dcsimg

3 tips to get the most from your information security audits

Your organisation won’t be able to protect its systems for long without an information security audit. That’s because cyber threats and the way your organisation operates is constantly changing, requiring you to regularly take stock of your security practices.  Whether you’re trying to certify to an information standard, meet legal requirements or perform an internal assessment of your current … [Read more...]

A 9-step guide to implementing ISO 27001

As with many projects, the hardest part of implementing ISO 27001 tends to be knowing where to begin. The Standard, which describes best practice for an ISMS (information security management system ISMS), explains the requirements you need to meet, but it doesn’t show you how to implement them.   In this blog, we explain in nine steps exactly what you need to do to implement … [Read more...]

Potential data breach under investigation at University Hospital Galway

Saolta University Health Care Group is investigating a potential data breach at UHG (University Hospital Galway) after scam letters were sent to patients’ home addresses.   The letters, from an organisation calling itself The Anglo America Lottery, informed recipients that they had won a significant prize in the ‘Hospital Sick Patient Lottery … [Read more...]

Learn how to implement and maintain an ISO 27001-compliant ISMS with IT Governance

ISO 27001 is one of the most popular cyber security standards in the world, with the number of organisations achieving certification growing by more than 450% in the past 10 years. The Standard outlines best practice for an ISMS (information security management system). Achieving accredited ISO 27001 certification demonstrates that your organisation is … [Read more...]

GDPR non-compliance costs data analytics company €220,000

Bisnode, a Swedish data analytics company with a base in Poland, has been hit with a €220,000 (PLN 944,470) fine from Poland’s data protection authority, UODO. The fine was issued after Bisnode failed to inform millions of people that it was processing their data, denying them the opportunity to object to the processing, and the right to rectification or erasure of their details, as noted in … [Read more...]

What is an ISMS and why does your organisation need one?

Those getting started in the information security industry might be wondering why experts are telling them to implement an ISMS. We’re here to explain.  An ISMS (information security management system) is essential for any organisation that’s serious about security. It’s a centrally managed framework that enables you to manage, monitor, review and improve your … [Read more...]

How an ISO 27001-compliant ISMS helps you comply with the GDPR

Organisations have struggled with the GDPR (General Data Protection Regulation) since it took effect just under a year ago.  But compliance help is easier than you might expect. ISO 27001, the international standard for implementing and maintaining an ISMS (information security management system), has a lot in common with the GDPR – and unlike the … [Read more...]

6 must-have information security policies

Information security policies are an often-overlooked part of an organisation’s defence measures. An effective policy informs the way employees handle cyber security threats, ensures that they use defence technologies properly and indicates board-level support for cyber security.  In this blog, we outline six essential information … [Read more...]

What is an information security policy?

An information security policy is a set of instructions that an organisation gives its staff to help them prevent data breaches. Employees are involved in many of the most common causes of security incidents, whether directly (such as accidental breaches) or indirectly (such as phishing scams), so thorough guidelines are essential. How do you create information security policies? Your … [Read more...]

Further your career with certified ISO 27001 training

At IT Governance Europe, we believe that an ISO 27001 qualification is something that every cyber security professional should have. As such, we’ve made our ISO 27001 courses available in classrooms, online and in-house. These courses have been designed to teach attendees the skills required to plan, implement, maintain and audit a best-practice information security management system (ISMS) in … [Read more...]