Rory Alsop, FCIIS

https://lnkd.in/eZfp59HD Schools need greater support and funding for protection and mitigation against such attacks. If a school is run as an academy can they face an ICO fine? There were 347 cyber incidents reported in the education and childcare sector in 2023, a BBC report revealed. It represented a 55% increase on 2022.

11

1 Comment

The ICO has posted a document discussing #CyberSecurity areas to learn from others regarding previous breaches (https://lnkd.in/esvupixY) and apparently failing to patch systems processing personal data isn't one of the biggest issues. Does anyone believe that? #BeyondCyber #GovernanceMatters #DataProtection

5

Are you looking to improve your leadership skills? I had the pleasure of meeting Andy Ellis at RSA last week and have been digging into his book ever since. Being one of the most well-known and experienced cybersecurity leaders, he shares dozens of lessons and observations that anyone, at any stage of their career, can use to create a work culture of continuous improvement and strong leadership Andy Ellis is a graduate of MIT and former US Air Force officer. In his 20-year tenure, he designed, built, and brought to market many of Akamai’s security products, leading the Fortune 1,000 company from its start as a content delivery network into an industry powerhouse with a billion-dollar dedicated cybersecurity business.  Andy is now the founder of leadership development firm Duha, where he teaches his leadership philosophy not only to other executives, but strives to make leadership training more accessible to people at all career levels. My takeaways so far: ✅Focus on the present, worrying about failure can make it happen! ✅Consistency matters ✅Performance development is for EVERYONE in your team. Grab a copy if you’re looking to improve your leadership skills, I’m glad I did. #leadership #cybersecurity

30

#Crowdstrike has released its Root Cause Analysis - 12 pages of details which ultimately boils down to inadequate testing, in other words a systemic issue. Perhaps not surprising, but we can't depend on our service providers putting in place adequate quality assurance processes, we need to consider doing more testing prior to deployment - or consider alternative solutions. #testing #qualityassurance #cyber

22

1 Comment

IASME, the National Cyber Security Centre’s (NCSC) cyber essentials delivery partner, has created useful guidance documents for schools which also apply to colleges. Read more 👉 https://lttr.ai/AZj5C #cyberessentials #education #Cybersecurity #cybersecurity

3

Where is your data? Who hosts that data? What contracts are in force to protect your data being "handed over" to third parties at a whim? If Police Scotland struggle to get their head around the implications of their actions, how are SMEs supposed to cope? Do SMEs have the legal wherewithal to understand the Cloud Act? (Do SMEs even know where their data is? Much of it is likely lurking in the shadows, after all). I know I'm asking questions rather than answering them. Cloud services were meant to make our lives easier, but do they? #cloudsecurity #ico #shadowdata https://lnkd.in/eetuxeQZ

8

1 Comment

New Blog! This time focussing on Security Monitoring, this is my background subject really, but this one doesn’t talk about the solutions you could implement for a good reason, because the most important thing is your need. A lot of businesses don’t get value because they listen to the vendor not their own business, having the need nailed down will save unnecessary cost and make your vendor relationship more sustainable. There are some tips in here that you should be aware of when approaching or re-approaching your perfect solution (if there is such a thing).

8

1 Comment

Scotland’s Digital Office for local government has said it is focusing on providing strategic tabletop exercises to strengthen cyber security among the country’s local authorities. It said this reflects the fact that, while technology provides a level of security, the human factor is crucial in detecting, responding and recovering from a cyber attack. Tabletop exercises simulate scenarios to help organisations test their response plans, identify gaps and improve their cyber security posture. The Digital Office said it is gearing the exercises towards council chief executives, boards of directors, heads of service and managers to give them experience of responding to a cyber incident. https://lnkd.in/eG2_T_Yy #cybernews #cybersecurity #localauthority #cyberexercise

