Regulatory compliance and standard requirements

Time to deploy strong authentication, says Fido

The time has come for organisations to deploy cryptographically backed strong authentication, according to the Fido Alliance, which seeks to eliminate the world’s dependence on password-based security Continue Reading

By

• Warwick Ashford, Senior analyst

€50m GDPR fine for Google is a wake-up call for tech giants

The French data protection authority has fined Google €50m for contravening EU data protection laws, which has been hailed as a warning for tech giants and other data handling firms Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: How to get ready for the California Consumer Privacy Act

If you have any customers in California, you need to know about that state’s equivalent to GDPR. Mathieu Gorge of Vigitrust talks through what you need to achieve compliance Continue Reading

By

• Antony Adshead, Storage Editor

Home Office vetoes privacy campaigner from senior post in surveillance watchdog

The Home Office refuses academic and privacy campaigner, Eric King, security clearance for a senior role at the intelligence services watchdog, despite high-level backing from officials Continue Reading

By

• Bill Goodwin, Computer Weekly

Five issues for SMEs to consider when adopting encryption

Encryption is still considered difficult to deploy and use as a data protection method, especially by small businesses, but considering five key factors can make adoption easier, says Becrypt Continue Reading

By

• Warwick Ashford, Senior analyst

Prepare for no-deal Brexit, says ICO

The UK data protection authority is urging businesses to prepare for a no-deal Brexit to ensure there is no interruption in data flows from Europe Continue Reading

By

• Warwick Ashford, Senior analyst

New Zealand faces more state-sponsored attacks

Nearly four in 10 cyber security incidents recorded by the National Cyber Security Centre were the work of state-sponsored threat actors Continue Reading

By

• Aaron Tan, TechTarget

The rise of DevSecOps

The increasing complexity of security threats facing enterprises is leading to DevSecOps approaches, which combine operations and development with security, so that all business units are involved in security operations Continue Reading

By

• Finbarr Toesland

Less than half of firms able to detect IoT breaches, study shows

UK firms have one of the lowest internet-of-things device breach detection capabilities in Europe, a study reveals Continue Reading

By

• Warwick Ashford, Senior analyst

SingHealth and IT supplier fined S$1m for data breach

Singapore’s data protection commission considered the fact that both SingHealth and its IT supplier fell prey to sophisticated threat actors, among other factors, when meting out the fine Continue Reading

By

• Aaron Tan, TechTarget

Right to be forgotten is not global, says EU court adviser

The right to be forgotten should apply only in the European Union, according to the chief adviser to the European Court of Justice Continue Reading

By

• Warwick Ashford, Senior analyst

Podcast: Storage and compliance priorities in 2019

Mathieu Gorge, CEO of Vigitrust, looks ahead to key areas in compliance in 2019, including mushrooming data volumes, GDPR fines and the California Consumer Privacy Act Continue Reading

By

• Antony Adshead, Storage Editor

Technology innovation in music

In this week’s Computer Weekly, we visit the first hackathon at Abbey Road Studios, once home to The Beatles, to find out how tech startups hope to revolutionise music creation. Our latest buyer’s guide examines the technologies and benefits of perimeterless network security. And we look ahead to the key CIO skills and jobs trends for 2019. Read the issue now. Continue Reading

Security Think Tank: Meeting the security challenge of multiple IT environments

How can organisations combine software defined networking, containerisation and encryption to prevent rogue code from running freely across a corporate network? Continue Reading

By

• Maxine Holt, Omdia

Data breaches affected more than a billion people in 2018

The personal information of more than a billion people was compromised in 2018 as companies holding the data failed to keep it safe Continue Reading

By

• Warwick Ashford, Senior analyst

IT regulators and practitioners need common language

There needs to be greater understanding between lawmakers and technologists to ensure regulations do not have unintended consequences, says a US computer security researcher and bug bounty pioneer Continue Reading

By

• Warwick Ashford, Senior analyst

Fortinet to lead cyber security discussion at WEF annual summit

The head of cyber security firm Fortinet has been named as a discussion leader at the upcoming World Economic Forum annual meeting in Davos, Switzerland Continue Reading

By

• Warwick Ashford, Senior analyst

Can we live without passwords?

