dcsimg

NIS Directive – The EU’s Directive on security of network and information systems

Technology has brought us into a world that many of us only poorly understand. While we may have some grasp of this technology, there is often a lack of real understanding as to how these technologies work and interact. A few decades ago, we understood that if the water levels fell then the hydroelectric plant would not be able to generate electricity. We knew that interchanges connected our … [Read more...]

The psychology of compliance

The human decision-making process is the preferred subject of psychologists and economists. Historically, they adopted an approach of viewing human behaviour as regular and highly predictable. This helped the researchers to build various models in order to comprehend social and economical phenomena. Such systems were compared by Karl Popper to reliable pendulum clocks.  One can take them apart and … [Read more...]

Protect your organisation by building a security-minded culture

Human behaviour is complex and inconsistent, making it a rich hunting ground for would-be criminal hackers and a significant risk to the security of your organisation.  In Build a Security Culture, security consultant and trainer Kai Roer discusses the human and cultural factors in organisational security, and explains how to ensure your organisation is set up to manage and deter malicious … [Read more...]

A concise guide to PCI DSS v3.2.1

All target dates for compliance with the PCI DSS have long since passed. The Standard is now on its third version, with the fourth in development with a predicted release date of Q4 2020. It is likely that v3.2.1 will be withdrawn around the end of 2021. Many organisations around the world – particularly those that fall below the top tier of payment card transaction volumes – are not yet … [Read more...]

A guide to implementing and auditing ISO 27001

Information is one of your organisation’s most valuable assets. The objectives of information security are to protect the confidentiality, integrity and availability of information. These basic elements of information security help to ensure that an organisation can protect against:  sensitive or confidential information being given away, leaked or otherwise exposed, both … [Read more...]

Five must-read books on cyber security

Books are a great way of increasing your cyber security knowledge, but with thousands to choose from, it’s difficult to know where to begin.  To help you get the best information available and enable you to advance your cyber security career, we’ve chosen some of our best titles for you. Security in the Digital World Technology is always developing, and so are the threats and risks of being … [Read more...]