Krebs on Security

NOVEMBER 28, 2022

” The Army app was used by soldiers at one of the nation’s main combat training bases. ” The company’s founder Max Konev told Reuters Pushwoosh “has no connection with the Russian government of any kind” and that it stores its data in the United States and Germany. “Pushwoosh Inc.

Government 228

Government Risk IT Marketing 228

IT Governance

MAY 17, 2018

This week, we discuss the exposure of millions of Facebook users’ data, security failings in train passenger networks and Kaspersky Lab’s relocation to Switzerland. Hello and welcome to the IT Governance podcast for Friday, 18 May 2018. Here are this week’s stories.

Government 70

Government Access Information Security Security 70

Data Protection Report

SEPTEMBER 28, 2021

On 10 September 2021, the UK Government published its consultation paper on proposals to reform the UK’s data protection regime. On legitimate interests, the Government proposes disapplying the legitimate interest balancing test for certain activities. The deadline for responding to the consultation is 19 November 2021.

Government 119

Government FOIA GDPR Compliance 119

eDiscovery Daily

APRIL 30, 2019

There are training courses and there are training courses, but there is no more in-depth eDiscovery training course than the Georgetown Law Center eDiscovery Training Academy. With plenty of exercises to test your knowledge and Mock 26(f) Conferences on the last day. The post Ready for In-Depth eDiscovery Training?

Data preservation 60

Data preservation Education Authentication Government 60

Unwritten Record

FEBRUARY 6, 2024

To do this, the United States Government employed several strategies to garner the support of the American people. One such tactic the government relied on heavily was the production of public relations materials including propaganda. Other parts of their training are also depicted, such as flight simulation and exercise.

Military 52

Military Government Manufacturing Education 52

Data Protection Report

NOVEMBER 8, 2023

Noticeably, covered entities are now subject to new requirements imposing heightened responsibilities on Chief Information Security Officers (“CISOs”) and more specific and prescriptive requirements in relation to governance, risk assessments, and notifications to the NYDFS.

Financial Services 109

Financial Services Cybersecurity Compliance Government 109

IT Governance

NOVEMBER 15, 2021

We explain everything you need to know in this blog. There are plenty of resources available to help you learn more about the course, including our Microsoft Azure Fundamentals Training Course. Those who enrol in our Microsoft Azure Fundamentals AZ-900 Training Course will discover that the exam is included as part of the course.

Cloud 98

Cloud Compliance Privacy Government 98

Unwritten Record

AUGUST 2, 2022

Government-issued combat boots. Original Caption: SP-4 Elvis Presley, rock & roll singer, TV & Movies, undergoes training with the 3.5 Local ID: 111-SC-572554 Original Caption: SP-4 Elvis Presley, rock & roll singer, TV & Movies simulates firing his rifle with others, during training at Wildflecken, Germany.

Military 52

Military Archiving Libraries Government 52

KnowBe4

APRIL 4, 2023

Security solutions will help stop most attacks, but for those that make it past scanners, your users need to play a role in spotting and stopping BEC, VEC and phishing attacks themselves – something taught through security awareness training combined with frequent simulated phishing and other social engineering tests.

Phishing 76

Phishing Security awareness Cybersecurity Education 76

IT Governance

FEBRUARY 9, 2021

IT Governance offers a variety of resources to help organisations understand and implement ISO 27001’s requirements. This blog has given an overview of the ways marketers must consider cyber security, but there is much more to learn, as we explain in our Privacy Essentials for Marketers Training Course.

Marketing 123

Marketing Security GDPR Privacy 123

IT Governance

FEBRUARY 25, 2019

A version of this blog was originally published on 8 December 2017. In this blog, we provide tips for getting your cyber security career started no matter your background. There are plenty of blogs dedicated to the practicalities of the cyber security industry; two good ones to start with are Troy Hunt’s and Daniel Miessler’s.

Security 75

Security Systems administration Information Security Government 75

IT Governance

SEPTEMBER 8, 2021

In this blog, we take a look at some of the problems you will encounter and provide tips to help you address them. As such, “conducting tabletop and disaster recovery exercises with everyone remote may be an adaptation, but it isn’t an insurmountable one”. But hybrid working complicates that. Protect your communication channels.

