Regulatory compliance and standard requirements

London councils set aside more than £1.2m for GDPR

London councils have spent over £1.2m in preparation for new EU data protection laws, a think tank report has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Surveillance watchdog investigates security risks of GCHQ IT contractors

The investigatory powers commissioner is reviewing the security arrangements for IT contractors that have access to live computer systems at GCHQ holding highly sensitive records on the UK population Continue Reading

By

• Bill Goodwin, Computer Weekly

Most UK small firms still not prepared for GDPR, FSB survey shows

Most small businesses are not prepared for new data regulations, according to research by the Federation of Small Businesses Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR is having positive impact on privacy profession, says IAPP

The EU’s new data protection rules are driving greater interest in the privacy profession, and provide an opportunity to develop new business plans, says privacy association Continue Reading

By

• Warwick Ashford, Senior analyst

Public education important in new data protection era, says ICO

UK information commissioner Elizabeth Denham tells Data Protection 2018 event of the tough requirements ahead in a new age of data regulation Continue Reading

By

• Warwick Ashford, Senior analyst

UK plans laws to protect company directors from ID theft

Legislation will make it easier for directors to remove their personal addresses from the company register Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Nordics CIOs’ priorities in 2018

A select group of CIOs and analysts in Denmark, Finland, Norway and Sweden give their views on the top IT priorities in 2018. As in 2017, digital transformation will continue to be a buzzword. Also read how Sweden is tightening up its cyber security defences as part of a wider national security strategy, and how Nordic banks cannot afford to slow their digital transformations as PSD2 comes into force. Continue Reading

Strategic cyber criminals likely to capitalise on GDPR

As cyber criminals concentrate on targeted, strategic, money-making attacks, they are likely to use GDPR fines as leverage to extort money from organisations, a report warns Continue Reading

By

• Warwick Ashford, Senior analyst

UK local councils under huge cyber attack pressure

Investigation underlines importance of security automation and employee awareness training Continue Reading

By

• Warwick Ashford, Senior analyst

Getting a handle on mobile security in your enterprise

Everyone now has a mobile device at work, so how can enterprises ensure they are secure? Continue Reading

By

• Rene Millman

Lauri Love can stay in UK: prosecutors will not appeal extradition ruling

Crown Prosecution Service gives undertaking to Lauri Love that it will not appeal against a court decision not to extradite him to the US – but prosecutors are seeking leave to appeal over part of the court ruling on extradition procedure Continue Reading

By

• Bill Goodwin, Computer Weekly

A third of Brits plan to exercise right to be forgotten

After the General Data Protection Regulation compliance deadline, a third of Britons polled say they plan to exercise their right to be forgotten, but few fully understand the GDPR and how it will affect them Continue Reading

By

• Warwick Ashford, Senior analyst

100 days to GDPR compliance deadline

As the clock ticks down to the deadline to comply with the EU’s new data protection regulations, some surveys indicate there is still some confusion, but the focus has shifted from the sanctions to the benefits Continue Reading

By

• Warwick Ashford, Senior analyst

Why police forces need to be honest about mass mobile phone surveillance

Police forces across the UK are covering up their use of sophisticated mass surveillance devices, known as IMSI-catchers - the Bristol Cable and Liberty are campaigning for proper transparency Continue Reading

By

• Alon Aviram, The Bristol Cable

What the EU’s new data protection regime means for ASEAN

A large proportion of businesses in the regional economic grouping will be affected by Europe’s General Data Protection Regulation, but awareness of the new rules remains low, even in countries with existing data protection laws Continue Reading

CW ASEAN: European data law – be aware and prepare

Organisations across the ASEAN region will soon have to comply with another piece of data protec-tion legislation - the General Data Protection Regulation (GDPR) that will apply to any company that collects the personal data of Europeans. In this month's edition of CW ASEAN, we look at how ASEAN is gearing up for the GDPR, the current state of compliance and the law's impact on businesses. Read the issue now. Continue Reading

