Privacy and data protection

BSI launches kitemark for internet of things devices

The British Standards Institution has launched a new kitemark for IoT devices, designed to improve consumer trust in the technology Continue Reading

By

• Alex Scroxton, Security Editor

No need to panic about Efail attacks

Initial reports about vulnerabilities in email encryption technologies have urged organisations to disable encryption tools, but some security experts are taking a more balanced approach Continue Reading

By

• Warwick Ashford, Senior analyst

It’s not too late to get GDPR ready

With the GDPR compliance deadline on 25 May 2018, there is little time to get ready, but it is not too late, according to the IAPP, which provides a checklist to help organisations ensure they are in the best position possible for the deadline Continue Reading

By

• Paul Jordan, International Association of Privacy Professionals (IAPP)

Technology continues to transform crime, warns NCA

The UK’s National Crime Agency warns that developments in technology will continue to transform the future crime landscape, in its latest report on serious and organised crime Continue Reading

By

• Warwick Ashford, Senior analyst

Police Scotland did not inform public of mobile phone searches

Members of the Scottish Parliament heard that Police Scotland did not conduct impact assessments or give explanations to the public when they were accessing private data on their mobile phones Continue Reading

By

• Bill Goodwin, Computer Weekly

EFF welcomes backdoor-blocking US bill

International digital rights organisation welcomes proposed US legislation that will prevent the government from forcing a company to build backdoors into encrypted products and services Continue Reading

By

• Warwick Ashford, Senior analyst

Hacking the internet of things just got easier – it’s time to look at your security

Are you taking security for internet-connected devices seriously enough? Continue Reading

By

• Dan Mosca, PA Consulting

CW Benelux: Rotterdam charts course to become world’s smartest port

The Port of Rotterdam in the Netherlands is using internet of things and artificial intelligence technology from IBM in a bid to become the world’s smartest port. Also read how companies in the Netherlands are only partly ready for the country’s version of the EU’s General Data Protection Regulation (GDPR), and why the European Central Bank thinks cash will remain in use in the Eurozone for a very long time. Continue Reading

Embrace GDPR to remain competitive, says OWI

The EU’s General Data Protection Regulation is set to raise the bar internationally for data protection and should be embraced to remain competitive, says report Continue Reading

By

• Warwick Ashford, Senior analyst

Equifax breach lessons not learned

Businesses are still downloading vulnerable versions of the software that was at the heart of the Equifax data breach and failing to update to safe versions, a security firm has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Breach disclosure time still high, report shows

Companies are getting faster at disclosing breaches, but the average is still too high in the light of the GDPR and other breach disclosure regulations, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Five tips for killing the campers on your network

Why is reducing cyber attacker dwell time important and how should this be tackled? Continue Reading

By

• Adrian Davis, (ISC)²

Financial sector cyber-related laws are a bellwether, says Deloitte

As the regulatory landscape becomes more complex, organisations should look to the financial sector to see what else is coming, as well as focus on three key areas of GDPR compliance, according to Deloitte Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 7- support for disconnecting from the connected world

Young people will start disconnecting from connected world as risks outweigh benefits Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Virtual tripwire to keep elephant poachers out of Zambian national park

Cisco and Dimension Data are working to protect Zambia’s at-risk elephant population after a successful pilot project in South Africa Continue Reading

By

• Alex Scroxton, Security Editor

Majority of security professionals favour shorter disclosure deadline

Google’s Project Zero unit’s 90-day deadline for software suppliers to disclose vulnerabilities has always been controversial, but a survey reveals that most security professionals feel even that is too long Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: More time equals more opportunity for cyber attackers

Why is reducing cyber attacker dwell time important and how should this be tackled? Continue Reading

By

• Rory Alsop

Security pros must avoid hype, demonstrate value, says RBS CISO

Security professionals must avoid over-hyping cyber threats, and penetration testers need to reinvent themselves to demonstrate value to businesses to remain relevant, says RBS CISO Continue Reading

By

• Warwick Ashford, Senior analyst

Twitter password security bug underlines need for industry change

Twitter has revealed that a bug in its systems resulted in some passwords being stored in a log in clear text, underlining the need for alternative authentication methods, say industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Fibre network breakthrough has implications for data security

