Are we just shooting ourselves in the foot? Poor patch management, compromised accounts and a data breach. A week in which the NSA and SEC released guidance and observations on cyber security. We know that getting the basics right can…
An article that is well worth a read. Cyber is such a profound risk in so many ways. The World Economic Forum (WEF) rightly sets out its position on the role of leadership for the management of cyber risk. In…
I’m really pleased to report that I have been co-opted as a member of the board of the Security Institute. The UKs largest membership body for security professionals. I will work to support the excellent work which has already been…
Well worth a read. Closing the knowledge, governance and oversight gap for cyber at the board table is an issue which needs to be addressed. I’m not necessarily convinced with the questions, but I am convinced about the sentiment. Cyber…
2019 has been widely quoted as being the year in which the most data breaches were reported. The costs of which can be expected to the significant. Whether you measure the impact on the costs per record, enforcement costs or…
The aim of good governance is to support decision makers see through complexity and make better decisions. But has our creation of a data dependent society created a problem of complexity? To govern effectively the mass of data and information…
Ransomware has to be one of the worst forms of cyber attack, especially if you are a small firm. You could say that all the data should be backed up, that contingency plans should be in place. But lets face…
I want to wish everyone a happy, prosperous and secure 2020. The past 12 months have been a roller coaster ride of posts and papers published, speaking engagements and CSyP. Which I hope have been constructive and informative in spreading…
This is a must read from the Wall Street Journal, () a Christmas present from COSO. For those of you who haven’t heard of COSO they are a standards setting body for Risk and Controls evaluation. They are influential in…
The board room is a complex place to work. Boards make decisions within complex working environments, markets and regulatory regimes. Cyber security is a complex practice, one which has an organisational wide impact, due to the nature of the enterprise…
