Whilst conventional assessments remain valuable tools for network security, they often miss those flaws that were previously known or for which no fix is available (it should be noted that these flaws have been proven to be effective against fully patched systems). Scenario-based attack simulation is a specialisation of security assessments where, in addition
Scenario based attack simulation Read More »
PEOPLE’S REPUBLIC OF CHINA’S PRACTICE OF NETWORK POWER In today’s world, the information technology revolution is changing with each passing day. In contemporary China, the development of the network business has advanced by leaps and bounds. From mobile payment everywhere to new high-level online transaction volume; from the nationwide e-government system to the booming big
China Cyber Dilemma in the 21st Century Read More »
In late 2019, early 2020, the world woke up to the first, in modern memory, a truly global pandemic. Prior to COVID-19, Business Continuity Professionals had to go cap in hand with line of business managers to try and perform the annual Business Impact Analysis (BIA), review “their” Business Continuity, Resumption, and IT DR Plans.
Operational Resilience Read More »
17 years, 3 months, and 7 days ago, Visa released the first version of the Payment Card Industry Data Security Standard (PCI DSS). 9 versions later, the PCI Security Standards Council (PCI SSC) is on the cusp of releasing the long-anticipated / debated version 4.0. Every organisation to whom this standard applies will be affected
PCI DSS v4.0, How Much Work is Involved? Read More »
In House Security Training In-house security training is often a knee-jerk, last-minute moment for most companies, and course development is typically crammed into a CISO’s workload, which is already sitting at 110%. It’s not that the content isn’t good, or the trainer is inexperienced, it’s just that companies don’t really have the time to develop,
Cyber training is useless without staff empowerment Read More »
As you may have heard, there was recently a change in the requirements for Cyber Essentials (CE) and Cyber Essentials PLUS (CE+) on the 24th of January 2022. This has been described as the “biggest overhaul of the scheme’s technical controls since its launch”. These changes were implemented to reflect modern businesses and their environments
Cyber Essentials and Cyber Essentials Plus Read More »
There’s a reason why athletes simulate big match conditions when they play in a runup to a tournament and why actors do dress rehearsals before opening night. The closer you can get to what it feels like during an event, the better prepared you can be in case anything goes wrong. That’s exactly the thinking
Breach Attack Simulation Read More »
SCAMMERS AND HACKERS ARE NOT TAKING CHRISTMAS OFF, SO DON’T LET YOUR GUARD DOWN. This past year has been a long, tough year for most of us. Chances are that you would like nothing more than to relax, let your guard down (and your hair), and enjoy a well-deserved break. It’s a great idea but
SCAMMERS AND HACKERS ARE NOT TAKING CHRISTMAS OFF Read More »
In many cybersecurity discussions these days, you hear the term ‘zero trust.’ People are proclaiming it as the new, best way to keep an organisation safe from the wave of cybercrime which has broken over Britain’s shores in the last year. It’s important to understand what it really is, what the benefits and shortfalls
Understanding the concept of ‘Zero Trust’ Read More »