Researchers have devised a new protocol that they claim vastly extends the range of quantum key distribution over fibre networks Continue Reading

By

• Alex Scroxton, Security Editor

City Police use Lego simulation to teach businesses cyber security

City of London Police are offering to train business leaders and IT security in cyber security using a Lego simulation that is surprisingly close to real life Continue Reading

By

• Bill Goodwin, Computer Weekly

Redscan warns of GDPR phishing scams

Cyber criminals are using fake GDPR-related privacy notices to trick recipients into disclosing personal data and spread malware, a security firm warns Continue Reading

By

• Warwick Ashford, Senior analyst

Cambridge Analytica closure will not halt probe, says ICO

The London-based data mining firm at the heart of the Facebook data exploitation scandal has announced it is closing, but the ICO says the probe into its actions will still go ahead Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Containment should be top priority in cyber breaches

Why is reducing cyber attacker dwell time important, and how should this be tackled? Continue Reading

By

• Paddy Francis

Fresh blow for Facebook as court refuses stay in Max Schrems legal action

Facebook has lost a legal attempt to delay the Irish High Court from seeking answers from the European Court of Justice over the legality of EU-US data transfers Continue Reading

By

• Bill Goodwin, Computer Weekly

ARM aims to boost physical security of IoT

Chipmaker ARM announces microprocessor aimed at improving the physical security capabilities of devices making up the internet of things Continue Reading

By

• Warwick Ashford, Senior analyst

Workday to continue investing heavily in APAC

Cloud applications supplier has increased its investments in the region by more than 50% in the past year, and is looking to maintain its double-digit growth in international markets Continue Reading

By

• Aaron Tan, TechTarget

Security industry welcomes City of London Police cyber initiative

The security industry has welcomed plans to fight cyber crime in the heart of London using a community-based approach, but says more investment in cyber security skills is required Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Reducing cyber attacker dwell time is critical

Why is reducing cyber attacker dwell time important, and how should it be tackled? Continue Reading

By

• Simon Persin, Turnkey Consulting

Password practices still poor despite increased threats

Despite growing cyber threats and heightened global awareness of hacking and data breaches, password behaviours remain poor and UK users are in denial, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Reducing dwell has never been more important

Why is reducing cyber attacker dwell time important, and how should this be tackled? Continue Reading

By

• Petra Wenham

Getting cyber security innovation to market is key, says NCSC

Getting cyber security innovation to market is an important area of focus, according to the National Cyber Security Centre, which runs a cyber accelerator programme and recently stated a Dragons Den style security innovation pitch at the 2018 CyberUK conference Continue Reading

By

• Warwick Ashford, Senior analyst

Security industry welcomes NHS move to Windows 10

Representatives of the security industry have welcomed the announcement that the NHS will be migrating to Windows 10 as part of a multi-million pound deal with Microsoft, but warn that the move will not be without its challenges Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: GDPR compliance one good reason to cut attacker dwell time

Why is reducing cyber attacker dwell time important, and how should this be tackled? Continue Reading

By

• Maxine Holt, Omdia

Only 5% of charities are ready for GDPR, survey shows

A survey shows relatively few charities are prepared for new data protection regulations, highlighting several areas for improvement Continue Reading

By

• Warwick Ashford, Senior analyst

Most organisations unprepared for GDPR, survey finds

Despite the vast majority of businesses agreeing that GDPR affects them, only 5% say they are fully prepared for it, according to a BSI survey Continue Reading

By

• Zach Emmanuel, Computer Weekly

DWP to spend nearly £15m on GDPR

A single government department plans to spend nearly £15m on preparing for new European data protection legislation, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Government given six months to rewrite snoopers’ charter

The government has until 1 November 2018 to rewrite a key section of the Investigatory Powers Act 2016, after the high court declared them unlawful in a judicial review brought by human rights group Liberty Continue Reading

By

• Bill Goodwin, Computer Weekly

GDPR and the right to erasure: hiding in the shadows or welcome shade?