CW ANZ: Prepare for EU data law

Faced with the double whammy of complying with Australia’s upcoming data breach notification requirement and Europe’s new data protection regime, Australian firms are behind where they need to be in their compliance efforts. In this month’s edition of CW ANZ, find out how Australian organisations are getting ready for the GDPR, the challenges they are facing in meeting two new laws at the same time, as well as what they need to do to achieve their compliance goals. Read the issue now. Continue Reading

FS-ISAC enables safer financial data sharing with API

The global financial industry's body for cyber and physical threat intelligence analysis and sharing has published an API to facilitate safer sharing of consumer financial information Continue Reading

By

• Warwick Ashford, Senior analyst

Video: Lauri Love – why we need volunteers to fight malware

Lauri Love talks to Computer Weekly about plans to collaborate with others to tackle malware and use cryptocurrencies to create new ways for businesses to work Continue Reading

By

• Julia Gregory

Europe in the firing line of evolving DDoS attacks

The Europe, Middle East and Africa region accounts for more than half the world’s distributed denial of service attacks, a report from F5 Labs reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Malaysian regulator and firm sued over data breach

The Malaysian Communications and Multimedia Commission and a local company have been caught in a civil lawsuit over a massive data breach reported last year Continue Reading

By

• Aaron Tan, TechTarget

DMA Group working to reduce fear around GDPR

The DMA Group is focused on the GDPR for customer communications and marketing, but says the key aim is to reduce fear in the market Continue Reading

By

• Warwick Ashford, Senior analyst

Swisscom downplays data breach

Telecommunication provider Swisscom has downplayed a data breach affecting around 800,000 customers, but security experts warn of potential long-term risks Continue Reading

By

• Warwick Ashford, Senior analyst

Data breaches set to affect future sales

The failure to protect customer data is set to create long-term business problems for organisations in Europe and the US, a survey reveals Continue Reading

By

• Warwick Ashford, Senior analyst

CW Benelux: Dutch IT expert on a mission to expose vulnerabilities

Dutch ethical hacker Victor Gevers took full-time leave from his IT job last year and used the time to hunt for vulnerabilities. Read about his mission to find vulnerabilities, report them responsibly and then, hopefully, get them fixed by the vulnerable parties involved. Also in this issue, read how Proximus, Belgium’s largest telecommunications operator, is leaning on Cloudify to support its adoption of network functions virtualisation, and how journalists showed that the email addresses of Dutch politicians are easy to spoof. Continue Reading

UK government orders review of online laws

The UK Law Commission is to review current legislation on offensive online communications to ensure they are up to date with technology Continue Reading

By

• Warwick Ashford, Security Editor

Many UK firms ill-equipped to deal the cloud security risks

Many UK firms do not have the security tools, processes and skills required to ensure their cloud implementations are secure, a security researcher and advocate warns Continue Reading

By

• Warwick Ashford, Senior analyst

Lauri Love plans to use ‘internet as a force for good’

Engineering student Lauri Love says he plans to help businesses fight cyber crime, after the court of appeal ruled that he can be tried in the UK for allegedly hacking US computer systems, rather than face extradition to the US Continue Reading

By

• Julia Gregory and Niels Ladefoged

3, 2, 1, GDPR: How to be prepared on 25 May

There are seven key areas organisations should review to ensure compliance with the General Data Protection Regulation, and even though the deadline is less than four months away, it is still not too late to start Continue Reading

By

• Omer Tene, IAPP

Appeals court rules Lauri Love will not be extradited over US hacking charges

The lord chief justice, Lord Burnett, says 33-year-old engineering student Lauri Love will not be extradited to the US to face hacking charges, in a landmark legal decision, and the Crown Prosecution Service should bring proceedings against Love in the UK Continue Reading

By

• Bill Goodwin & Julia Gregory

NHS WannaCry review highlights need for accountability and skills

Lessons-learned report on ransomware attack calls for local NHS organisations to put cyber security bosses on their boards and consider suspending IT access to staff who have not completed cyber security training Continue Reading

By

• Lis Evenstad

GDPR: Don’t panic, but seize the chance to build trust, says ICO

With the compliance deadline for the EU’s GDPR just 112 days away, the UK’s information commissioner has urged organisations not to panic, but to seize the chance to build trust with customers Continue Reading