1

🔐 🤖 🧠 Weekly InfoSec Knowledge Nugget 🧠 🤖 🔐 ℹ 30 million people in the UK have had data lost or stolen, whereby 55% of UK adults reported having had their data lost or stolen, and 30% of them experiencing emotional distress as a result. 🔗 Source: UK Information Commissioner's Office: https://lnkd.in/df-NS6rK ⚡Data is gold these days and it is important to safeguard it using robust security practices. Individuals and organisations alike need to do more to improve their security and data protection measures to protect this precious data. As individuals we need to ensure that we only share data with reputable organisations who have the safeguarding of such data as a core interest. Organisations collecting data need to implement all the necessary security protocols and controls to protect the data they are collecting and processing. #security #infosec #data #dataprotection #gdpr #databreach #uk #ico

2

ICO urges organisations to strengthen cyber security amid rising attack risks The ICO reports a sharp increase in cyber attacks, urging sectors like finance, retail, and education to bolster cyber security.

1

🔒 DON’T GET LOCKED IN BY RANSOMWARE 🔒 ➡ Join our must-attend webinar on the growing threat of ransomware hitting the UK and beyond! Our expert panel will dive into the latest trends, impacts, and what this means for you. You'll learn how to strengthen your defences and handle these cyberattacks like a pro 💪 ➡ Key topics we'll cover include the latest ransomware attacks hitting the UK and the world 🌍 how these threats are disrupting businesses and the best practices to keep your systems protected 🔐 ➡ We'll also show you how to spot weaknesses 🔎 build stronger defences and respond effectively during an attack 🚨 Stay ahead of the game and learn the new tactics cybercriminals are using! 👾 Register here 👉 https://lnkd.in/dGGQuABn #ransomware #cybercrime #cyberattack #cybersecurity #cyber #cyberlondon #london Izak Oosthuizen Simon Newman Raj Rajarajan Mark Child Paresh Deshmukh Lucindi Storme Kathy Meyer Christopher Haverly Louis Oosthuizen

13

The Saepio team have pulled together this series of webinars to guide UK Businesses towards cyber resilience and achieve CE Plus. Yesterday's webinar our Solutions Architect Tori Mittens covered Malware Protection. Thanks to all of you who attended, we always aim to make our webinars useful, short and actionable. If you'd like to watch it, click on the link 👉 https://lnkd.in/evXNpuHX #cyberresilience #malwareprotection #cybersecurity

8

I will be speaking about Business Driven Cloud Architecture exploring why the vendor reference frameworks aren't enough. This will focus on the top down approach and identifying what capabilities you need. A follow up session at our next SABSA world event will look at development of the capabilities themselves.

19

This week I've been mulling over planning timescales for information risk and security management - a pertinent topic as we plummet towards the new calendar year and, for many, the new financial year. How's it going with your 2025 budget? Do you have an eye towards 2026 and beyond? https://lnkd.in/gUFiKpyZ

8

6 Comments

The Nikki-Universal ransomware attack shows how quickly things can spiral when cybercriminals strike—and why the stakes are higher than ever for businesses worldwide. Attacks like these aren’t just about encrypted files; they’re about leaked secrets, operational chaos, and reputation damage. With hackers using tactics like double and triple extortion, it’s clear: defense strategies must evolve. For more insights and analysis, check out the detailed post on Matisoft’s LinkedIn page. Follow Matisoft Cyber Security Labs for more insights and updates on this and related topics. #MatisoftLabs #Cybersecurity #RansomwareAttack #DataSecurity #RiskManagement #IncidentResponse #CyberResilience

1

New regulations that came into effect on April 29, 2024 (#1007) aim to improve consumer protection by requiring stricter security measures for internet-connected products like smart TVs, speakers, air-friers, coffee machines and wearables. ❓What you need to know: - Applies to any business producing, selling, or distributing these products in the UK. - Requires risk assessments, security measures, and clear communication of those measures. - Regular security updates and a point of contact for reporting vulnerabilities are mandatory. 💸Non-compliance can be costly: Fines up to £10 million or 4% of global turnover. Product removals and potential liability for damages.

8