The Last Watchdog

MAY 30, 2022

Programs from private companies that focus on hiring veterans, offering free technical training and certification courses and upskilling existing veteran employees into cybersecurity roles could be an answer to our industry’s talent shortage. And it works. He is the author of The Shellcoder’s Handbook.

Cybersecurity 278

Cybersecurity Military Education Government 278

IT Governance

SEPTEMBER 15, 2021

A UK government report published last year found that 48% of organisations lacked the expertise to complete routine cyber security practices. The report also found that 30% of organisations had skills gaps in more advanced areas, such as penetration testing, forensic analysis and security architecture.

Security 122

Security Insurance Education Government 122

IT Governance

SEPTEMBER 1, 2021

Cyber security is becoming an expensive endeavour for organisations – and in many cases, the costs are so high that they can’t deal with threats appropriately. However, it’s one thing to want to invest in cyber security, but something else entirely to set aside the budget to do so. What is cyber security as a service?

Security 124

Security GDPR Cloud Insurance 124

IT Governance

OCTOBER 26, 2022

Implementing an ISO 27001-compliant ISMS (information security management system) can seem complex, and it’s often difficult to know how the Standard’s specifications should be applied to your organisation. All team members need to be aware of the basic requirements of ISO 27001 and educated to at least an introductory (foundation) level.

Compliance 98

Compliance Risk Education Information Security 98

IT Governance

JULY 6, 2022

Research presented at the USENIX SOUPS security conference in 2020 supports the theory, although it was slightly more optimistic. It found that employees will recall cyber security staff awareness guidance for four months before their knowledge begins to fade. Take information security staff awareness for instance.

Information Security 105

Information Security Data breaches Education Phishing 105

IT Governance

JANUARY 9, 2024

LockBit claims responsibility for Capital Health security incident The LockBit ransomware group has claimed responsibility for an attack on Capital Health , a healthcare provider in Pennington, New Jersey, last November. They accessed 41.5 The compromised data allegedly includes names, email addresses and phone numbers.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

IT Governance

MARCH 15, 2019

Earlier this month we caught up with Geraint Williams, CISO for GRC International Group plc, to find out more about information security and how he raises awareness within the workplace. Interactive e-learning courses are a time- and cost-effective way to educate staff on key organisational issues in a structured manner.

Education 74

Education Security awareness Information Security Risk 74

OpenText Information Management

FEBRUARY 28, 2019

The most exciting security conference of the year – apart from OpenText™ Enfuse of course – RSA is a chance for us to meet our customers, hear first-hand about their security challenges and educate them on the solutions we provide.

Security 44

Security Education Cybersecurity 44

IT Governance

MAY 7, 2019

Why your employee’s social media use is an information security risk. Staff should be educated about the possible consequences of sharing their activities or location. By educating staff members on the dangers of social media, your company assets (including your employees) are likely to stay safe. Course contents.

Education 103

Education Risk Information Security Data breaches 103

IT Governance

SEPTEMBER 30, 2022

Across the UK, the education sector was the most frequently targeted, with 24 incidents. Small businesses are vulnerable to cyber attacks because they lack the resources to address cyber security. Smaller companies justifiably prioritise growing their operation, leaving cyber security on the sidelines,” he said.

Ransomware 136

Ransomware Manufacturing Data breaches Risk 136

IT Governance

JUNE 30, 2022

Although Wiltshire Farm Foods has revealed few details about the incident, cyber security experts believe that it bears the hallmarks of ransomware. Education is the key to ransomware prevention. As such, employees are often the last line of defence, and it’s why we recommend enrolling them on regular staff awareness training courses.

Ransomware 124

Ransomware e-Delivery Education Phishing 124

IT Governance

APRIL 5, 2019

More than 50 universities in the UK have had their lack of cyber defences exposed, with security testers breaching their systems in under two hours. John Chapman, the head of Jisc’s security operations centre, warned that the vulnerabilities could be a sign of an impending “disastrous data breach or network outage”.