By

• Warwick Ashford, Senior analyst

Dutch Filmworks disrupts piracy fight by imposing download fines

Netherlands’ privacy watchdog grants film production company permission to collect IP addresses as part of its fight against illegal downloading Continue Reading

By

• Tijs Hofmans

Security Think Tank: Automating basic security tasks

How can organisations evolve their security operations teams to do more automation of basic tasks and cope with dynamic IT environments? Continue Reading

By

• Petra Wenham

Dutch companies not ready for GDPR despite approaching deadline

Organisations in the Netherlands are racing towards General Data Protection Regulation compliance, but there is still much to be done Continue Reading

By

• Tijs Hofmans

GDPR requests to take thousands of hours a month, says survey

A recent survey predicts organisations will potentially face thousands of customer requests about their personal information every month, with many unprepared for GDPR compliance Continue Reading

By

• Antony Adshead, Storage Editor

Navigating ASEAN’s patchy cyber security landscape

Cyber resilience remains low across Southeast Asia, a regional economic powerhouse that is increasingly susceptible to cyber threats as its digital economy grows Continue Reading

By

• Aaron Tan, TechTarget

Data breach disclosure law will lift Australia’s cyber security game

New rules underscore Australia’s recent efforts to tackle cyber security challenges on the local and international stage Continue Reading

By

• Stuart Kennedy

Government surveillance regime unlawful, court rules in Tom Watson case

Appeal court ruled in favour of Labour MP Tom Watson in a legal battle with the government over the UK’s surveillance laws, leading to calls to rethink controversial Investigatory Powers Act Continue Reading

By

• Bill Goodwin, Computer Weekly

IT Priorities 2018: Data protection a top priority ahead of GDPR

Data protection continues to be a key focus for IT security investment for European firms in 2018, as does the emphasis on cloud and mobile security as companies move to these technology platforms Continue Reading

By

• Warwick Ashford, Security Editor

Davos debates global tech risks

In this week's Computer Weekly, world leaders at Davos discuss the growing reliance on technology and how to tackle the political and economic threats of the digital age. Our latest buyer's guide examines mobile app development. And we look at the biggest challenges facing CIOs in 2018 - including digital skills, automation, innovation and diversity. Read the issue now. Continue Reading

GDPR’s latest gift? Class action privacy cases

Europeans will in future be able to bring US-style class actions for (alleged) privacy violations, instead of having to sue individually and expensively. It’s thanks to a little-known clause of the ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

NGO to fight for GDPR rights set to launch

A new breed of NGO aimed at helping EU citizens fight for privacy rights under the GDPR is set to launch after achieving the minimum funding required Continue Reading

By

• Warwick Ashford, Security Editor

Hefty fines confirmed for CNI providers with poor cyber security

The government has confirmed that critical infrastructure providers with poor cyber security face fines of millions of pounds as the National Cyber Security Centre publishes new guidance for the industry Continue Reading

By

• Warwick Ashford, Security Editor

ICO launches data protection excellence award

UK’s privacy watchdog launches data protection excellence award to mark international Data Protection Day, as security suppliers issue data protection tips and guidelines Continue Reading

By

• Warwick Ashford, Security Editor

UK likely to remain strategic EU data protection partner

Head of European Union’s independent data protection authority says UK is likely to remain a strategic partner in data protection after Brexit Continue Reading

By

• Warwick Ashford, Security Editor

IoT security risks need immediate action, says report

The security failings in today’s internet-connected devices will only become more pervasive unless action is taken immediately, according to industry experts Continue Reading

By

• Warwick Ashford, Security Editor

Most UK organisations unaware of new data protection laws

The UK’s digital and culture secretary is urging businesses and charities to prepare for stronger data protection laws in the light of new information Continue Reading

By

• Warwick Ashford, Security Editor

GDPR worries hit cloud storage investments, says survey

NetApp-sponsored survey finds lack of customer confidence in cloud service providers’ retention of GDPR-affected data has led organisations to rethink and scale back cloud investments Continue Reading

