The FTC Goes After Microsoft – and Everyone Else
Writer Charles Bukowski once said he was a series of small victories and large defeats. That’s a great quote for gritty poets but not so grea...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
Mapping the Risks: NCSC’s Guidance on Supply Chain Security
Cyber attacks affecting an organisation’s supply chain – rather than the organisation directly – are becoming increasingly commonplace. If yo...
Navigating the Complexities of Supply Chain Information Security: Insights from ISMS. online’s State of Information Security Report
At the end of 2022, we were asked to list the top cyber trends we expected to see dominating the headlines in 2023, and we flagged the supply chain...
NIS 2 is Coming: Here’s What UK Organisations Need to Know
The UK’s Network & Information Systems (NIS) Regulations came into force in May 2018, following the EU’s 2016 NIS Directive. Due to...
Demystifying SOC 2 Compliance: A Comprehensive Guide for Businesses
In today’s digital landscape, trust is the currency that fuels successful transactions. With data breaches and cyber threats on the rise, org...
Navigating Compliance: Understanding the Implications of the UK-US Data Bridge Agreement
The UK and US Governments have recently agreed to establish a new data bridge, based on the UK’s new Data Act, to facilitate the flow of pers...
Meta’s Regulatory Battles Sound the Alarm for Big Tech
Meta has been fighting legal battles on several fronts in the past year, with some victories and some setbacks. One of these cases could have wider...
Enterprise Data is Increasingly in Peril: It’s Time to Improve Governance
Data-driven insight is increasingly the foundation on which successful companies are built. Giving the right people access to the right information...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
Should Software Vendors be Held Liable for Insecurity?
A zero-day flaw in your go-to enterprise software application allowed attackers into your network and compromised sensitive data. It’s going ...
What the Capita Breach Tells Us About Managing Supply Chain Risk
When IT outsourcing giant Capita suffered a ransomware breach in March, it tried its best to control the media narrative. But supply chain incident...
Get Ready for the Digital Operational Resilience Act
Financial service organisations will be challenged to improve their operational resilience with an incoming set of regulations whose impact will ex...
What the Data Protection and Digital Information Bill Means for Business
The UK’s digital economy was worth an estimated £259bn in 2021, according to the government. And it comprised 85% of total service exports. T...
From Inception to Evolution: Five Experts Discuss Five Years of GDPR
As we mark five years since the introduction of the GDPR, we look at how it has impacted those who do the work which it has affected the most. Dan ...
Why Health Data Privacy Needs a Shot in the Arm
The US healthcare sector has a nasty digital disorder that extends beyond the countless cases of data theft to something more pernicious. How did w...
Everything You Need to Know About the ISO 27701 Data Privacy Standard
ISO 27701 is a data privacy standard that provides a comprehensive framework for managing the processing of personal data. The standard looks to he...
Are Businesses Still Taking GDPR Seriously?
As we mark five years since the GDPR came into force, has a lack of significant fines caused some CEOs not to take it so seriously? Dan Raywood loo...
While Online Shoppers Click, it’s Thieves Who Collect
E-commerce is booming, and so are the cyber attacks that plague retailers and customers. As digital e-commerce transactions grow, the race is on fo...
