with the kind of pomp and ceremony Britain still does better than any other country. What it’...
Healthcare AI Is Moving Fast, But Data Governance Is Struggling To Keep Up
How can healthcare organisations resolve gaps in trust and data governance to realise the full benefits of AI? By Kate O’Flaherty The healthcare s...
If Burnout Were a Security Risk, We’d Already Have Solved It
Cybersecurity and compliance have always been good at one thing: taking uncertainty and forcing it into structure. We take something abstract, thre...
Why the UK’s NIS Update May Mean Extra Work for In-Scope Organisations
The Cyber Security and Resilience Bill (CSRB) continues to make its way through parliament. But the end of a lengthy legislative process is slowly ...
