Did Crowdstrike cause GDPR personal data breaches?
As the dust starts to settle on the Crowdstrike incident, the focus of concern naturally moves on from the immediate incident response...
top of page
Search
Stewart Room
- Nov 21, 2023
- 3 min
SEC Cybersecurity Rule 2023 - new transparency rules for corporate governance and incident response
The SEC regulates the securities markets in the US, the biggest and most powerful economy on Earth. Surely, therefore, the SEC is one of...
60
Stewart Room
- Nov 19, 2023
- 5 min
Ransoms and CISOs - charting the best course through treacherous waters
If you pick up any analyst report about cyber risks, you will be told about the increasing and evolving nature of ransom attacks. A while...
54
Stewart Room
- Nov 15, 2023
- 2 min
NCSC Annual Review - maintaining resilience in an evolving threat landscape
The UK National Cyber Security Centre published its latest annual review earlier this week. If you're ever looking for an organisation...
29
Stewart Room
- Nov 8, 2023
- 2 min
Important new case alert! A security breach doesn’t require a circumvention of security controls
If someone says "security breach", what do you think? Is this a situation where a rogue actor (say a cybercriminal) or a rogue thing (say...
148
Stewart Room
- Nov 7, 2023
- 2 min
Bad tech design increases the digital divide. D&I implications for cybersecurity
Touch screen devices are great. From a design perspective they get rid of the mechanical buttons that are riddled with wear-and-tear...
15
Stewart Room
- Nov 6, 2023
- 1 min
Is Cybersecurity a line or a circle? The shape impacts the quality of incident incident response
The operational shape of cybersecurity in an organisation is critical to its success and legal health. In light of recent developments such
8
Stewart Room
- Nov 2, 2023
- 1 min
SolarWinds is a cybersecurity game changer
SEC sure SolarWinds and CISO for cybersecurity fraud and controls failings
8
Stewart Room
- Nov 1, 2023
- 6 min
Biden's AI agenda and the cybersecurity issues and risks
President Biden’s expansive Executive Order on AI is the latest act in the global jockeying for the leadership position in this area. It...
39
Stewart Room
- Oct 31, 2023
- 4 min
Key legislation. The Communications Act
The security duties for providers of public electronic communications networks and services
32
Stewart Room
- Oct 27, 2023
- 5 min
Okta breach raises critical concerns about due diligence and accountability
Otka breach impacts authentication in cyberspace, raising due diligence and accountability concerns.
57
Stewart Room
- Oct 26, 2023
- 3 min
The cybersecurity ecosystem's raggedy regulatory blanket
The regulatory system for the cybersecurity ecosystem
24
Stewart Room
- Oct 25, 2023
- 4 min
Where do we find the detail of security law? Part 4.
Operational security builds upon the CIA triad and accidental hazards need controlling as well as malicious and negligent threats.
40
Stewart Room
- Oct 24, 2023
- 4 min
Key legislation. The Computer Misuse Act
The Computer Misuse Act is the UK's principal "anti-hacking" legislation. Learn more about cyber-dependent and cyber-enabled computer crimes
184
Stewart Room
- Oct 21, 2023
- 3 min
Cryptography is the cyberspace’s Higgs Boson. Part 2., Hashes.
We've explored how cryptography can be used to achieve confidentiality through encryption, so let's turn to data integrity. Integrity is...
17
Stewart Room
- Oct 20, 2023
- 3 min
Where do we find the detail of security law? Part 3.
The detail of security law is found within operational security itself, due to the twinning of the subjects, as explained in Part 1 and...
51
Stewart Room
- Oct 19, 2023
- 4 min
Cryptography is the cyberspace's Higgs Boson. Part 1., Encryption.
Symmetric and Public Key encryption for data confidentiality
51
Stewart Room
- Oct 18, 2023
- 6 min
Equifax fine highlights supply chain and incident response risks
Supply chain risks and incident response priorities exposed by Equifax cybersecurity data breach fine.
114
Stewart Room
- Oct 17, 2023
- 3 min
Is multi factor authentication compulsory in law?
Two factor and multi factor authentication needed for added security and legal compliance
153
Stewart Room
- Oct 17, 2023
- 5 min
Key legislation. The General Data Protection Regulation
The GDPR is a critical piece of security law requiring end to end security over the full personal data processing lifecycle
110
Stewart Room
- Oct 13, 2023
- 4 min
Data breach claims are successful in the US, so what's this GDPR "gold standard" all about then?
The GDPR is meant to be a global gold standard for data protection but compensation is unlikely after a security breach.
170
Stewart Room
- Oct 13, 2023
- 3 min
Incident response priorities need multiple lenses and trade-offs
When a cybersecurity breach occurs, operational security law will require an appropriate incident response and the priorities can be...
52
Stewart Room
- Oct 12, 2023
- 5 min
Cybercrime growth is unstoppable and these are the reasons why ...
Cybercrime is constantly growing and evolving and the advantage is with the attacker. Better security hygiene reduces the risk of being hit.
147
Stewart Room
- Oct 10, 2023
- 6 min
Litigation risk after a cyber-attack
If an organisation falls victim to a cyber-attack where the cybercriminal manages to impact information that the organisation holds on...
201
bottom of page