HOW TO MANAGE CYBER RISK In the current climate, the need for a clear understanding of the business risks as well as the tools and techniques available to deal with them is fundamental. The velocity of change and the magnitude of the problem is not always fully recognised by the whole business. We recommend that […]
Businesses are experiencing an increase in the number of sophisticated and sustained threats carried out by organised criminals in the UK. This also includes the possibility of opportunistic attackers and potentially disgruntled ex-employees who are determined to ruin a company’s reputation by using your current employees to infiltrate your business systems. The attempt to obtain
Social Engineering Read More »
Whilst conventional assessments remain valuable tools for network security, they often miss those flaws that were previously known or for which no fix is available (it should be noted that these flaws have been proven to be effective against fully patched systems). Scenario-based attack simulation is a specialisation of security assessments where, in addition
Scenario based attack simulation Read More »
PEOPLE’S REPUBLIC OF CHINA’S PRACTICE OF NETWORK POWER In today’s world, the information technology revolution is changing with each passing day. In contemporary China, the development of the network business has advanced by leaps and bounds. From mobile payment everywhere to new high-level online transaction volume; from the nationwide e-government system to the booming big
China Cyber Dilemma in the 21st Century Read More »
In late 2019, early 2020, the world woke up to the first, in modern memory, a truly global pandemic. Prior to COVID-19, Business Continuity Professionals had to go cap in hand with line of business managers to try and perform the annual Business Impact Analysis (BIA), review “their” Business Continuity, Resumption, and IT DR Plans.
Operational Resilience Read More »
17 years, 3 months, and 7 days ago, Visa released the first version of the Payment Card Industry Data Security Standard (PCI DSS). 9 versions later, the PCI Security Standards Council (PCI SSC) is on the cusp of releasing the long-anticipated / debated version 4.0. Every organisation to whom this standard applies will be affected
PCI DSS v4.0, How Much Work is Involved? Read More »
In House Security Training In-house security training is often a knee-jerk, last-minute moment for most companies, and course development is typically crammed into a CISO’s workload, which is already sitting at 110%. It’s not that the content isn’t good, or the trainer is inexperienced, it’s just that companies don’t really have the time to develop,
Cyber training is useless without staff empowerment Read More »
As you may have heard, there was recently a change in the requirements for Cyber Essentials (CE) and Cyber Essentials PLUS (CE+) on the 24th of January 2022. This has been described as the “biggest overhaul of the scheme’s technical controls since its launch”. These changes were implemented to reflect modern businesses and their environments
Cyber Essentials and Cyber Essentials Plus Read More »
There’s a reason why athletes simulate big match conditions when they play in a runup to a tournament and why actors do dress rehearsals before opening night. The closer you can get to what it feels like during an event, the better prepared you can be in case anything goes wrong. That’s exactly the thinking
Breach Attack Simulation Read More »
