After waiting for a year for the UK ICO to start dishing out the GDPR fines, we get two in two days! Marriott International quickly follow British Airways into the dock, with an announcement from the ICO that they intend to fine Marriott International £99m. The fine is on behalf of all European Regulators. The …
After waiting patiently for the UK Information Commissioners Office (ICO) to start the big fines process under GDPR, and expecting the first to be Facebook or similar, British Airways have beaten everybody else to the gate. The UK Information Commissioners office is proposing to fine British airways £183m for their lapse in security in 2018. …
You have been told you need to create a cyber incident response plan and I don’t know where to start. Many companies do not currently have a cyber incident response plan (link to survey), so it is likely that there are quite a few out there that are trying to get to grips with writing …
On 25th June 2019, a report was published by the Permanent Subcommittee on Investigations of the US Senate on the state of cybersecurity within eight key Federal Agencies. This report has received little global coverage given the scale of the findings within its 95-pages. The findings make for scary reading for the U.S. Government and all …
If you are a Small to Medium Enterprise (SME) working for a bigger organisation as a third party, how do you comply with your security obligations as per the contract, but not spend a fortune on security tools? In the UK, the National Cyber Security Centre (NCSC) has come out with Cyber Essentials, as a …
With two US organisations paying over $1m to cyber extortionists in a week, maybe ransomware has finally found its feet in the cyber-crime directory of how to make lots of easy money. When WannaCry hit the world in a blind attack that crippled corporates across the globe, it should have been a time to look …
The real life cyber incidents you will face are quite easy to categorise, and it makes sense to look at how you would handle them generically at a principles level. A Cyber Incident Playbook allows you to make generic decisions on generic trigger events. You will never be able to detail a Cyber Incident Playbook …
What makes a good Cyber Incident Plan? Let’s go through the basics. What is the point of an Incident Plan? A Cyber breach/incident is not a technical problem. It is a brand and reputation problem. The technical solution is a very small part of making sure your organisation deals with this incident effectively. The Incident …
