IT Governance

OCTOBER 26, 2021

This Sunday is both Halloween and the end of National Cyber Security Awareness Month – and what better way to mark the occasion than with some cyber security horror stories? But when it comes to cyber security, you can never be as sure that the person behind the mask is as benign. Stay safe with IT Governance.

Phishing 145

Phishing Security Ransomware Security awareness 145

eSecurity Planet

APRIL 9, 2024

SaaS security checklists are frameworks for protecting data and applications in cloud-based environments. They serve as benchmarks for upholding strong security requirements, evaluating existing tools, and assessing potential solutions. We’ve designed a customizable template to help you develop your own SaaS security checklist.

Security 81

Security Compliance Cybersecurity Communications 81

eSecurity Planet

JANUARY 5, 2023

After a year that saw massive ransomware attacks and open cyber warfare, the biggest question in cybersecurity for 2023 will likely be how much of those attack techniques get commoditized and weaponized. Also read: SANS Outlines Critical Infrastructure Security Steps as Russia, U.S.

Security 143

Security Ransomware Cybersecurity Privacy 143

IT Governance

OCTOBER 1, 2019

October is National Cyber Security Awareness Month , where people are encouraged to brush up on their everyday information security practices. What is European Cyber Security Month? Cyber Security Month is an EU awareness campaign that promotes cyber security in the workplace and at home.

Security 86

Security Security awareness Passwords Risk 86

IT Governance

OCTOBER 24, 2019

That’s why Requirement 12 of the PCI DSS (Payment Card Industry Data Security Standard) instructs organisations to implement policies and procedures to help staff manage risks. It provides a detailed outline of information security responsibilities for all staff, contractors, partners and third parties that access the CDE.

Security awareness 66

Security awareness Information Security Risk Data breaches 66

eSecurity Planet

FEBRUARY 21, 2022

Quick response (QR) codes are a convenient format for storing all kinds of information in a readable and secure way, at least when correctly implemented. With the ongoing COVID-19 pandemic, for example, governments have recently implemented QR codes to create Digital COVID Certificates for vaccination, tests status and other reasons.

Security 112

Security Encryption Authentication Phishing 112

OpenText Information Management

MAY 6, 2024

AI is quickly becoming ubiquitous, which means CISOs must know how to manage, guide, and lead AI’s adoption. AI trends – what is the role of AI in the security market? As AI development and usage continue to evolve, the security landscape is bound to evolve with them. billion by 2030. is a resounding YES!

Artificial Intelligence 62

Artificial Intelligence Security awareness Security Risk 62

IT Governance

OCTOBER 29, 2018

one of the biggest cyber security threats is inside your organisation , there’s never been a better time to ensure your organisation has an effective GDPR staff awareness training programme in place. . How to deliver staff awareness training – seven top tips . 1) Consider your requirements .

GDPR 75

GDPR Compliance Security awareness Education 75

IT Governance

OCTOBER 29, 2018

one of the biggest cyber security threats is inside your organisation , there’s never been a better time to ensure your organisation has an effective GDPR staff awareness training programme in place. . How to deliver staff awareness training – seven top tips . 1) Consider your requirements .

GDPR 75

GDPR Compliance Security awareness Education 75

IT Governance

MAY 1, 2018

This week’s extract is taken from Graham Day’s book Security in the Digital World. This must-have guide features simple explanations, examples and advice to help you become security-aware in a developing digital world. Q: What useful task can you give children to teach them how to be responsible online?

Security 75

Security Security awareness Information Security Government 75

eSecurity Planet

JUNE 17, 2021

Back in the day, security training was largely reserved for IT security specialists and then extended to include IT personnel in general. These days, all employees need to be well educated in security best practices and good habits if the organization wishes to steer clear of ransomware and malware. Elevate Security.

Cybersecurity 133

Cybersecurity Security awareness Phishing Education 133

eSecurity Planet

SEPTEMBER 8, 2023

Application programming interface (API) security is a combination of tools and best practices to secure the all-important connections between applications. API security protects data and back-end systems while preserving fluid communication between software components through strict protocols and access controls.

Security 94

Security Authentication Access Encryption 94

IT Governance

OCTOBER 18, 2018

We caught up with Graham Day author of October’s book of the month, Security in the Digital World , to find out more. Learn how to protect yourself in the digital world. Learn how to protect yourself in the digital world. Keep your children safe when using the Internet.