The European Union's new data protection laws introduce a right to be forgotten – but what does it means for corporate IT? Continue Reading

By

• Mark O’Halloran, Coffin Mew

British banks target Israeli security technology

British banks are turning to Israel’s high-tech sector to protect against cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

Facebook posts strong first quarter despite privacy scandal

The data exploitation scandal that hit Facebook has not yet had an adverse impact on advertising revenues or user activity, according to first quarter financial results Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Reduce attacker dwell time with defence in depth

Why is reducing cyber attacker dwell time important and how should this be tackled? Continue Reading

By

• Mike Gillespie

EC calls on online platforms to develop common code of practice to tackle ‘disinformation’

The European Commission says online platforms such as social media and video sites, have not done enough to tackle unethical use, and calls on them “to decisively step up their efforts to tackle online disinformation” Continue Reading

By

• Lis Evenstad

NCSC shows support for common standards for secure communication

The UK cyber security authority is supporting an industry drive towards common standards for secure communication by joining an industry organisation that aims to achieve this goal Continue Reading

By

• Warwick Ashford, Senior analyst

Digital economy research projects to get funding

Research projects aimed at building trust, privacy and security in the use of personal data and digital technologies are to receive funding Continue Reading

By

• Warwick Ashford, Senior analyst

EC sets out plans for sharing health data across borders

The European Commission wants to introduce EU-wide standards for health records, and allow EU citizens to access and share their patient information securely across member states Continue Reading

By

• Lis Evenstad

Government urges UK businesses to beef up cyber crime defences

Government is urging UK organisations to defend against cyber crime, as newly released figures show that large numbers of businesses and charities suffered at least one cyber attack in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms will not be GDPR-ready by compliance deadline

Survey of IT decision-makers shows one-fifth of companies lack continuous encryption capabilities and only half have the systems required for the right to erasure and the right to rectification Continue Reading

By

• Warwick Ashford, Senior analyst

Employees still in the dark about data protection

With just a month to go before the GDPR compliance deadline, many employees still don’t know how to protect confidential data, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

One month to GDPR compliance deadline

With one month to go before the deadline for compliance with EU’s General Data Protection Regulation, organisations should ensure they are able to meet minimum requirements to defend against adverse scrutiny Continue Reading

By

• Warwick Ashford, Senior analyst

London plans to be a smarter city

In this week’s Computer Weekly, we meet the first ever chief digital officer for London, Theo Blackwell, and find out about his plans for making the capital a smarter city. SAP has overhauled its controversial indirect licensing policy – we look at the implications for users. What are the jobs of the future in retail as the sector is transformed by technology? We ask the experts. Read the issue now. Continue Reading

Global cyber crime worth $1.5tn a year, study reveals

Cyber criminal operations worldwide are generating revenues that equal the GDP of Russia though a web of profit that involves legitimate businesses, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Data protection is critical for all businesses

Companies that misuse data or fall victim to breaches not only risk financial loss, but also reputational damage. There are many reasons good data practice is essential Continue Reading

By

• Nicholas Fearn

Account takeover up tenfold in past year

The incidence of online account takeover and the proportion of high-risk account access attempts underlines the need for improved authentication, says fraud detection firm Continue Reading

By

• Warwick Ashford, Senior analyst

Business needs to keep up with Investigatory Powers Act

All indications are that the obligations on communication service providers under the controversial Investigatory Powers Act will change, and affected companies must ensure they are constantly up to date Continue Reading

By

• Peter Ray Allison

Data protection is a business issue, says IAPP

Data privacy is a rapidly maturing profession as organisations around the world increasingly see data protection as a business issue, according to an industry association Continue Reading

By

• Warwick Ashford, Senior analyst

UK surveillance laws a potential ‘sticking point’ post-Brexit

The UK’s controversial Investigatory Powers Act could be an impediment to achieving an adequacy agreement for free data exchanges with the EU post-Brexit, says privacy lawyer Continue Reading

By

• Warwick Ashford, Senior analyst

UK Commonwealth cyber security funding welcomed

The security community has welcomed the UK government announcement of funding to help Commonwealth countries strengthen their cyber security capabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Mastercard calls for global online payments standard

Mastercard and its EMV partners are pushing for online payments standards similar to those for point-of-sale payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Good time to be in data protection, says information commissioner

There has never been a better time to be in data protection, Elizabeth Denham has told an IAPP data protection conference in London, addressing some key questions about the changing data protection regulatory landscape Continue Reading