Security 83

Security Data breaches Phishing Education 83

Krebs on Security

NOVEMBER 21, 2020

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage.” ” In the early morning hours of Nov.

Phishing 363

Phishing Authentication Passwords Access 363

IT Governance

SEPTEMBER 21, 2020

Figures from the ONS (Office of National Statistics) show that security incidents in Cambridgeshire increased from 2,789 in 2016 to 4,155 in 2018. In 2017, Cambridge became the fastest-growing city in the UK , with businesses attracted to its proximity to London and the North, as well as its highly educated workforce.

Healthcare 98

Healthcare Education Phishing Risk 98

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. It has since been confirmed by Anukul Peedkaew, the permanent secretary of social development and human security.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

OCTOBER 13, 2023

October is both Cybersecurity Awareness Month in the US and European Cyber Security Month in the EU – twin campaigns on either side of the Atlantic that aim to improve awareness of the importance of cyber security both at work and at home, and provide tips on how to stay secure.

Phishing 105

Phishing Financial Services Manufacturing Personal data 105

AIIM

FEBRUARY 27, 2020

In several recent posts, I’ve talked about professional development options for information management professionals and provided guidance on how to determine whether a particular course or certification is a good fit. For the most part, I’ve stayed away from blogging about AIIM's training for two reasons.

ECM 116

ECM Records Management Metadata Information governance 116

IT Governance

MAY 11, 2021

Regular readers of this blog will have seen us lament the growing number of ransomware attacks in the past year. Our Q1 2021 review of data breaches found that almost one in three publicly disclosed security incidents was a ransomware attack, and in April alone, we discovered 53 cases. Find out more.

Ransomware 105

Ransomware Data breaches Phishing Government 105

IT Governance

JULY 29, 2019

This blog has been updated to reflect industry developments. Protecting your organisation against cyber crime can sometimes feel like a never ending game of security whack-a-mole. Just as soon as you’ve secured one weakness, it seems as though another vulnerability rears its head. 1) Support cyber security staff.

Information Security 74

Information Security Security Risk Phishing 74

IT Governance

JUNE 21, 2019

Anyone looking for advice on how to achieve effective cyber security should consider the NCSC’s (National Cyber Security Centre) 10-step guide. In this blog, we explain each step and provide advice on how to get started. Organisations must understand the risks they face before implementing security measures.

Security 91

Security Data breaches Risk Access 91

IT Governance

SEPTEMBER 8, 2021

In this blog, we take a look at some of the problems you will encounter and provide tips to help you address them. Educate employees on their responsibilities. So how should organisations approach employee education? This one-day course provides a full introduction to developing a cyber incident response plan.

Communications 126

Communications Risk Education Compliance 126

IT Governance

SEPTEMBER 4, 2019

Don’t overburden your security team. You can’t expect security personnel to stay on top of where everyone is going for their holidays and to double-check every time they log in – particularly when there’s a good chance they’ll be short-staffed themselves. Plus, like any application, a VPN can have security flaws that can be exploited.

Risk 72

Risk Security Education Access 72

IT Governance

DECEMBER 11, 2019

Some are quick fixes that you can sort out before you go away for the holidays, whereas other require a refined, systematic approach to information security. A simpler and more secure technique is to create a mnemonic or cipher, such as taking the first character from each word of a sentence. Weak passwords. Poorly configured devices.

Access 96

Access Passwords Education Information Security 96

IT Governance

NOVEMBER 24, 2022

Organisations that suffer security incidents are sometimes said to be victims of “cyber extortion”, but it’s often unclear what exactly that phrase means. The term is probably preferred by victims because of the connotations associated with malware infection, which implies (correctly or not) that the victim had weak security protocols.

IT 130

IT Ransomware Encryption Phishing 130

IT Governance

OCTOBER 23, 2023

Secure remote working tips and VPN insights from our senior penetration tester Leon Teale is a senior penetration tester at IT Governance. He’s also been featured in various articles relating to cyber security. So how can organisations efficiently secure their remote infrastructure? We sat down to chat to him.

