They say that it’s a good idea to change the passwords and if possible your user ID on a regular basis. If this article is correct, then it is likely that the User IDs and Password of a significant number…
Well worth a read. If all goes to plan the US DoD programme for embedding cyber security into its supply chain will start this year. If successful for the US DoD, CMMC will deliver a more or less turn key…
Having a sovereign cyber security capability is becoming a necessity and the norm for counties. Defining the level of cyber security a state needs to manage itself and what it is willing to outsource to the corporate sector, is a…
The legislative path for CMMC won’t become clear until requirements enter DFARS at some point in 2020 or maybe early 2021. Until then the programme continues through its planning to develop training materials, assessor guides and accreditation processes. Whether or…
According to US security services MSPs are being increasingly targeted by hackers. Who use MSP services to ‘springboard’ into the networks of their customer. With the increased use of MSP services it can be easier for a hacker to target…
Where do you start with this? There were many organisations and people defrauded by these teams and in some alleged cases of financial institutions losing £14Mn and a premier football team losing a combined £124Mn through BEC and VEC schemes.…
Christopher Wray, the head of the FBI targets China as being the biggest threat to US information and intellectual property. In a no holes barred speech and direct reference to the targeted use of cyber by China for the theft…
The University of California San Francisco pays a $1.1Mn ransomware demand following an infection in June. Whilst the University stated that there was no major impact, it goes some way to identify the impact of ransomware and data theft to…
Banking went the same way, segregating investment and retail banking. So finally the accountancy firms will have to separate their audit and consultancy practices. Putting in place clear lines of separation between the two and separate P&Ls. Ensuring ‘auditors act…
Well worth a read. For cyber risk management to be successful it must be assessed as far down the organisations architecture as possible. Accounting for the impact of cyber attacks on critical business processes, assets and data critical to business…