Communications 126

Communications Risk Education Compliance 126

IT Governance

NOVEMBER 16, 2018

This week, we discuss a Bank of England cyber resilience exercise, the latest cyber security news from the US Office of Personnel Management, the highlights of this month’s Patch Tuesday, and a surprising admission by a Japanese cyber security minister. Hello and welcome to the IT Governance podcast for Friday, 16 November.

Encryption 58

Encryption Risk Passwords Government 58

IT Governance

OCTOBER 17, 2019

Understand your GDPR and PECR compliance gaps by contacting IT Governance for a privacy audit. You can find out more about what it takes to audit against ISO 27001 by enrolling in one of these training courses: ISO 27001 external auditor. A version of this blog was originally published on 18 February 2013. Why is this bad?

Compliance 89

Compliance Government GDPR IT 89

Hunton Privacy

MARCH 11, 2019

On the same date, some participating DPAs released the results of the Sweep exercise carried out in their respective jurisdiction. Training & Awareness: Organizations were generally found to be quite good at delivering some form of data protection training to their employees.

Privacy 74

Privacy Data Privacy GDPR Personal data 74

IT Governance

NOVEMBER 15, 2018

This blog was originally published before the GDPR took effect in May 2018. Organisations must let individuals know how they can exercise these rights, and meet requests promptly. If you’d like to understand the GDPR further, enrol on our GDPR Foundation Training Course. appeared first on IT Governance Blog.

GDPR 64

GDPR Personal data Access Communications 64

Data Matters

JULY 8, 2019

Ensuring that a company is properly prepared for and responds to privacy and cyber security threats is a key corporate governance responsibility for directors and senior officers. The post UK ICO issues largest ever GDPR privacy fine of £183m ($228m) appeared first on Data Matters Privacy Blog.

GDPR 74

GDPR Privacy Data breaches Risk 74

IT Governance

FEBRUARY 19, 2019

To avoid the disruption caused by not meeting this deadline, organisations need to be aware of the changes that the DSP Toolkit brings compared to its predecessor, the IG (Information Governance) Toolkit. Unsure if you need to comply? Ask a healthcare expert >> Data security standards and the GDPR. How to prepare for the DSP Toolkit.

GDPR 71

GDPR Compliance Government Information Security 71

IT Governance

APRIL 2, 2019

This blog explains why that’s the case, helping you understand how each standard works and the differences between them. You can find out more about how to implement a best-practice ISMS by enrolling on our ISO27001 Certified ISMS Foundation Training Course. What is ISO 27001? Opt for a certification audit. What is ISO 27002?

Information Security 89

Information Security Compliance Risk Security 89

Privacy and Cybersecurity Law

AUGUST 5, 2020

Accountability and Governance. Accountability issues for AI are not unlike governance issues for other technologies e.g. the ICO suggests that your organisation should set its risk appetite; ensure there is senior buy-in and that compliance is conducted by diverse, well-resourced teams and not left to the technologists.

Artificial Intelligence 59

Artificial Intelligence GDPR Personal data Compliance 59

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Schools, hospitals and government agencies all fall under GDPR authority. The organization offers data subjects easy ways to exercise their rights.

GDPR 86

GDPR Compliance Personal data Privacy 86

Data Matters

NOVEMBER 16, 2020

The changes become law once a government gazette is passed (possibly before the end of 2020). If you operate in Singapore, handle Singapore data, or maintain a server in Singapore, it is crucial that you have protocols in place to guide employees on what to do when a data breach occurs and consider doing a data breach tabletop exercise. (We

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2019

Just a couple of months after that, World Rugby itself announced that one of its training websites had suffered a security breach that exposed subscribers’ account information. Exercise caution around suspicious documents : Malicious actors commonly use suspicious documents to prey upon sports fans.

Security 105

Security IoT Personal data Military 105

IT Governance

SEPTEMBER 25, 2019

Train staff. Human error is one of the leading causes of data breaches, so you must teach staff how to recognise potential threats, like phishing and ransomware scams, and get them into the habit of exercising good data protection practices. Our Certified Introduction to Data Protection Training Course is the perfect place to start.

Data breaches 69

Data breaches Phishing Passwords Ransomware 69

IT Governance

MARCH 11, 2019

The UK government decided that it makes sense to continue using the existing framework, given that it already applies in the UK. The UK government decided that there must be specific data protection requirements for MI5, MI6 and GCHQ. Learn everything you need to about the DPA 2018 with our Data Protection Act 2018 Training Course.

GDPR 79

GDPR Personal data Compliance Government 79

IT Governance

MARCH 17, 2020

For example, millions of employees will likely to be forced to work remotely, as the UK government prepares for a lockdown scenario. Although exercising caution is never a bad idea, it’s important to note that these are unprecedented times and there will be unusual but legitimate requests. Expect disruption and chaos.

Phishing 114

Phishing Risk Communications Government 114

CGI

JULY 5, 2018

In the government, just as in the private sector, we’re certainly not seeing a decrease in cyberattacks—I have yet to walk into an office building displaying a large sign that reads, “Zero cyber incidents for the third month in a row.” For more insight, download our whitepaper IT Security Governance: Taking a holistic approach.

Cybersecurity 40

Cybersecurity Digital transformation Manufacturing Government 40

CGI

APRIL 19, 2018

In the government, just as in the private sector, we’re certainly not seeing a decrease in cyberattacks—I have yet to walk into an office building displaying a large sign that reads, “Zero cyber incidents for the third month in a row.” For more insight, download our whitepaper IT Security Governance: Taking a holistic approach.

Cybersecurity 40

Cybersecurity Digital transformation Manufacturing Government 40

CGI

MAY 15, 2018

In the government, just as in the private sector, we’re certainly not seeing a decrease in cyberattacks—I have yet to walk into an office building displaying a large sign that reads, “Zero cyber incidents for the third month in a row.” For more insight, download our whitepaper IT Security Governance: Taking a holistic approach.

Cybersecurity 40

Cybersecurity Digital transformation Manufacturing Government 40

IT Governance

APRIL 15, 2020

It’s up to each of us to make sure we exercise good password practices whatever service we use, and part of that involves using a unique password for each account that we create. IT Governance employee tips for working from home. To put it bluntly: there is nothing Zoom could have done to prevent this. Phishing scams.

Security 124

Security Passwords Risk Phishing 124

IT Governance

OCTOBER 7, 2019

This will typically cover public authorities such as government departments, schools and other educational institutions; hospitals; and the police. As with employee data, you must explain both your lawful basis for processing and how applicants can exercise their data subject rights. Job applications.

GDPR 68

GDPR Personal data Compliance Communications 68

IBM Big Data Hub

FEBRUARY 23, 2024

Common responsibilities include overseeing risk assessments, training employees on data protection principles, and working with government authorities. Make it easy for data subjects to exercise their rights The GDPR grants data subjects rights over how organizations use their data.

GDPR 80

GDPR Compliance Personal data Privacy 80

Data Protection Report

JULY 26, 2017

The second advises regulated facilities on how to implement a cyber risk management governance program. Cyber security trainings, policies and procedures. Records of trainings, incidents and exercises. To subscribe for updates from our Data Protection Report blog, visit the email sign-up page.

Cybersecurity 40

Cybersecurity Risk Communications Access 40

Privacy and Cybersecurity Law

DECEMBER 10, 2020

The heaviest fines therefore are related to failures in governance mechanisms set up to make all the right decisions should a breach occur: what should the escalation process be if a breach is suspected or detected to ensure diligent response? The position must be of a sufficiently high level to exercise authority in the organization.

Privacy 89

Privacy Compliance Artificial Intelligence Risk 89

IT Governance

OCTOBER 6, 2020

In this blog, we explain what you need to know and provide data loss prevention tips. Reminding employees to exercise caution and to back up information wherever possible will mitigate this risk. appeared first on IT Governance UK Blog. What causes data loss? The post What is data loss and how does it work?

IT 98

IT Computer and Electronics Data breaches Risk 98

IT Governance

MAY 28, 2019

It could be a simple tick-box exercise, with the unchecked steps forming the gaps that need to be addressed. Providing this information helps individuals understand their rights and how they can be exercised. appeared first on IT Governance Blog. Write a data protection policy.

GDPR 72

GDPR Compliance Personal data Risk 72

IT Governance

NOVEMBER 23, 2018

And how much would it take to dissuade others from persisting with poor security measures, out-of-date systems and software, and poorly trained staff? Our GDPR compliance checklist sets out eight areas you should address to ensure you can demonstrate your compliance: Establish an accountability and governance framework.

GDPR 68

GDPR Compliance Personal data Data breaches 68