Can you imagine a future in which we can be secure online without having to remember an unwieldly list of passwords? Solutions are emerging that could make passwords redundant, but there will be other security problems to resolve Continue Reading

By

• Bruno Halopeau & Adrien Ogee

Marriott data breach losses could be over half a billion dollars

Direct losses related to a huge data breach at US hotel group could reach $600m Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Lauri Love battles police for return of computers as NCA confirms live investigation

The National Crime Agency (NCA) confirms there is a live investigation into Lauri Love in the UK, as Love brings legal action against UK police for the return of seized computer equipment Continue Reading

By

• Bill Goodwin & Julia Gregory

ICO and government help UK businesses prepare for no-deal Brexit

The Information Commissioner’s Office (ICO) and the government are providing guidance for UK businesses, particularly SMEs, on how to prepare for a possible no-deal Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

UK trade sector risks GDPR fines over poor data disposal

UK businesses in the trade sector are risking GDPR fines for failing to wipe data from old IT equipment, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Large disparity in NHS cyber skills and training spend

Despite government pledges to up cyber security spending across the NHS, there are still huge disparities in cyber security skills and spending on cyber security training, FoI requests reveal Continue Reading

By

• Warwick Ashford, Senior analyst

Brexit implications for data protection

Leaving the European Union will have serious implications for data protection in the UK unless adequate steps are taken, so businesses are advised to have contingency plans in place Continue Reading

By

• Peter Ray Allison

UK consumers threaten data breach backlash

Most UK and global consumers are willing to walk away from businesses that fail to look after personal data, with retailers most at risk, research shows Continue Reading

By

• Warwick Ashford, Senior analyst

Liberty heads for judicial review over Investigatory Powers Act

The UK's powers to conduct supsicionless bulk surveillance on individuals and organisations face a legal challenge in the high court next year Continue Reading

By

• Bill Goodwin, Computer Weekly

UK government commits to opening up data in bid to push adoption of AI

Opening up data is vital to government plans to push adoption of artificial intelligence across all sectors of the UK economy Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Marriott data breach highlights basic failings

A breach of a guest reservation database of the Starwood division of the Marriott International hotel group highlights basic personal data protection failures Continue Reading

By

• Warwick Ashford, Senior analyst

UK cyber security strategy making ‘good progress’

The National Cyber Security Strategy is making good progress, but there is much left to be done, according to a Cabinet Office official Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber resilience lacking due to apathy of UK leaders

An unwillingness to accept that cyber is a real threat to critical national infrastructure by UK political and business leaders has resulted in a lack of resilience, says security industry veteran Continue Reading

By

• Warwick Ashford, Senior analyst

CIO interview: Stephen Docherty on NHS data sharing

The Cambridge Analytica scandal raised awareness about privacy. Stephen Docherty, CIO of South London and Maudsley NHS Trust, explains why Continue Reading

By

• Cliff Saran, Managing Editor

Businesses failing to win consumer trust

Businesses are still largely failing to win the trust of consumers to keep their personal data safe as data breaches continue to make headlines Continue Reading

By

• Warwick Ashford, Senior analyst

ICO fines Uber £385,000 for data protection failings

Like Facebook, Uber has escaped a potentially much higher fine for data protection failings because the 2016 breach that affected millions of UK customers is not covered by the GDPR Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR is encouraging UK IT directors to pay cyber ransoms

As predicted ahead of the General Data Protection Regulation enforcement deadline, research shows that fear of fines under the new laws is making some firms more likely to pay cyber ransoms Continue Reading

By

• Warwick Ashford, Senior analyst

Unprecedented actions by Commons committee augur badly for Facebook

House of Commons’ serjeant-at-arms effectively arrested the CEO of a US software company and frogmarched him to Parliament, where he was told he would be imprisoned if he failed to hand over papers on Facebook Continue Reading

By

• Kevin Cahill

ICO finds Metropolitan Police's Gangs Matrix seriously breaches data protection laws

A year-long ICO investigation has highlighted major problems with how the Metropolitan Police handles and shares the personal data of individuals on its Gangs Matrix Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Dutch audit finds Microsoft Office leaks confidential data

The diagnostics Microsoft Office collects from users should be a source of concern for any government CISO, according to a DPIA audit Continue Reading

By

• Cliff Saran, Managing Editor

Police challenged over refusal to disclose files on WikiLeaks staff

Lawyers will challenge the Metropolitan Police Service today to confirm or deny whether it holds correspondence with US law enforcement about three WikiLeaks staff – including two UK citizens – in a freedom of information tribunal Continue Reading

By

• Bill Goodwin and Niels Ladefoged

Government lacks cyber resilience leadership, according to MPs

The government lacks political leadership and urgency in dealing with cyber threats, according to Joint Committee on National Security Strategy, calling for a minister in charge of delivering cyber resilience Continue Reading

