
Founder of https://nitter.cf/t.co/2IMPis0IdZ, author, speaker. 20 yrs working with #ISO27001, #cybersecurity and #GDPR.
United Kingdom
Joined September 2014
- Tweets327
- Following309
- Followers224
- Likes163
Good books open one’s eyes, as much to the future as to the past. Candi Miller’s ‘Salt and Honey’ does exactly that. There are four good reasons to read it today.
amazon.co.uk/Salt-Honey-Koba…
I’m pleased to announce my involvement in the Real Cyber Awards in Leeds this year.
FREE to enter
FREE to attend (if shortlisted)
FREE ticket for a guest (if shortlisted)
Deadline for Nominations at the end of July! Enter now. More details: therealcyberawards.co.uk/
Daughter’s 1st solo novel published today - my copy arrived from Amazon in time to read on tomorrow’s flight - very excited! #whetherviolentornatural
Just seen this - the third book in this article is by my daughter - it’s published on 11May - ‘Whether violent or natural’ amazon.co.uk/Whether-Violent… is available on Amazon. telegraph.co.uk/books/what-t…
ISO/IEC 2700:2022 Transition planning - webinar this afternoon: register.gotowebinar.com/reg…
An extremely interesting post on cyber insurance and cyber risk: linkedin.com/pulse/cyber-ris…
Cyber breach: not 'if' but 'when': telegraph.co.uk/business/202… and ft.com/content/31b71b9f-8efd…. And it's too late to deploy defences once you've been breached - you need to stress test a Cyber Defence-in-Depth strategy BEFORE it's too late. Are you ready for a cyber attack?
Our monthly data breach report is increasingly useful: itsupplychain.com/it-governa…
Cyber insurance is the WRONG answer to cyber risk. Insurance is for mitigating high impact but low likelihood risks. Cyber breach - as all the data now shows - is a high impact, high likelihood risk - top right corner. itgovernance.co.uk/cyber-def… is the only sensible mitigation.
This is an interesting article about the professionalism of ransomware gangs: itbrew.com/stories/2022/12/2…
GDPR Compliance requirements finally threaten the Facebook business model: irishtimes.com/business/2023…. While the decision, forced on Ireland by the EDPB, is old news, it does clarify for adtech what is not an acceptable approach to monetising subscriber personal data.
This article - about Board responsibility for cyber security bworldonline.com/economy/202… is relevant to C-Suites the world over.
Remote working, with all its benefits, is a cybersecurity challenge the world over - not just in Canada: theglobeandmail.com/business…. Cyber defence-in-depth is the sort of structured approach that helps distributed organisations build cyber resilience. itgovernance.co.uk/cyber-def…
This report says that, in order to win business, cyber security investment is essential- and training and integrated solutions are needed: thefastmode.com/technology-a… - and that, in a nutshell, is why the IT Governance itgovernance.co.uk/cyber-def… offering.
2024? Am expecting to see an acceleration in cyber security regulation designed to compensate for the sustained failure by C-Suites to understand or take appropriate action to combat cyber crime – cyber criminals will..
..organisations. There will be more and larger fines for data breaches, both in the EU and the UK. Cyber insurance will become ever more difficult to get. Shareholder pressure will lead to directors in some breached organisations losing their jobs. An increasing number of..
..breached organisations will simply cease to trade. Maybe, by 2024, finance teams will understand that only three things in life are certain: death, taxes and cyber-crime. #cyberdefenceindepth
ISO/IEC 27001:2022 is with us now. Anyone who has a related Lead Implementer or Lead Auditor qualification can attend this 1-day course itgovernance.co.uk/shop/prod…, pass the exam and immediately upgrade to an ISO17024-accredited 2022 qualification.