By

• Antony Adshead, Storage Editor

Sweden puts government IT outsourcing under increased scrutiny

Government introduces rules to tighten security in IT outsourcing deals following a very public data leak last year Continue Reading

By

• Eeva Haaramo

Two-thirds of startups ill-prepared for GDPR

While most startups collect personal data, a survey reveals that many are not very well prepared for compliance with the EU’s forthcoming data protection regulation Continue Reading

By

• Warwick Ashford, Security Editor

New controversies as Trump passes US Foreign Intelligence Surveillance Act

The amended Foreign Intelligence Surveillance Act, which seeks to legitimise US surveillance on foreigners, has been signed off by president Trump Continue Reading

By

• Kevin Cahill

Interview: Kaspar Korjus, Estonian e-Residency lead

As the number of people signing up to become Estonian e-residents exceeds the country’s birth rate, Computer Weekly speaks to the man heading up the programme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

GDPR: Not too late to ensure real risks will be addressed

With just four months to go before the General Data Protection Regulation compliance deadline, there is a growing anxiety in many parts of the regulated community that their GDPR plans may not be fit for purpose Continue Reading

By

• Warwick Ashford, Security Editor

Almost a quarter of London businesses unaware of GDPR

Nearly one in four London businesses unaware of new data protection regulation, a survey has revealed, with just months before the compliance deadline Continue Reading

By

• Warwick Ashford, Security Editor

Norwegian healthcare breach alert failed GDPR requirements

Norwegian healthcare authorities failed General Data Protection Regulation requirements for notifying those affected by a personal data breach by waiting a week before disclosing a breach discovered on 8 January 2018 Continue Reading

By

• Warwick Ashford, Security Editor

Privacy International warns of global risk to citizens if Microsoft loses US data access appeal

Privacy International warns of widespread privacy violations if Microsoft loses US data access appeal Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

European Parliament votes to restrict exports of surveillance equipment

European Parliament votes to tighten export controls to restrict supply of surveillance and encryption technology to states with poor human rights records amid fears British companies may not have to comply after Brexit Continue Reading

By

• Bill Goodwin, Computer Weekly

The rights and wrongs about GDPR compliance

We explore some common myths surrounding the forthcoming General Data Protection Regulation Continue Reading

By

• Jimmy Desai

Business needs to reduce cyber threat to payment card data

Cardholder data is a prime target for cyber criminals, and that is only likely to increase in the coming year, according to a cloud-based secure payments firm Continue Reading

By

• Warwick Ashford, Senior analyst

Davos: Disintegration of the internet could create economic turmoil

Politicians and business leaders will discuss the risks posed by fake news, cyber attacks, and artificial intelligence to jobs, political stability and global security, at the World Economic Forum in Davos Continue Reading

By

• Bill Goodwin, Computer Weekly

Sweden pilots surveillance technology to combat terrorism and crime

The Swedish police and security agencies are trialling surveillance equipment to help them respond to terrorism and crime more quickly Continue Reading

By

• Gerard O'Dwyer

How to fix the Meltdown and Spectre chip flaws

In this week’s Computer Weekly, as CIOs come to terms with the Meltdown and Spectre processor flaws that make every computer a security risk, we examine how to protect your IT estate. We find out how Alexa-style voice recognition smart speakers can help with CRM strategies and open up new sources of customer data. And we look at how the public sector is implementing DevOps and the benefits being delivered. Read the issue now. Continue Reading

Why GDPR is great for SMEs

SME laggards facing potential fines for non-compliance should wake up and smell the tasty carrot of a leaner, smarter business post-GDPR Continue Reading

By

• Jim Mortleman

EC underlines need for data transfer agreement post-Brexit

The European Commission has emphasised the importance of having a data transfer agreement in place after the UK leaves the European Union Continue Reading

By

• Warwick Ashford, Senior analyst

UAE tech growth prompts firms to review internal IT security

As IT becomes more prominent in the UAE economy, more and more internal connections between people and systems are created, all of which need to be secured Continue Reading