By

• Lis Evenstad

Credit card fraud in ANZ showing no signs of abating

The value of fraudulent transactions more than doubled that of legitimate purchases during the third quarter this year Continue Reading

By

• Beverley Head

Three factors marginalising the CISO role

Chief information security officers are typically marginalised due to three factors, and de-coupling the technical and managerial aspects of the job will enable empowerment, says consultant Continue Reading

By

• Warwick Ashford, Senior analyst

Many firms still stuck in GDPR prep phase six months after its initiation

Six months after the GDPR compliance deadline, many companies are struggling to make data protection principles part of everyday business, says PwC’s GDPR and data protection lead Continue Reading

By

• Warwick Ashford, Senior analyst

Why is hiring a government chief security officer such a tricky business?

Security bosses and CIOs weigh in on why they think the government is struggling to recruit a chief security officer Continue Reading

By

• Sooraj Shah

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship. Continue Reading

DeepMind won’t share patient data with Google ‘at this stage’, says company’s health boss

Amid concerns and questions around Google’s takeover of the DeepMind’s Streams app, Dominic King, the company’s health lead, promises that ‘at this stage’, nothing will change, and it won’t share any patient data with the internet giant Continue Reading

By

• Lis Evenstad

Members of Parliament should back EU Withdrawal Agreement, says industry

Industry experts say the government’s EU Withdrawal Agreement is far from perfect and still requires more clarity, but call on MPs to back it, as it’s better than a No-Deal Brexit Continue Reading

By

• Lis Evenstad

It’s complicated: How enterprises are approaching IAM challenges

Identity and access management challenges are evolving with digital transformation. Computer Weekly explores some of the ways organisations are ensuring the right people gain the right access to the right resources Continue Reading

By

• Christian Annesley

Thailand’s Democrat Party holds election with blockchain

The Zcoin blockchain was used to store file hashes of voting data and identities of voting members of Thailand’s main opposition party Continue Reading

By

• Aaron Tan, TechTarget

EU regulation set to advance single market for non-personal data

The European Union Council and Parliament have approved a regulation, to take effect in six months’ time, to ensure the free movement of non-personal data, such as IoT data, across the bloc Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

GDPR a challenge to AI black boxes

Most artificial intelligence “black boxes” do not comply with EU data protection laws and will have to be re-engineered, warns security researcher and consultant Continue Reading

By

• Warwick Ashford, Senior analyst

Increasing value of personal data a 21st century challenge

The increasing value of personal data presents the challenge of managing a personal data economy, says identity and security expert Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security high on European Commission agenda

The European Commission is recognising the growing importance of cyber security to the digital economy and is increasing funding to support research, resilience and cooperation Continue Reading

By

• Warwick Ashford, Senior analyst

Making the UK the safest place to live and work online

Government, industry and individuals all have to play their part in enhancing cyber security practices Continue Reading

By

• Cate Pye, EY

Banking sector leading CIAM innovation, say Big Four

Maturity in consumer identity and access management (CIAM) differs from sector to sector, with the banking sector taking the lead in terms of innovation, according to the Big Four accounting firms Continue Reading

By

• Warwick Ashford, Senior analyst

DevSecOps not limited to coding, says analyst

DevSecOps is seen as a way of ensuring application security, but security leaders must understand that embedding a security culture and taking the inter-dependencies of new development frameworks into account is key, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook to appeal EU-US data transfer ruling in Irish Supreme Court

Facebook will appeal a decision by the Irish High Court to refer questions over the legality of EU-US data transfers to the European Court of Justice in January, as the Dublin court rejects attempt by a UK IT expert to join the case Continue Reading

By

• Bill Goodwin, Computer Weekly

Radisson hotel group could be GDPR test case

Privacy watchers say the breach of personal data of members of the Radisson Hotel Group’s loyalty scheme could be an interesting test case for how the GDPR will be applied Continue Reading

By

• Warwick Ashford, Senior analyst

Key elements to success in consumer identity management

Success in consumer identity management is not just about getting the technology right, it is also about keeping in mind the consumer needs, preferences and concerns, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR driving data protection maturity

The EU data protection laws are helping to drive data protection maturity internationally, but five months after enforcement many companies are still playing catch-up, says consultant Continue Reading

By

• Warwick Ashford, Senior analyst

Australia’s data breaches are a ‘sign of naiveté’

McAfee executive attributes Australia’s poor cloud security record to the lack of data protection measures amid “new and confusing” cloud configurations Continue Reading

