compliance

The Huawei debate continues, the latest NCSC report casts doubts around the long term security risks associated with the manufacturer. Whose right, who will take the risk? It’s surely got to be damaging the credibility of the company. Especially given…

Asus pushed out malicious code to +500,000 servers. It was found by Kaspersky, when it noticed unusual activity follow an update. What’s worrying is that as it was signed with an authentic certificate, it wasn’t picked up nor was it…

Hackers will invariably aim for financial gain, so go where the money is. But its not necessarily about the size of the prize that’s important in the short term. With the advent of faster payments, hackers are targeting the high…

I was pleased to formally receive recognition as a Chartered Security Professional (#CSyP), at last week’s CSyP celebratory dinner. Held at the Old Bailey in London and presented by Lord Carlile of Berriew, the outgoing chairman. 10 CSyP members were…

Give blood save a life, give blood lose your PII. View Original Post

Getting the basics right is a necessity for managing the complex cyber security environment. It requires the same level of attention if not greater, than financial control. It’s why IT and cyber controls are included in Sarbanes Oxley financial audit.…

Are emerging economies at a greater risk of cyber attack? Or are developed economies simply further down the maturity curve? View Original Post