Security 63

Security Security awareness Information Security Risk 63

The Last Watchdog

JUNE 28, 2021

Microsoft said it notified the targeted 150 organizations, which included “IT companies (57%), followed by government (20%), and smaller percentages for non-governmental organizations and think tanks, as well as financial services.” This group has been in business for a long time and has made a name for itself with its successes.

Phishing 214

Phishing Passwords Authentication Financial Services 214

IT Governance

MARCH 19, 2018

This week’s extract is taken from Graham Day’s book Security in the Digital World. This must-have guide features simple explanations, examples and advice to help you become security-aware in a developing digital world. Use the subject line ‘Security in the Digital World Competition’.

Security 70

Security Security awareness Passwords Information Security 70

IT Governance

JANUARY 22, 2018

As industry experts, we are often asked how large an organisation’s security function should be. Building and maintaining this ‘culture of security’ is the only truly effective measure to address the human factor as part of your security threat prevention strategy. Our answer is: “As large as the organisation itself.”.

Security 70

Security Security awareness Government IT 70

IT Governance

JUNE 21, 2018

Far too often, information security teams have only the broadest overview of the wider workings of their organisations. Other staff, meanwhile, tend to have little knowledge of or interest in information security practices, which they often believe have been designed to hinder their day-to-day work. How your staff help attackers.

Security 58

Security Security awareness Information Security Phishing 58

eSecurity Planet

JANUARY 12, 2022

federal security agencies are putting companies on alert to potential threats from Russian state-sponsored cybercriminal groups, warning in particular about dangers to critical infrastructure and urging organizations to learn how to detect and protect against attacks. The joint cybersecurity advisory issued Jan.

Security 120

Security Passwords Cybersecurity Ransomware 120

IT Governance

APRIL 9, 2018

This week’s extract is taken from Graham Day’s book Security in the Digital World. This must-have guide features simple explanations, examples and advice to help you become security-aware in a developing digital world. Use the subject line ‘Security in the Digital World Competition’.

Security 69

Security Security awareness Information Security Government 69

Getting Information Done

APRIL 18, 2017

Ultimately, the chief information security officer (CISO) needs to understand the information footprint across systems, determine the value/risk of loss, and protect against cyberattacks through the deployment of control activities, which are commensurate with the value/risk of these information systems.

Government 53

Government Cybersecurity Insurance Information governance 53

KnowBe4

APRIL 4, 2023

But, according to security researchers at Abnormal Security, cybercriminals are becoming brazen and are taking their shots at very large prizes. According to Abnormal Security, nearly every aspect of the request looked legitimate. Get a look at THREE NEW FEATURES and see how easy it is to train and phish your users.

Phishing 81

Phishing Security awareness Cybersecurity Education 81

KnowBe4

OCTOBER 2, 2019

National Cybersecurity Awareness Month is the perfect time to think holistically about security awareness. National Cybersecurity Awareness Month (NCSAM) is well underway! A cybersecure workforce does not come from a one-and-done approach to teaching security best practices. How to Take Action? Protect It.,”

Cybersecurity 40

Cybersecurity Security Security awareness Phishing 40

The Last Watchdog

FEBRUARY 3, 2021

21 disclosed how cybercriminals broke into its Customer Relationship Management (CRM) platform as a gateway to compromise the cell phones of an undisclosed number of the telecom giant’s customers. Andy Oehler, VP of Product Management, Zentry Security . The latest twist: mobile network operator UScellular on Jan.

Phishing 252

Phishing Access Authentication Passwords 252

IT Governance

APRIL 23, 2018

This week’s extract is taken from Graham Day’s book Security in the Digital World. This must-have guide features simple explanations, examples and advice to help you become security-aware in a developing digital world. Q: What is the authors’ number one tip for improving your Snapchat security?

Security 56

Security Security awareness Information Security Government 56

IT Governance

MARCH 26, 2018

This week’s extract is taken from Graham Day’s book Security in the Digital World. This must-have guide features simple explanations, examples and advice to help you become security-aware in a developing digital world. Use the subject line ‘Security in the Digital World Competition’.