By

• Alicia Buller

ICO fines Carphone Warehouse £400,000

Mobile retailer hit with one of the highest fines for putting personal data at risk as UK privacy watchdog warns that more stringent data protection laws will apply from 25 May 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Max Schrems champions NGO to fight for GDPR rights

Privacy activist whose legal challenge of Facebook led to the scrapping of the Safe Harbour Agreement says crowdfunding a new type of non-government organisation is essential to deliver privacy rights Continue Reading

By

• Warwick Ashford, Senior analyst

Countdown to GDPR

In this week’s Computer Weekly, with the EU General Data Protection Regulation (GDPR) coming in to force this year, we look at the challenges for businesses to comply by the 25 May deadline. We examine the future for HPE as CEO Meg Whitman steps down. And we find out how the move to hyper-converged systems affects your backup strategy. Read the issue now. Continue Reading

Cyber attacks in 2017 drive Nordic security efforts

The volume of cyber attacks last year has increased boardroom focus on security in the Nordic region Continue Reading

By

• Eeva Haaramo

Sweden steps up cyber defence measures

Sweden is tightening up its cyber security defences as part of a wider national security strategy Continue Reading

By

• Gerard O'Dwyer

Get tooled up to meet GDPR requirements

We look at options for tools to help organisations comply with the EU’s General Data Protection Regulation Continue Reading

By

• Renee Murphy

Patch systems against Meltdown and Spectre, urges ICO

UK’s data protection watchdog is calling for organisations to apply security updates to mitigate against exploits of microprocessor flaws as soon as possible to safeguard personal data Continue Reading

By

• Warwick Ashford, Senior analyst

2018 could be year of critical infrastructure attacks, says report

The coming year is likely to see an increase in the number of cyber attacks on critical national infrastructure (CNI), according to a report based on experts’ forecasts Continue Reading

By

• Warwick Ashford, Senior analyst

What the EU’s new data protection regime means for ASEAN

A large proportion of businesses in the regional economic grouping will be affected by Europe’s General Data Protection Regulation, but awareness of the new rules remains low, even in countries with existing data protection laws Continue Reading

By

• Aaron Tan, TechTarget

Top IT priorities for Nordic CIOs in 2018

Nordic CIOs tell Computer Weekly about their intentions for the year ahead Continue Reading

By

• Eeva Haaramo

Top UK and US firms still overestimating GDPR readiness

Less than five months before the compliance deadline for the EU’s General Data Protection Regulation (GDPR), most top UK and US firms are still overestimating their state of readiness, a study suggests Continue Reading

By

• Warwick Ashford, Senior analyst

Ransomware to hit cloud computing in 2018, predicts MIT

Ransomware targeting cloud services is one of the six biggest cyber threats likely to face organisations in 2018, according to the Massachusetts Institute of Technology Continue Reading

By

• Warwick Ashford, Senior analyst

UK government blames North Korea for WannaCry cyber attack

The UK and US governments say a North Korean group was responsible for the ransomware attacks that hit the NHS and other organisations globally this year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

CW Europe: Eurosport pumps up digital technology for cycling fans

Read how Eurosport is using a novel combination of technology and information to develop immersive viewing experiences for sports fans across a range of platforms. Also find out how Russian state bank Vneshekonombank expects to become a vehicle for a blockchain revolution in the country’s public sector, and what the European Parliament's approval of a new electronic system to store biometric information might mean for UK citizens after Brexit. Continue Reading

Barclays Bank stops offering Kaspersky software to new users

Bank is no longer offering customers Kaspersky anti-virus software after UK security agency issues warning Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Google faces £2.7bn claim on behalf of 5.4 million iPhone users

Technology giant is accused of harvesting and selling data from millions of iPhone users from 2011 to 2012 who could each receive compensation of several hundred pounds Continue Reading

By

• Warwick Ashford, Senior analyst

Consumer identity management a growing trend

Consumer identity and access management is a growing trend, but system choice is still challenging, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses need to balance user experience, privacy and security

Balancing user experience, privacy and security for the connected consumer is a key challenge for online businesses, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Lauri Love: how reformed hackers halted the WannaCry virus

