Continuous Control Made Simple: Intune and Entra Now in IO
At ISMS.online (IO), our mission is simple. To make information security management effortless. And that means helping you stay compliant not just ...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
Why the FTC’s Chatbot Investigation Should Worry B2B Companies
September was a watershed moment for advocates of AI ethics. The FTC issued Section 6(b) orders to seven major tech companies that produce chatbots...
Could ISO 42001 Become the UK’s De Facto AI Regulator?
When the European Union voted through the AI Act in the latter part of 2024, it made history as the world’s first attempt to comprehensively ...
What an npm Attack Says About the Risks of Open-Source Software
The history of open-source security is littered with examples of catastrophic failings and near misses. A crypto-malware campaign discovered in ear...
More Than Checkboxes – Why Standards Are Now a Business Imperative
Every October, World Standards Day passes with little fanfare. Perhaps it’s because for many, it evokes images of bureaucratic paperwork, dry...
Can the UK Create a Multibillion-Pound AI Assurance Sector?
The government is going all-in on AI. Announced in January, its AI Opportunities Action Plan seeks to drive economic growth, improve the quality of...
Safe Harbor Review Means Business as Usual – For Now
September was a watershed month for companies in Europe wanting to share data with the US. The General Court of the European Union rejected a chall...
Jaguar Land Rover’s Travails Highlight the Need for Cyber Resilience
Manufacturers have been the most popular target for global cyber-attacks over the past four years. The sector was also number one for ransomware in...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
Will the Grok Breach Create GenAI Security Concerns?
A recent incident has raised concerns about how data is handled by GenAI tools. Is it time to ensure that your data doesn’t end up in their L...
As Optus Is Sued, What Went Wrong and What Lessons Can We Learn?
The wheels of justice move slowly sometimes. So it is in Australia, where the privacy regulator has finally filed civil penalty proceedings against...
When Legacy Systems Fail: Lessons from the Federal Courts Breach
Cyber attacks happen every day, but some are especially chilling. An attack this summer on the US court system should have sent chills down every s...
Everything You Need to Know About the Data Use and Access Bill
The UK’s new Data Use and Access Bill (DUAA) received Royal Assent on 19 June 2025, marking a refresh to the country’s data protection ...
EU AI Act: The New Content Training Summary Template for GPAI Providers
What is the Content Training Summary Template? The European Commission recently released an explanatory notice and template to help providers of g...
OT Risk Could Be a $330bn Problem: How Do We Solve It?
Business leaders neglect operational technology (OT) risk at their peril. These are the systems that power some of the UK’s most critical national ...
If They Can Hit A Nuclear Agency, They Can Breach You: What the SharePoint Exploit Means For Your Business
The SharePoint exploit was used on high-profile victims including the US National Nuclear Security Administration, the Department of Homeland Secur...
What’s in the New EU AI Act General Purpose AI Code of Practice?
The EU AI Act’s first provisions, such as those on prohibited AI practices, took effect in February 2025. A phased rollout of requirements continue...
A Surge in VPN Use Could Be Risky for Businesses: Here’s How to Respond
The Online Safety Act (OSA) is one of the longest and most complex laws on the UK’s statute books. It’s also one of the most controversial, contain...