Security 53

Security Security awareness Government Information Security 53

eSecurity Planet

JULY 27, 2023

Securities and Exchange Commission this week announced new rules mandating the disclosure of cybersecurity incidents as well as ongoing risk management, strategy, and governance. “But breach notices are not security – and never will be.” “But breach notices are not security – and never will be.”

Data Privacy 87

Data Privacy Cybersecurity Risk Compliance 87

IT Governance

APRIL 16, 2018

This week’s extract is taken from Graham Day’s book Security in the Digital World. This must-have guide features simple explanations, examples and advice to help you become security-aware in a developing digital world. The impressive security functions of iPhones tend to be overlooked, or not fully understood by users.

Security 60

Security Security awareness Privacy Information Security 60

KnowBe4

JUNE 6, 2023

A new, HUGE, very important, fact has been gleaned by Barracuda Networks which should impact the way that EVERYONE does security awareness training. CONTINUED] at KnowBe4 blog: [link] [Live Demo] Ridiculously Easy Security Awareness Training and Phishing Old-school awareness training does not hack it anymore.

Phishing 70

Phishing Security awareness IT Passwords 70

KnowBe4

JULY 5, 2023

But I don't think an attack of such magnitude as the one identified by security researchers at Internet security monitoring vendor Bolster. This latest impersonation campaign makes the case for ensuring users are vigilant when interacting with the web – something accomplished through continual Security Awareness Training.

Phishing 77

Phishing Security awareness Passwords Computer and Electronics 77

eSecurity Planet

DECEMBER 7, 2022

Just today, security and compliance automation firm Drata announced a $200 million Series C funding round that brings the company’s valuation to $2 billion, doubling its $1 billion valuation from its Series B round last year. According to a recent Gartner survey, security is the top priority for CIOs. Where will the dollars go?

Cybersecurity 130

Cybersecurity Compliance Risk Ransomware 130

IT Governance

JANUARY 29, 2019

Meanwhile, Security Incident Response Manager Ernest Tan “persistently held a mistaken understanding of what constituted a ‘security incident’” and when incidents needed to be reported. You can find out what those measures entail by reading our free guide: Nine ways to improve your security awareness programme.

Data breaches 97

Data breaches Security awareness Passwords Risk 97

IT Governance

SEPTEMBER 20, 2018

The situation might seem hopeless, with cyber criminals outnumbering overworked and underfunded information security personnel, but there are plenty of ways you can improve your defences, even on a tight budget. This green paper explains each requirement and how you can comply. Green papers. Green papers.

Data breaches 71

Data breaches GDPR Security awareness Paper 71

KnowBe4

FEBRUARY 21, 2023

Employees play a role in organizational cybersecurity – Reddit mentions that "soon after being phished, the affected employee self-reported, and the security team responded quickly, removing the infiltrator's access and commencing an internal investigation." Blog post with links: [link] Are Your Users Making Risky Security Mistakes?

Phishing 68

Phishing Data breaches Security awareness Security 68

eSecurity Planet

APRIL 12, 2024

Explore some real-world instances below and discover when and how to use DLP procedures for optimal data security. Industry-specific rules: Check relevant regulations on a regular basis to verify data security compliance , and use DLP to protect sensitive data and reduce regulatory risks.

Encryption 124

Encryption Risk Data breaches Access 124

eSecurity Planet

AUGUST 27, 2021

Some of the biggest names in tech are promising to spend more than $30 billion to bolster cybersecurity capabilities, from securing the supply chain and expanding the adoption of the zero trust model to growing the talent pool , ramping up security awareness and revamping parts of the National Institute of Standards and Technology (NIST) framework.

Cybersecurity 116

Cybersecurity Education Authentication Security awareness 116

eSecurity Planet

JULY 18, 2023

Microsoft has hardened security following a Chinese hack of U.S. government agency email accounts, but some details remain a mystery. Even as the threat has passed, Microsoft officials are still analyzing how a Chinese threat group was able to access U.S. ” The attack, Microsoft says, has now been mitigated for all users.

Authentication 80

Authentication Access Phishing Government 80

IT Governance

JANUARY 10, 2018

Yet with little more than six months until the EU General Data Protection Regulation (GDPR) compliance deadline, organisations looking to achieve compliance will be required to create a shift in organisational culture to better support business objectives and tackle bad security habits.

GDPR 68

GDPR Compliance Security awareness Government 68