Lauri Love presents a compelling story of the WannaCry malware that nearly brought down the NHS, and the behind the scenes work of former hackers, and security researchers that helped to prevent lives being lost. Love is facing extradition to the US after allegedly taking part in a hacking protest over the death of internet pioneer Aaron Swartz, who faced jail for using a hidden computer to downloading academic journals at MIT. Continue Reading

By

• Bill Goodwin, Computer Weekly

Uber recognises need for consumer trust after breach cover up

New Uber leadership has recognised the importance of consumer trust and that they never should have attempted to cover up a 2016 data breach that affected millions of customers and drivers Continue Reading

By

• Warwick Ashford, Senior analyst

Europe not ready for imminent cyber strikes, say infosec professionals

Information security leaders in Europe believe a major breach of critical infrastructure is coming and that data breaches in their own organisations are imminent – yet most are not ready Continue Reading

By

• Warwick Ashford, Senior analyst

CW ANZ: On cyber alert

Achieving any form of computer security is an uphill task, costing Australian companies time and money with no prospect of a reprieve any time soon. In this month’s CW ANZ, read about the state of cyber security in Australia, Telstra’s efforts to help enterprises improve their cyber security posture, and how Australian organisations can keep up with the demands of cyber security. Also, find out why unsanctioned cloud apps continue to be a major bugbear among security chiefs in Australia. Continue Reading

CW ASEAN: How managed security services help to reduce cyber risk

The growing complexity and volume of cyber threats has led to rising demand for managed security services that provide the capabilities and technological know-how to combat cyber threats. In this month’s issue of CW ASEAN, read more about the pros and cons of using managed security services and considerations you should be aware of. Also, find out what organizations can do to put the odds in their favor when combating cyber threats. Continue Reading

Only a quarter of UK law firms are ready for GDPR, study shows

Just 25% of UK law firms are ready for the General Data Protection Regulation and one in five have experienced an attempted cyber attack in the past month Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR fines may affect almost 80% of US firms, poll shows

Most US companies risk fines for non-compliance with new European data protection laws that apply to all organisations processing any personal data of EU citizens Continue Reading

By

• Warwick Ashford, Senior analyst

A guide for businesses to China’s first cyber security law

Companies that break China’s new cyber security law may be fined or even have their licence to trade in the country removed Continue Reading

By

• Nick Beckett, CMS

Go beyond GDPR for a competitive edge

By exceeding the bare minimum requirements set by privacy regulations, businesses can win customers by offering greater assurances, says a business adviser Continue Reading

By

• Warwick Ashford, Senior analyst

Personal data of 46.2 million Malaysia mobile subscribers leaked

The massive data breach is yet another example of a ‘low and slow’ attack that stays dormant inside networks for years, without anyone noticing Continue Reading

By

• Aaron Tan, TechTarget

Cyber security professionals urged to embrace AI and automation

IBM security intelligence head says professionals should embrace artificial intelligence and automation to ensure they do not become obsolete Continue Reading

By

• Warwick Ashford, Senior analyst

Oversight of intelligence agencies’ data sharing has ‘failed’, court hears

UK’s intelligence services lack adequate oversight and written guidelines when sharing databases of sensitive information, Privacy International argues in secret court Continue Reading

By

• Bill Goodwin, Computer Weekly

Nordic finance watchdogs losing patience over anti-money laundering systems at banks

The financial services watchdogs have informed banks that they have to do more to improve anti-money laundering systems Continue Reading

By

• Gerard O'Dwyer

RSA’s Middle East cyber security conference gains its own identity

RSA Abu Dhabi conference focuses on region’s cyber security needs as digital technology deployments expand Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK intelligence agencies ‘unlawfully’ sharing sensitive personal data, court hears

A secret court will decide whether Intelligence agencies are “unlawfully” sharing huge datasets containing sensitive information about the population with industry, government departments and overseas intelligence services. Continue Reading

By

• Bill Goodwin & Julia Gregory

Dutch government agreement increasingly focuses on IT security

The coalition government in the Netherlands has agreed its plan for the next four years, with IT security prominent Continue Reading

By

• Tijs Hofmans