By

• Warwick Ashford, Senior analyst

Security budgets up, but talent scarce, says Isaca

Security budgets are increasing, but qualified cyber talent remains difficult to find with positions taking at least three months to fill, an industry association report on the state of cyber security reveals Continue Reading

By

• Warwick Ashford, Senior analyst

APAC is becoming a hotspot for DDoS attacks

The region’s largest and most-connected economies are most vulnerable to distributed denial-of-service attacks, according to CenturyLink Continue Reading

By

• Aaron Tan, TechTarget

UK identity fraud reaches record level

The level of identity fraud has reached its highest level to date, a UK fraud report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Top tech firms take cyber security pledge

Top tech firms have committed to protecting customers worldwide from cyber attacks and prevent the misuse of their technology Continue Reading

By

• Warwick Ashford, Senior analyst

China’s ZTE a national security risk, UK telcos warned

UK national cyber security authority has warned telecommunications companies against using equipment and services from Chinese network equipment supplier ZTE, citing national security risks Continue Reading

By

• Warwick Ashford, Senior analyst

Judge in Max Schrems v Facebook action raises red flag on EU-US data transfers

The Irish High Court (Commercial Division) has once again cast a long shadow, with a very short deadline, over the arrangements for the safe and legal transfer of data between the EU and the US Continue Reading

By

• Kevin Cahill

Why AI skills, broadband and machine liability must be addressed

The House of Lords select committee on artificial intelligence has urged the government to adapt policies to bolster AI and protect the public Continue Reading

By

• Cliff Saran, Managing Editor

UK and US accuse Russia of targeting network infrastructure

The UK and US have accused the Russian government of targeting network infrastructure, calling on network operators to take the necessary protective measures Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 5 – better understanding of privacy settings

Consumers are set to become much more aware of the privacy settings on the websites they use Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK businesses urged to ensure they do cyber security basics

The cyber threat to business has never been greater, so the National Cyber Security Centre is urging UK companies to ensure they have implemented all the basic, best-practice cyber security controls and processes Continue Reading

By

• Warwick Ashford, Senior analyst

EU-US data sharing under threat as Irish court refers Facebook case to Europe

The Irish High Court is seeking answers from the European Court of Justice in a case that could have huge implications for EU-US data sharing and raises questions about US government surveillance of EU citizens. The move could bring a five-year legal battle between Austrian lawyer Max Schrems and Facebook to a close Continue Reading

By

• Bill Goodwin, Computer Weekly

Cyber attackers can breach targets in hours, report reveals

The majority of hackers claim they can breach an organisation within hours, while most security professionals admit they do not know what to look for Continue Reading

By

• Warwick Ashford, Senior analyst

UK playing central role in Facebook data misuse probe

Data protection is a hot issue and all about increasing confidence in the way data is handled, says UK privacy watchdog Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security a shared responsibility, says Amber Rudd

The UK home secretary has emphasised that cyber security is a shared responsibility and committed to promote EU cyber cooperation post-Brexit at the National Cyber Security Centre’s conference in Manchester Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ growing cyber capability to match threat

GCHQ continues to grow and develop its cyber capability to match the rapidly expanding and evolving threat landscape, says agency director Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber attack reporting set to be more streamlined

Government funding has been allocated to help streamline cyber attack reporting, according to the National Cyber Security Centre Continue Reading

By

• Warwick Ashford, Senior analyst

New cyber incident classification to boost UK response

A new cyber attack categorisation system has been unveiled to improve UK response to incidents Continue Reading

By

• Warwick Ashford, Senior analyst

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Diversity key to more effective cyber security, says NCSC

Diversity in defence teams is key to improved cyber security, according to the UK’s National Cyber Security Centre (NCSC) Continue Reading

By

• Warwick Ashford, Senior analyst

GCHQ to set up shop in Manchester

UK intelligence, security and cyber agency GCHQ is expanding its network of UK sites to north west England Continue Reading

By

• Warwick Ashford, Senior analyst

NSA calls for cyber security community collaboration

A US National Security Agency (NSA) representative has called for cyber security community collaboration at the National Cyber Security Centre’s conference in Manchester Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile phishing a growing threat, warns report

Phishing on mobile devices is a growing threat to business as attacks move beyond email to text messages and apps Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Cyber criminals earn up to $2m a year, study shows