By

• Beverley Head

As data volumes grow, backup needs analytics, says StorageCraft CEO

Backup appliance maker’s CEO says backup needs analytics so customers can prioritise restore of critical data in a world where volumes increase by 50% a year Continue Reading

By

• Antony Adshead, Storage Editor

IoT ecosystem needs to be investigated, say experts

A conference of IoT experts convened by Enisa and Europol has made key recommendations to ensure security vulnerabilities do not overshadow benefits Continue Reading

By

• Warwick Ashford, Senior analyst

Mitigating third-party cyber risks in a new regulatory environment

GDPR and the NIS Directive increase the focus on managing cyber security throughout the supply chain. Organisations need to check their suppliers are compliant Continue Reading

By

• Cavan Fabris

MEPs call for action in wake of Facebook-Cambridge Analytica scandal

European members of parliament demand action to protect citizens’ privacy from abuses such as those uncovered in the Facebook-Cambridge Analytica data sharing scandal Continue Reading

By

• Warwick Ashford, Senior analyst

ICO issues maximum £500,000 fine to Facebook

The UK privacy watchdog has confirmed that Facebook has escaped a fine of more than $1bn under the GDPR, but will face the maximum under the DPA for failing to protect users’ personal information Continue Reading

By

• Warwick Ashford, Senior analyst

Cathay Pacific under fire over breach affecting 9.4 million passengers

Hong Kong-based airline reveals massive data breach of the most sensitive personal data of passengers five months after loss was confirmed Continue Reading

By

• Warwick Ashford, Senior analyst

Becrypt security platform helps ease cloud adoption

Becrypt’s secure operating system is driving a new service aimed at helping organisations reduce cost and increase agility in using cloud-based services and online applications Continue Reading

By

• Warwick Ashford, Senior analyst

Morrisons loses appeal against data breach liability ruling

Supermarket chain has lost its appeal against a High Court ruling that found it liable for a data leak by a former employee, underlining the importance of managing insider threats Continue Reading

By

• Warwick Ashford, Senior analyst

Learn lessons from attacks, says McAfee investigations chief

Organisations should use every cyber attack as an opportunity to learn, identify weaknesses and improve security posture, according to McAfee’s head of cyber investigations Continue Reading

By

• Warwick Ashford, Senior analyst

NHS standards framework aims to set the bar for quality and efficiency

NHS Digital’s standards framework sets out renewed commitment to implement and use open standards across the NHS Continue Reading

By

• Lis Evenstad

Time to implement new cyber security protections, says McAfee CEO Chris Young

Convergence of threats and technologies and an increasingly complex regulatory environment are driving the need to implement new cyber security protections, says McAfee chief Continue Reading

By

• Warwick Ashford, Senior analyst

UK faces 10 cyber attacks a week as hostile states step up hacking, says NCSC

The UK’s National Cyber Security Centre has thwarted more than 1,600 attacks over the past two years – many by hostile nation states Continue Reading

By

• Bill Goodwin, Computer Weekly

Tech companies should not be under legal duty to remove terrorist material, says watchdog

The internet should not be a safe place for terrorists, but making it compulsory for technology companies to trawl for radical content risks interfering with the rights of innocent people, says Max Hill QC, the independent reviewer of terrorism legislation Continue Reading

By

• Bill Goodwin & Fiona O'Cleirigh

Good data governance is good business

Organisations are failing to understand the importance of getting their data relationship with customers right and seeing the business opportunities that it enables, an industry analyst warns Continue Reading

By

• Warwick Ashford, Senior analyst

Apple challenges Australia’s proposed decryption law

Tech giant Apple argued that the lack of judicial oversight could reduce customer trust and security, among other reservations over Australia’s draft decryption legislation Continue Reading

By

• Aaron Tan, TechTarget

MEPs urge Facebook to roll out election fraud prevention measures

Facebook is coming under pressure from European lawmakers to do more to prevent its user data from being misappropriated during elections Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Detail of Dutch reaction to Russian cyber attack made public deliberately

Four Russian intelligence officials were expelled from the Netherlands after an attempted hack on the global chemical weapons watchdog. The Dutch government has been open about the detail Continue Reading

By

• Tijs Hofmans

Security Think Tank: Monitoring key to outcomes-based security

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based, and how can an organisation test if its security defences are delivering the desired outcome? Continue Reading

