UK Cyber Security and Resilience Bill: Where Next?
All good things come to those who wait. At the time of writing, the Cyber Security and Resilience Bill (CSRB) was awaiting its committee stage in t...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
Moving From ‘Keep Them Out’ to ‘Keep the Business Running’
The headlines from the 2026 edition of Cost of a Data Breach made for interesting reading, but does it actually demonstrate a better perspective of...
White House AI Collaboration Scheme Should Inspire Broader AI Supply Chain Introspection
The White House isn’t losing any time preparing for the onslaught of zero-day vulnerabilities that frontier AI tools are expected to surface....
Beyond Security: How Critical Infrastructure Is Becoming A Governance Issue
Multiple cyber-attacks against critical infrastructure highlight a need for resilience, operational risk and governance, rather than just technical...
What The Microsoft 365 Copilot “SearchLeak” Issue Says About AI Era Risk
The Copilot SearchLeak vulnerability chain shows how any AI assistant can evolve from a productivity feature into a new path into data that inherit...
Klueless: How A Four-Year-Old Credential Led To A Major Hack
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
Data Governance in Healthcare in the Age of Ransomware
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
Anthropic’s Suspension Is a Wake-Up Call for AI Supplier Risk
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
The Next Major Telecom Outage May Not Start With the Telecom Provider
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
The NVD Pullback Should Prompt A Resilience Approach To Vulnerability Management
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
Everything You Need To Know About the Cyber Resilience Act
The European Union’s Cyber Resilience Act (CRA) is the first major regulation to treat cybersecurity as a product safety requirement rather t...
How Ransomware Became a Business Resilience Problem
May was not a good month for Latvian national Deniss Zolotarjovs. The US Department of Justice secured a 102-month sentence against him for his rol...
Cyber-Risk Management Is Fragmented: Here’s How to Fix It
Organisations have long understood the challenge of translating cyber into business risk. The CISO-boardroom communication breakdown is real and we...
Cybercrime Vs Geopolitics: How Ransomware Is Becoming A Geopolitical Tool
Nation states are ramping up destructive attacks utilising ransomware and wipers. What can be done to manage the risk? In 2017, Russia-linked adver...
North Korean IT Workers Are Targeting the UK: What Should You Do?
Insider risk was until recently largely considered to be limited to isolated incidents. Dangerous, yes. But usually, the result of negligent employ...
The Governance Gap: Why the EU AI Act Is the Moment Boards Can No Longer Treat Compliance as Someone Else’s Problem
The EU AI Act is already in force, penalties are already active, and most enterprises cannot classify their own AI systems. The governance gap is n...
Why Cyber Resilience Remains a Long Way Off for Many UK Businesses
Cyber resilience has emerged as one of the key areas of focus for the cyber-industry of the past few years. Even the government has cited it in a c...
