IT Governance

NOVEMBER 13, 2019

Cyber security awareness training is one of the most important steps an organisation can take to protect its systems. Unfortunately, research by Privatise Business VPN suggests that staff aren’t getting the training they need to secure their organisation’s systems. The benefits of cyber security training.

IT 68

IT Security Data breaches Passwords 68

IT Governance

OCTOBER 25, 2019

Cyber security training is one of the most effective ways of improving your organisation’s defences against security incidents. It gives staff the wherewithal to avoid costly mistakes and establishes a strong cyber security culture in the office. This blog is part of a series to mark European Cyber Security Month.

Passwords 58

Passwords Data breaches Phishing Ransomware 58

IT Governance

JANUARY 24, 2024

Expert insight from Leon Teale into the implications of this historic data breach The security researcher Bob Diachenko and investigators from Cybernews have discovered an open instance with more than 26 billion data records, mostly compiled from previous breaches – although it likely also includes new data.

Passwords 139

Passwords Data breaches Encryption Risk 139

The Last Watchdog

SEPTEMBER 25, 2023

If you’re a small business looking for the secret sauce to cybersecurity, the secret is out: start with a cybersecurity policy and make the commitment to security a business-wide priority. Employee training is crucial. Security places a crucial role in your technology. The average cost of a cybersecurity breach was $4.45

Cybersecurity 222

Cybersecurity Data breaches Compliance Phishing 222

IT Governance

MAY 15, 2024

Physical access control, physical security monitoring, CCTV, and more When we hear the term ‘information security’ – or, for that matter, ‘ISO 27001’ – our thoughts usually turn straight to cyber security. However, physical security is also an important aspect of information and data security.

Security 52

Security Information Security Access Cloud 52

IT Governance

MAY 27, 2021

For all the talk of criminal hacking, ransomware infections and the technologies to prevent them, the key to protecting your organisation is cyber security awareness training. The importance of cyber security staff awareness. Cyber security awareness best practices. Training should occur multiple times a year.

Security awareness 119

Security awareness IT Security GDPR 119

The Last Watchdog

JANUARY 30, 2024

Each of us has probably sat through some level of cybersecurity awareness training during our professional lives. Don’t re-use a password across multiple sites. Most companies have multiple IT/security layers of defense in place designed to keep bad actors out, and to prevent good actors inside the company from making mistakes.

Passwords 140

Passwords Communications Cybersecurity Risk 140

IT Governance

AUGUST 3, 2023

Vishing attempts to con potential victims into surrendering personal information such as passwords, card details and PINs, which can be used for identity theft. However, that software itself contains malware – typically a keylogger that tracks everything that the user types on their machine, such as passwords and other sensitive information.

Passwords 91

Passwords Phishing Government Data breaches 91

IT Governance

OCTOBER 24, 2019

One of cyber criminals’ favourite ways of hacking organisations is through brute-force or ‘password spraying’ attacks, which bombard targets with login attempts using lists of common passwords. So it was great news for criminals when the NCSC (National Cyber Security Centre) revealed that 23.2 million are using ‘qwerty’.

Passwords 40

Passwords Phishing Government Risk 40

eSecurity Planet

OCTOBER 16, 2023

Public cloud security refers to protections put in place to secure data and resources in cloud environments shared by multiple users or organizations. Major cloud service providers have generally had good security , so cloud users can be pretty confident in the security of their data and applications if they get their part right.

Cloud 109

Cloud Security Encryption Compliance 109

IT Governance

AUGUST 16, 2021

Although employees and employers may rejoice at the flexibility that hybrid working affords, you must understand the cyber security risks associated with it. As such, employees using work laptops in and out of the office don’t need different security controls based on where they’re working. appeared first on IT Governance UK Blog.

Security 132

Security Data breaches Risk Government 132

IT Governance

FEBRUARY 27, 2020

Technological defences and staff training are two of the most frequently touted measures for preventing data breaches, but their effectiveness is dependent on the way organisations implement them. That means creating a detailed cyber security policy. What is a cyber security policy? What a cyber security policy should include.

Security 96

Security Passwords Access Risk 96

The Texas Record

AUGUST 27, 2019

On Friday, August 16, over twenty local government entities in Texas were targeted by a coordinated ransomware attack. This incident is the most recent in a year marked by cyberattacks on state and local governments across the country. In the wake of the attack, Texas local governments have been asking for help.