By

• Ramsés Gallego, Isaca

High Court blocks Google iPhone privacy lawsuit

The UK High Court has thrown out a group action lawsuit against Google for tracking iPhone browsing data, but campaign group Google You Owe Us, which brought the litigation, will appeal the decision Continue Reading

By

• Lis Evenstad

ICO hits Heathrow Airport with £120,000 data breach fine over lost USB stick

Information Commissioner’s Office fines airport after a member of the public came across a USB stick containing sensitive personal information about airport staff Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Customers need to be at the centre of GDPR plans

Responding to a breach is not just about data, it is about taking care of, and protecting, customers Continue Reading

By

• Dominic Cockram, Deloitte

GDPR case work swamps Denmark’s data protection agency

The agency investigating alleged breaches of GDPR in Denmark is recruiting additional resources to cope with the increase in work Continue Reading

By

• Gerard O'Dwyer

Security Think Tank: Use Cyber Essentials to kick-start outcomes-based security

What is the first step towards moving from a tick-box approach to security to one that is outcomes-based and how can an organisation test whether its security defences are delivering the desired outcome? Continue Reading

By

• Petra Wenham

Facebook could face up to $1.6bn fine for data breach

Facebook is under increased pressure to demonstrate that users’ personal data is protected as it faces a potential fine of more than a billion dollars for a data breach affecting millions of users Continue Reading

By

• Warwick Ashford, Senior analyst

EU sees eIDAS regulation come into full force

A regulation aimed at cutting red tape to enable a digital single market in Europe will soon be in full force, but it could present some challenges to the UK after Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

Prepare now for quantum computers, QKD and post-quantum encryption

The predicted processing power of quantum computers is likely to make existing encryption algorithms obsolete. Quantum key distribution (QKD) is a possible solution - we investigate whether QKD is viable Continue Reading

By

• Peter Ray Allison

ICO threatens fines for outstanding fees

The UK’s privacy watchdog has issued warning letters to organisations, including some NHS trusts and government organisations, for failing to pay a new data protection fee Continue Reading

By

• Warwick Ashford, Senior analyst

Financial services firms face potential security bombshell

UK financial services are facing a security crisis over outdated services and applications, a survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

PCI DSS compliance falls despite security benefit

Despite the benefits of the payment card industry security standard, there is a concerning downward trend in compliance, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Europol cyber crime report highlights emerging threats to enterprise security

Research highlights increase in sophistication of ransomware attacks, while revealing details of new and emerging threats to enterprises Continue Reading

By

• Tasmin Lockwood

Printing, document capture and compliance risk in the GDPR era

Printers, scanners and mobile devices that capture data from documents all store data in some way or other. How can you be sure to be compliant with GDPR with regard to that data? Continue Reading

By

• Antony Adshead, Storage Editor

No Deal Brexit may hinder free flow of personal data from EU to UK

The government’s No Deal Brexit planning document on data protection warns free flow of personal data from EU isn’t guaranteed, and organisations must take action to ensure they will still be able receive data from Europe Continue Reading

By

• Lis Evenstad

GCHQ mass surveillance regime was in breach of human rights law, European court rules

The European Court of Human Rights in Strasbourg has ruled that the UK’s collection of bulk interception of communications data lacked adequate oversight and safeguards and was in breach of human rights law Continue Reading

By

• Bill Goodwin, Computer Weekly

FCA warns it cannot manage financial crime risks without sharing data with EU

FCA admits it will be unable to manage financial crime effectively if it cannot share data with EU authorities. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

British Airways data breach: Security researchers name suspects and query attack timeline

Security researchers claim to have pinpointed the cause and perpetrators of the British Airways data breach, and also claim the attackers may have had access to its customer data for far longer than previously thought Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Cyber criminals outspend businesses in cyber security battle

Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

BA praised for swift GDPR-aligned action on data breach

British Airways has been praised for its swift response to a customer data breach, which could be the first test case under the EU’s GDPR and new UK GDPR-aligned data protection laws Continue Reading

By

• Warwick Ashford, Senior analyst

Majority of UK firms not insured for data breaches

Many UK firms are not insured against information security breaches and data loss, and would have to spend £1m on average to recover from a breach, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Blockchain gains foothold in Australia

A number of blockchain projects are under way in Australia, but questions remain about whether the technology is wanted Continue Reading

By

• Beverley Head

Improving security is top driver for ISO 27001

Organisations are implementing the ISO 27001 standard in recognition of the fact that cyber attacks are increasingly inevitable and that it is best to be well-prepared to fend off attacks and mitigate their effect Continue Reading

By

• Warwick Ashford, Senior analyst