The NCSC Wants Critical Infrastructure to “Act Now”: What Does That Mean?
The UK’s critical national infrastructure (CNI) providers are on notice. The National Cyber Security Centre (NCSC) has been ramping up its rhetoric...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
A Smarter, Cleaner IO: The UX Improvements Making Compliance Work Easier Every Day
Great software should feel effortless. It should get out of your way, guide you naturally through your work, and make even the most complex tasks f...
US Cyber Agreements Withdrawal Signals Corporate Risk
Recent actions by the US administration make multilateral cybersecurity coordination between that government and others less certain in the future....
A Key EU AI Act Deadline Is Approaching: Here’s What Businesses Need to Know
The EU’s AI Act is reaching the final stage in its tortuously long journey from legislative proposal to enforceable law. It’s been a long time comi...
UK Financial Services Firms Are Still Failing the Basics, the BoE Warns
The UK’s financial services sector punches well above its weight. London is a close second to New York as the world’s preeminent financial hub and ...
Pay the Ransom or Not? Government Considerations on Paying a Way Out of Cybercrime
The past year has seen two UK legislative proposals focused on the issue of ransomware payments by British businesses. This focus from the UK gover...
EU Digital Omnibus Bill: Joined-up Compliance on the Agenda
The EU has introduced a new Digital Omnibus Bill designed to streamline data protection, cybersecurity and AI regulation. How can organisations ens...
Why Do GDPR Fines Keep Rising?
General Data Protection Regulation fines continue to increase as European regulators toughen their response to data incidents. According to the GDP...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
DXS International Breach: Lessons Learned for Healthcare
As high-stakes incidents in the healthcare sector surge, organisations must learn to manage information security, data protection and AI risk as a ...
What the LastPass Breach Tells Us About Compliance in 2026
The GDPR was always meant to be vague. By not listing prescriptive technical controls – as, for example, PCI DSS does – the regulation does a bette...
Is the Government’s Cyber Action Plan Fit for Purpose?
It’s not often the government admits it was wrong. Yet at the start of the year, we were treated to a rare mea culpa: a recognition that a previous...
The Biggest AI Governance Challenges in 2026
This year’s Safer Internet Day theme, smart tech, safe choices – exploring the safe and responsible use of AI, stresses the importance of responsib...
Why Regulators And Investors Expect Companies To Address a Triple Risk
Organizations fret about security and privacy risk. And more recently, they’ve paid attention to AI risk. But how often do they think of all ...
WEF Report: Fraud Is Now CEOs’ Biggest Cyber Concern, but It’s Not the Only One
Five years is a long time in cybersecurity. Yet that’s how long the World Economic Forum (WEF) has been polling CEOs for its Global Cybersecurity O...
ISMS.online Appoints Simon Church as Chairperson
We are pleased to confirm the appointment of Simon Church as Chairperson at ISMS.online (IO). Simon joins the business as IO continues to build on ...
Global Change Your Password Day: A Call to Action
February 1 marks Global Change Your Password Day. Established in 2012 to encourage awareness of good password management practices, it serves as an...
700Credit Breach: API Risks Put Financial Supply Chain Governance Under the Spotlight
What does the 700Credit breach show about the financial data system and supply chain risks, and what lessons can be learned? By Kate O’Flaherty In ...