Government 56

Government Cybersecurity Ransomware Passwords 56

eSecurity Planet

SEPTEMBER 10, 2021

From the very beginning of the cloud computing era, security has been the biggest concern among enterprises considering the public cloud. In addition, 95 percent of survey respondents confirmed that they are extremely to moderately concerned about public cloud security. What is cloud security?

Cloud 130

Cloud Security Encryption Risk 130

IT Governance

JULY 23, 2019

Achieving effective cyber security doesn’t have to be a long and expensive process. Staff awareness training. Training courses show staff how security threats affect them and help them apply best-practice advice to real-world situations. Password management. Let’s take a look at five of these must-have measures.

Security 82

Security Passwords Data breaches Information Security 82

IT Governance

DECEMBER 9, 2021

Cloud security is an essential part of today’s cyber security landscape. To mitigate these risks, the NCSC (National Cyber Security Centre) created the Cloud Security Principles , which outline 14 guidelines for protecting information stored online.

Cloud 126

Cloud Security Authentication Risk 126

IT Governance

MAY 17, 2018

This week, we discuss the exposure of millions of Facebook users’ data, security failings in train passenger networks and Kaspersky Lab’s relocation to Switzerland. Hello and welcome to the IT Governance podcast for Friday, 18 May 2018. Here are this week’s stories.

Government 70

Government Access Information Security Security 70

IBM Big Data Hub

MARCH 4, 2024

Security, governance, risk and compliance mechanisms are essential not only for governing AI but also for managing the IT estate running AI, providing evidence for regulatory compliance. An AI+ enterprise also recognizes that alongside the necessary tools, fostering a culture that embraces AI and trains talent is crucial.

Artificial Intelligence 105

Artificial Intelligence Cloud Government Risk 105

IT Governance

FEBRUARY 11, 2019

An advert is currently running in which a man gets his password hacked because, the ad implies, he wasn’t using a VPN (virtual private network). The man’s password? Sooner rather than later, someone will guess your password and stumble into a wealth of sensitive information. Security vs convenience. Are we all so useless?

Authentication 78

Authentication Passwords Phishing Access 78

IT Governance

JULY 4, 2018

ISO 27001 is the international standard that describes best practices for an information security management system (ISMS). It recognises that, although technological defences are essential, they will have limited use if staff don’t understand their information security responsibilities. How to deliver training.

Information Security 49

Information Security Passwords Security Risk 49

IT Governance

APRIL 4, 2024

IT Governance’s research found the following for March 2024: 3,478 publicly disclosed security incidents. This gave them access to names, phone numbers, emails, plaintext passwords, branch locations, confidential messages and shift information for Chattr employees, franchisee managers and job applicants.

Data breaches 104

Data breaches Passwords Security Cloud 104

IT Governance

APRIL 6, 2020

Most companies will therefore already have some experience of the processes involved in home working and the security vulnerabilities that come with it. Let’s take a look at some of the cyber security risks that come with working from home, and the steps organisations should take to mitigate them.

Risk 140

Risk Security Phishing Passwords 140

IT Governance

APRIL 15, 2020

The video conferencing platform Zoom has been heavily criticised in recent weeks , amid a series of allegations related to its inadequate cyber security and privacy measures. In other words, if you created a Zoom account using the same username and password that you’ve used elsewhere, attackers may have been able to access your account.

Security 124

Security Passwords Risk Phishing 124

The Last Watchdog

SEPTEMBER 28, 2022

Other Iranian-based cyberattacks have included hackers targeting Albanian government systems and spear phishing scams. Nowadays, small businesses are more susceptible to spear phishing since they lack the IT security infrastructure in larger organizations. Steps to effective security. Otherwise, they risk dire consequences.

Phishing 124

Phishing Passwords Cybersecurity Government 124

IT Governance

AUGUST 7, 2023

The first looks at an alarming rise in phishing scams that impersonate the tech firm, while the second discusses a new security feature that’s designed to protect users from password compromise. One of the ways it does that is by warning people about security threats when they enter their Windows password into websites and documents.

Phishing 98

Phishing Passwords Education Personal data 98

IT Governance

JANUARY 19, 2023

NortonLifeLock customers have been warned that their accounts may have been compromised in a security breach. The attackers might also have had access to Norton Password Manager users’ private vault data, which contains stored passwords for other online accounts. By doing this, you mitigate the risk of password compromise.