Encryption 106

Encryption Authentication Access Security 106

IT Governance

DECEMBER 17, 2018

One of IT Governance’s governance and risk management consultants, Andrew Pattison, was interviewed by GBC News last week about the most common types of cyber threats after delivering IT Governance’s three-day training course on “Effective Protection against Cyber crime”. The course was held in Gibraltar and hosted by Rock Learning. .

Government 63

Government IT Risk Education 63

OpenText Information Management

MAY 3, 2024

In this blog, we aim to provide a comprehensive overview of the key trends that are set to redefine channel marketing in the second half of the year. Viewing every online interaction as an opportunity to build meaningful connections and provide insightful, educational content tailored for the future of marketing.

Marketing 62

Marketing B2B Communications Customer Experience 62

IT Governance

NOVEMBER 28, 2023

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). Breached records: more than 56 million.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

JANUARY 24, 2024

Expert insight from Leon Teale into the implications of this historic data breach The security researcher Bob Diachenko and investigators from Cybernews have discovered an open instance with more than 26 billion data records, mostly compiled from previous breaches – although it likely also includes new data.

Passwords 139

Passwords Data breaches Encryption Risk 139

IT Governance

AUGUST 7, 2023

The first looks at an alarming rise in phishing scams that impersonate the tech firm, while the second discusses a new security feature that’s designed to protect users from password compromise. One of the ways it does that is by warning people about security threats when they enter their Windows password into websites and documents.

Phishing 98

Phishing Passwords Education Personal data 98

IT Governance

SEPTEMBER 15, 2023

Source: Truesec According to Telekom Security , DarkGate Loader’s developer, who goes by the name RastaFarEye, has been developing the malware since 2017 and has been advertising it as a malware-as-a-service model since 16 June 2023. You can help educate your staff with IT Governance’s Phishing Staff Awareness Training Programme.

Phishing 110

Phishing Mining Education Passwords 110

IT Governance

FEBRUARY 14, 2024

In more recent months, we launched the channel partner programme in Europe and America, with training and security testing proving especially popular. We are the market leader in data privacy and cyber security risk management solutions, so it makes sense to partner with us. What is it that makes IT Governance special?

Government 59

Government IT Sales Data Privacy 59

Thales Cloud Protection & Licensing

DECEMBER 18, 2018

Many years ago, a board member said to me, “We’ve employed you to do information security, so why do we have to do anything?” Instead we will see organisations start proactively approaching information security experts for actionable advice and guidance. This was fairly typical.

Information Security 75

Information Security Security Risk GDPR 75

IT Governance

NOVEMBER 17, 2023

Booking.com confirms phishing attack Booking.com has apparently confirmed what the information security press has known for some time: another phishing campaign has been targeting its users and trying to steal their credit card information. You can help educate your staff with IT Governance’s Phishing Staff Awareness Training Programme.

Phishing 96

Phishing Artificial Intelligence Cloud Cybersecurity 96

IT Governance

DECEMBER 21, 2023

Also note that this blog only accounts for the data from 2020–2022, because these are the only years the ICO has released its full data set on. Bigger sectors are likely to have more breaches; it doesn’t automatically follow that they’re less secure, or that staff working within those sectors are more careless.

Data breaches 52

Data breaches Personal data Government GDPR 52

IT Governance

OCTOBER 13, 2020

Employees forget the guidance given on phishing training courses within six months, new research has revealed. The findings, which were presented at the USENIX SOUPS security conference in August, were the result of a year-long investigation into the effectiveness of staff awareness training.

Phishing 86

Phishing Education Privacy Government 86

IT Governance

JANUARY 11, 2023

This month, we delve into a scam that attempts to trick cyber security professionals and look at a new banking trojan that has experts worried. A new phishing campaign has been discovered that imitates Flipper Zero, a cyber security tool used by penetration testers and white-hat hackers. Get started.

Phishing 105

Phishing Education Access Personal data 105