Academic study reveals just how lucrative cyber crime can be, with top-level cyber criminals out-earning government leaders and university graduates Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware top cyber threat, DBIR shows

Ransomware remains the top cyber security threat to organisations, humans continue to be significant weakness and HR departments are a top target, according to the latest Verizon Data breach investigations report Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threat to UK business greater than ever, report reveals

The cyber threat to UK business is “bigger than ever” and the best way to defend against it is collaboration between government, law enforcement and business, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security of big data fashions a whole new look with GDPR

As data managers scramble to protect their precious lakes of washed and unwashed data from the evils of hacking, malware, ransomware and botnets, there comes a privacy regulation of European Union origin that could change the way many U.S. companies protect their data from inside and outside forces. For some U.S. companies doing business in Europe and preparing for compliance, the EU's General Data Protection Regulation could be a well-intended enforcer of better data governance practices. But for businesses forced to change their old data protection habits, GDPR can be a four-letter word.

The April issue of Business Information opens with our editor's note and historical insights into the fundamental differences in attitude between the U.S. and Europe when it comes to protecting the data privacy of customers. As data breaches mount, however, the U.S. government -- willing or not -- may have to take steps beyond current regulations to ensure companies increase their security of big data.

Along those lines, our cover story examines some GDPR rules that can directly impact U.S. companies doing business overseas and, in the process, their data governance and ethics procedures. With the noted lack of maturity in data governance and security tools, we see in another feature how IT teams are addressing data security issues upfront in do-it-yourself ways when deploying big data systems.

Also in this issue, a GDPR compliance expert advises data managers on the best ways to prepare for a regulation that puts more control of information in the hands of users, the internet of things and edge computing could be compromising the security of big data and surveys show that companies place data protection among the top reasons for escalating their security spending.

 Continue Reading

GDPR requirements put focus on data ethics, governance

The General Data Protection Regulation makes privacy paramount and reinforces the practice of good data governance. Will a new focus on data ethics be an important side effect? Continue Reading

By

• Jack Vaughan

U.S. data protection laws fall short in the age of big data

Data breaches and a history of data abuse led the EU to adopt GDPR, but it might take massive scale data security crises for the U.S. to legislate similar data protection laws. Continue Reading

By

• Bridget Botelho, Editorial Director, News

Who do you trust to censor social media?

Calls to censor Facebook and its rivals are growing – but society needs to consider carefully the motivations of those making such demands Continue Reading

By

• Tim Worstall, Adam Smith Institute

More than one in 10 employees fall for social engineering attacks

Employees download malicious files, click phishing links, correspond with hackers, and even share contact information for their colleagues, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook data scandal a game changer, says ICO

Facebook’s controversial data sharing with London-based data mining firm Cambridge Analytica is a game changer, according to the UK’s privacy watchdog Continue Reading

By

• Warwick Ashford, Senior analyst

Business increases use of encryption in the cloud

The use of encryption has seen double-digit growth in the past year due to a number of security-related drivers, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Why businesses must think like criminals to protect their data

Cyber criminals use three main methods of operation to steal commercial data. Understanding their mindset can help organisations put the right defences in place Continue Reading

By

• Andy Barratt, Coalfire

HSBC IT whistleblower faces extradition to Switzerland

Hervé Falciani, who stole data from thousands of private banking customers, is apprehended in Spain following the issuing of an international arrest warrant Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Facebook among 30 organisations under investigation by the ICO

Facebook is among 30 organisations under investigation by the UK’s privacy watchdog for misusing personal data for political and other purposes Continue Reading

By

• Warwick Ashford, Senior analyst

Retail sector top cyber attack target

The retail sector was the top cyber attack target in 2017, as cyber attacks evolved to become more organised and structured, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Business should note Facebook data sharing, say security advisers

Businesses that use Facebook and have employees that use it should take note that data is shared with potential cyber attackers, security advisers warn, as Facebook reveals the Cambridge Analytica data exploitation scandal may affect 87 million users Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Deal with cryptojacking to avoid security vulnerability

How can organisations best defend against cryptojacking? Continue Reading

By

• Paddy Francis

More than 1.5 billion business and consumer files exposed online

With just over a month to go before the GDPR compliance deadline, more than 1.5 billion data files are exposed online without adequate protections, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst