IT Governance

OCTOBER 29, 2018

one of the biggest cyber security threats is inside your organisation , there’s never been a better time to ensure your organisation has an effective GDPR staff awareness training programme in place. . How to deliver staff awareness training – seven top tips . And, with recent reports indicating that?

GDPR 75

GDPR Compliance Security awareness Education 75

IT Governance

OCTOBER 29, 2018

one of the biggest cyber security threats is inside your organisation , there’s never been a better time to ensure your organisation has an effective GDPR staff awareness training programme in place. . How to deliver staff awareness training – seven top tips . And, with recent reports indicating that?

GDPR 75

GDPR Compliance Security awareness Education 75

IT Governance

OCTOBER 30, 2018

Staff awareness training is a core component of GDPR compliance, yet many organisations haven’t implemented the necessary measures. For all the attention that organisations pay to information security, the biggest threat continues to come from employees. Staff training under the GDPR.

GDPR 77

GDPR Government Data breaches Information Security 77

IT Governance

OCTOBER 30, 2018

Staff awareness training is a core component of GDPR compliance, yet many organisations haven’t implemented the necessary measures. For all the attention that organisations pay to information security, the biggest threat continues to come from employees. Staff training under the GDPR.

GDPR 77

GDPR Government Data breaches Information Security 77

IT Governance

NOVEMBER 24, 2021

But as is often the case with technological solutions, the benefits of convenience comes with security risks. In this blog, we look at the top five Cloud security challenges that organisations face, and provide tips on how to overcome them. You can find out how to get started with our Phishing Staff Awareness Training Programme.

Cloud 133

Cloud Risk Security Data breaches 133

IT Governance

FEBRUARY 16, 2024

Expert tips from Alan Calder Alan is the Group CEO of GRC International Group PLC, the parent company of IT Governance, and is an acknowledged international security guru. What are your top tips for ensuring compliance with the GDPR and similar laws? Penetration testing is also well worth the investment.

Data Privacy 117

Data Privacy GDPR Compliance Privacy 117

IT Governance

OCTOBER 26, 2021

This Sunday is both Halloween and the end of National Cyber Security Awareness Month – and what better way to mark the occasion than with some cyber security horror stories? But when it comes to cyber security, you can never be as sure that the person behind the mask is as benign. Trick or treat. Hack-o-lantern.

Phishing 145

Phishing Security Ransomware Security awareness 145

IT Governance

FEBRUARY 25, 2019

There has never been a better time to get into cyber security, with growing demand for experts promising increased salaries and job opportunities. In this blog, we provide tips for getting your cyber security career started no matter your background. Where can you learn about the cyber security industry?

Security 75

Security Systems administration Information Security Government 75

IT Governance

JUNE 11, 2018

Incident response management (IRM) is an increasingly important, and popular, part of cyber security. Despite its growing prominence, many are still unsure of how IRM works, so we’ve provided four tips to help you get started. Understand cyber security incidents. Train your staff.

GDPR 68

GDPR Phishing Communications Government 68

IT Governance

FEBRUARY 9, 2021

If your marketing agency is under the impression that cyber security is strictly an IT issue, you should think again. Effective security is a company-wide commitment, and marketers play one of the most crucial roles. Here are our three top tips. Adopt an ISMS to manage the data you collect.

Marketing 123

Marketing Security GDPR Privacy 123

IT Governance

DECEMBER 7, 2017

There has never been a better time to get into cyber security. If you’re thinking about starting a career in cyber security, here are five things you should do. As with most industries, you’re much more likely to get ahead in cyber security if you have experience. Cyber security isn’t something you can pick up quickly.

Security 94

Security Information Security Government Cybersecurity 94

IT Governance

MARCH 29, 2024

Here are all our Q&As to date, grouped by broad topic: AI Cyber attacks and data breaches Cyber Essentials Cyber resilience Cyber security Data privacy DORA Incident response ISO 27001 PCI DSS PECR Security testing Training Miscellaneous To get new expert insights straight to your inbox, sign up to our weekly newsletter, the Security Spotlight.

Data Privacy 52

Data Privacy Compliance GDPR Privacy 52

IT Governance

SEPTEMBER 30, 2022

Small businesses are vulnerable to cyber attacks because they lack the resources to address cyber security. He believes that the problem isn’t simply that small organisations cannot afford cyber security defences but also that they view it as less of a priority than larger firms. Why are small businesses at risk?

Ransomware 136

Ransomware Manufacturing Data breaches Risk 136

IT Governance

JULY 23, 2019

Achieving effective cyber security doesn’t have to be a long and expensive process. Staff awareness training. Training courses show staff how security threats affect them and help them apply best-practice advice to real-world situations. There are many simple controls you can implement to boost your defences.

Security 82

Security Passwords Data breaches Information Security 82

IT Governance

OCTOBER 23, 2023

Secure remote working tips and VPN insights from our senior penetration tester Leon Teale is a senior penetration tester at IT Governance. He’s also been featured in various articles relating to cyber security. So how can organisations efficiently secure their remote infrastructure? We sat down to chat to him.

Encryption 106

Encryption Authentication Access Security 106

IT Governance

MAY 11, 2021

Our Q1 2021 review of data breaches found that almost one in three publicly disclosed security incidents was a ransomware attack, and in April alone, we discovered 53 cases. And that’s just the tip of the iceberg; there are plenty of organisations who fall victim and don’t disclose the damage. Find out more.

Ransomware 105

Ransomware Data breaches Phishing Government 105

eSecurity Planet

FEBRUARY 13, 2023

Application security is the practice of securing software and data from hackers, whether that application comes from a third party or was developed in house, regardless of where it resides or how it’s accessed. How Does Application Security Work? What Are the Types of Application Security?

Security 80

Security Cloud Risk Computer and Electronics 80

IT Governance

APRIL 8, 2020

We also have a selection of free tools to help you address some of the challenges you’ll face, and summarise the latest coronavirus-related security threats. The creation of a new network allows the separation of corporate and personal devices, increasing the security posture,” he writes. “It Cyber attacks. Phishing attacks.

Security 108

Security Phishing Risk Ransomware 108

IT Governance

JUNE 30, 2022

Although Wiltshire Farm Foods has revealed few details about the incident, cyber security experts believe that it bears the hallmarks of ransomware. As such, employees are often the last line of defence, and it’s why we recommend enrolling them on regular staff awareness training courses. How did the cyber attack occur?

Ransomware 124

Ransomware e-Delivery Education Phishing 124

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

In the spirit of National Cyber Security Awareness Month (NCSAM), my colleague Ashvin Kamaraju wrote about how organizations can use fundamental controls to secure their information technology. Effective digital security doesn’t end at “Secure IT,” however. Hence the need for a robust enterprise-wise security culture.

Security awareness 83

Security awareness IT Security Passwords 83

Security Affairs

JANUARY 19, 2024

So, it might not be time to panic, but it certainly is time to recognize that the threats and the benefits of quantum computing are here now, and security professionals need to ensure that they and the organization they work for are fully prepared. And those are all the problems that quantum can solve.

IT 106

IT Encryption Cybersecurity Security 106

IT Governance

JULY 29, 2019

Protecting your organisation against cyber crime can sometimes feel like a never ending game of security whack-a-mole. Just as soon as you’ve secured one weakness, it seems as though another vulnerability rears its head. In this post, we outline five essential ways of keeping your organisation secure.

Information Security 74

Information Security Security Risk Phishing 74

Thales Cloud Protection & Licensing

NOVEMBER 22, 2022

But negative blowback from major breaches in the 2000s, fines imposed by regulators, and strict cyber security mandates such as PCI-DSS, helped retailers dramatically improve cyber security and slow down the wave of attacks. Of course, the common attack method is phishing, and its related form, whaling.

Retail 127

Retail Cybersecurity Ransomware Authentication 127

IT Governance

APRIL 15, 2020

The video conferencing platform Zoom has been heavily criticised in recent weeks , amid a series of allegations related to its inadequate cyber security and privacy measures. It’s worth emphasising, then, that for all of Zoom’s security faults, the blame for this incident lies with users rather than the platform. Cyber attacks.

Security 124

Security Passwords Risk Phishing 124

IT Governance

JANUARY 5, 2023

This database is going to be used by hackers, political hacktivists and of course governments to harm our privacy even further,” he said. It’s common for cyber criminals to double down on a data breach by sending bogus emails that seemingly address security concerns related to that incident. Where did the data come from?

Sales 109

Sales Phishing Data breaches Passwords 109

IT Governance

OCTOBER 13, 2023

October is both Cybersecurity Awareness Month in the US and European Cyber Security Month in the EU – twin campaigns on either side of the Atlantic that aim to improve awareness of the importance of cyber security both at work and at home, and provide tips on how to stay secure.

Phishing 105

Phishing Financial Services Manufacturing Personal data 105

IT Governance

MAY 20, 2020

We take a look at some of those challenges in this latest round-up, which discusses the cyber security risks associated with the pandemic and the ways lockdown threatens our ability to work productively and safely. Tips for working from home. The post Secure Together: Britons scammed out of £3.5 Cyber crime.

Security 118

Security Phishing Insurance Risk 118

KnowBe4

MARCH 28, 2023

Security awareness training still has a place to play here." Email and other elements of software infrastructure offer built-in fundamental security that largely guarantees we are not in danger until we ourselves take action," Tyson writes. Get a look at THREE NEW FEATURES and see how easy it is to train and phish your users.

Phishing 87

Phishing Security awareness Insurance Cybersecurity 87

IT Governance

SEPTEMBER 8, 2021

In this blog, we take a look at some of the problems you will encounter and provide tips to help you address them. He pointed to organisations’ overall ability to adapt to remote working during the pandemic, and said that staff training can be performed with the same technologies that are already in use. Beware of elevated privileges.

Communications 126

Communications Risk Education Compliance 126

IT Governance

MARCH 7, 2023

This month, we’re dedicating our feature to a topic that has been circling the cyber security sector – and many others besides – for some time: AI (artificial intelligence). Cyber security is no exception. Fighting fire with fire It’s not only the good guys that are using AI in the cyber security landscape.

Phishing 111

Phishing Artificial Intelligence Passwords Security 111

Security Affairs

SEPTEMBER 20, 2020

National Cyber Security Centre (NCSC) has issued an alert about a surge in ransomware attacks targeting education institutions. National Cyber Security Centre (NCSC), has issued an alert about a surge in ransomware attacks against education institutions. backup servers, network shares, servers, auditing devices). Pierluigi Paganini.

Education 143

Education Ransomware Phishing Encryption 143

IT Governance

MAY 5, 2022

In this blog, we look at the advice that World Password Day has to offer and explain why now is the time to review your password security. A simpler and more secure technique is to create a mnemonic or cipher, such as taking the first character and punctuation from each word of a sentence. Not so bad. Get started.

Passwords 105

Passwords Authentication Data breaches Security 105

eSecurity Planet

APRIL 9, 2024

SaaS security checklists are frameworks for protecting data and applications in cloud-based environments. They serve as benchmarks for upholding strong security requirements, evaluating existing tools, and assessing potential solutions. We’ve designed a customizable template to help you develop your own SaaS security checklist.

Security 79

Security Compliance Cybersecurity Communications 79

IT Governance

DECEMBER 29, 2017

Many companies choose to use an independent certified auditor before the certification audit to help them identify the various gaps between the security measures that have been implemented and the specific demands of ISO 27001. Independent audits can make a big difference. Build internal competence.

Government 77

Government Compliance IT Risk 77

KnowBe4

DECEMBER 6, 2022

Live Demo] Ridiculously Easy Security Awareness Training and Phishing. Old-school awareness training does not hack it anymore. Join us TOMORROW, Wednesday, December 7 @ 2:00 PM (ET) , for a live demo of how KnowBe4 introduces a new-school approach to security awareness training and simulated phishing. Did You Know?

Security awareness 91

Security awareness Phishing Risk Insurance 91

Krebs on Security

APRIL 2, 2019

Its author maintains Orcus is a legitimate R emote A dministration T ool that is merely being abused, but security experts say it includes multiple features more typically seen in malware known as a R emote A ccess T rojan. Tips from international private cyber security firms triggered the investigation.”.

Marketing 210

Marketing Passwords Systems administration Access 210

AIIM

MAY 20, 2021

Step 3: Have Clear Corporate Data Security Policies. Step 5: Secure Valuable Knowledge. The third and final way to label your knowledge assets is through their security-related access levels. Data categorization primes you for the next step—data security policy formulation. You must secure it. Medium-value assets).

Sales 137

Sales Data breaches Marketing Access 137