Passwords 105

Passwords Phishing Risk Access 105

Security Affairs

MARCH 19, 2022

. “AvosLocker is a Ransomware as a Service (RaaS) affiliate-based group that has targeted victims across multiple critical infrastructure sectors in the United States including, but not limited to, the Financial Services, Critical Manufacturing, and Government Facilities sectors. Avoid reusing passwords for multiple accounts.

Ransomware 97

Ransomware Passwords Encryption Financial Services 97

eSecurity Planet

APRIL 12, 2024

Explore some real-world instances below and discover when and how to use DLP procedures for optimal data security. Industry-specific rules: Check relevant regulations on a regular basis to verify data security compliance , and use DLP to protect sensitive data and reduce regulatory risks.

Encryption 134

Encryption Risk Data breaches Access 134

Security Affairs

SEPTEMBER 18, 2023

Cybersecurity firm Wiz discovered that the Microsoft AI research division accidentally leaked 38TB of sensitive while publishing a bucket of open-source training data on GitHub. Due to a lack of monitoring and governance, SAS tokens pose a security risk, and their usage should be as limited as possible.” 5, 2021 Oct.

Risk 129

Risk Passwords Access Cloud 129

IBM Big Data Hub

SEPTEMBER 1, 2023

The more security teams and employees know about the different types of cybersecurity threats, the more effectively they can prevent, prepare for, and respond to cyberattacks. According to the IBM Security X-Force Threat Intelligence Index 2023 , ransomware attacks represented 17 percent of all cyberattacks in 2022.

Phishing 110

Phishing Passwords IoT Cybersecurity 110

IT Governance

NOVEMBER 24, 2021

But as is often the case with technological solutions, the benefits of convenience comes with security risks. In this blog, we look at the top five Cloud security challenges that organisations face, and provide tips on how to overcome them. You can find out how to get started with our Phishing Staff Awareness Training Programme.

Cloud 133

Cloud Risk Security Data breaches 133

eSecurity Planet

MARCH 7, 2022

A SaaS security company says a spike in cyber attacks from Russia and China in recent weeks suggests the two countries may be coordinating their cyber efforts. Security Agencies Release Network Security, Vulnerability Guidance ). SaaS Apps Under Attack. SaaS attacks by country of origin.

Security 134

Security Risk Military Cybersecurity 134

The Last Watchdog

FEBRUARY 3, 2021

This bad news from UScellular follows similarly troubling disclosures from networking software supplier SolarWinds and from email security vendor Mimecast. Attacks like this are unfortunately frequent and even well-intentioned, well-trained, users can fall victim to a clever attack. Meanwhile, Mimecast followed its Jan.

Phishing 252

Phishing Access Authentication Passwords 252

eSecurity Planet

FEBRUARY 21, 2022

Quick response (QR) codes are a convenient format for storing all kinds of information in a readable and secure way, at least when correctly implemented. With the ongoing COVID-19 pandemic, for example, governments have recently implemented QR codes to create Digital COVID Certificates for vaccination, tests status and other reasons.

Security 113

Security Encryption Authentication Phishing 113

IT Governance

DECEMBER 7, 2017

This week, we discuss the NCSC’s warning to senior civil servants, the poor password habits of MPs, and a bug in the patch Apple rushed out last week. Hello and welcome to the IT Governance podcast for Friday, 8 December 2017. Here are this week’s stories. This includes espionage, disruption and influence operations.

Passwords 69

Passwords Computer and Electronics Information Security Government 69

IT Governance

JANUARY 11, 2019

It’s widely accepted that people are the weakest part of any organisation’s security defences. That’s why information security policies are arguably the most important part of an organisation’s defence. That’s why information security policies are arguably the most important part of an organisation’s defence.

Information Security 78

Information Security Security Phishing Risk 78

IT Governance

NOVEMBER 1, 2018

Then take a look at these three basic tips for staying secure. Cyber security can feel overwhelming. Besides, isn’t it IT’s job to keep you and your organisation secure? Use a secure Internet connection. Create unique passwords for your work accounts. This frustration largely stems from misunderstanding.

Passwords 103

Passwords Security Paper Data breaches 103