Regulatory compliance and standard requirements

CW ASEAN: SMEs present security weakness

In this month's CW ASEAN, we look at how the cyber security defences at small and medium-sized enterprises in Southeast Asia may have some vulnerabilities, resulting in cyber security attacks on the large corporations they work with. We also consider the need to educate users of smartphones and tablets across the region as card fraud rates rise, with high use of mobile devices considered a contributing factor. Read the issue now. Continue Reading

CW ANZ: Using gamification to build cyber security skills

In this month's CW ANZ, we look at how PwC is using an online game to give its customers first-hand experience of what it means to face a cyber attack. We also look at how identity is gaining greater prominence in the security debate in Australia as the DTO takes the wraps off plans for a national identity system. Read the issue now. Continue Reading

Snowden: the IT analyst turned whistleblower who exposed mass surveillance

Oliver Stone's biopic on Edward Snowden reaches the heart of the ethical crisis posed by mass surveillance for the state and ordinary citizens Continue Reading

By

• Fiona O'Cleirigh

Saving Lauri Love: activists plan their next move

An eclectic bunch of activists, charity workers and reformed hackers spent a rainy Sunday afternoon plotting their next move in a campaign to save Lauri Love from extradition to the US on hacking charges Continue Reading

By

• Julia Gregory

Smartwatches banned from UK Cabinet as EC plans IoT security standards

The EC is planning a security certification scheme for internet of things devices as the UK Cabinet bans smartwatches amid heightened fears of cyber espionage Continue Reading

By

• Warwick Ashford, Senior analyst

Business warned not to be complacent about cyber security

Lloyds of London survey reveals just how badly some European firms are failing in terms of cyber security and low levels of awareness about the role of cyber insurance Continue Reading

By

• Warwick Ashford, Senior analyst

Lauri Love: the student accused of hacking the US

How did a brilliant but fragile computer science student from a rural English town end up facing life imprisonment in the US? Computer Weekly speaks to Lauri Love Continue Reading

By

• Bill Goodwin and Niels Ladefoged

Lauri Love - my battle with extradition

A court ruled today that Lauri Love, a 31-year old electrical engineering student, from Suffolk, can be extradited to the US to face hacking charges. Continue Reading

By

• Bill Goodwin, Computer Weekly

NSA used Iraq war to develop surveillance capability, documents show

As the controversial Investigatory Powers Bill inches closer to becoming law, NSA documents reveal that the agency used the Iraq war to develop and expand its surveillance infrastructure Continue Reading

By

• Warwick Ashford, Senior analyst

Law firms planning litigation market for GDPR

Businesses should be preparing for the storm of litigation that is likely to be unleashed when the GDPR goes into force, warns Stewart Room of PwC Legal Continue Reading

By

• Warwick Ashford, Senior analyst

CW Nordics: Dealing with digital disruption

The Nordic countries are renowned for being home to thriving tech startup scenes, so it is hardly surprising that IT is a disruptive force in the region. In this quarter’s CW Nordics ezine we look more closely at how the Nordic region is being affected by technology disruption across industry sectors and how organisations are reacting to it. Continue Reading

MI5 staff repeatedly overrode data surveillance rules

Security service MI5 is responsible for 210 “clear contraventions” over five years for the way it accessed private internet and telephone data Continue Reading

By

• SA Mathieson

Six essential processes for keeping data secure

Data security is increasingly vital for organisations as the countdown begins for compliance with new rules imposed by the EU’s general data protection regulation Continue Reading

By

• Christine Andrews

UK’s top security judges struggle to assess privacy threats

Technological advancements make it difficult for the Investigatory Powers Tribunal to assess privacy threats, say the tribunal’s own judges Continue Reading

By

• Fiona O'Cleirigh

Date set for landmark hearing into EU-US data transfers

Irish court hearing triggered by Austrian law student Max Schrems could have huge implications for EU-US trade and the data privacy rights of millions of EU citizens Continue Reading

By

• Computer Weekly Reporters

IBM sets up security centre in Canberra

IBM leads the charge as large private businesses invest heavily in security resources across Australia in an attempt to close the security gap Continue Reading

By

• Beverley Head

CW ASEAN: July 2016

Lessons from the Philippine government hack: In this issue we ask why a hack on the Philippine Commission on the Elections (Comelec) was allowed to happen and what organisations in Southeast Asia can learn from this breach of security. Retailers in the region are concerned – read how the theft of customer data is their biggest worry. Continue Reading

CW ANZ: July 2016

Australia knows it has a cyber security problem, but not the scale. In this month’s CW ANZ we describe how Australia's $230m security strategy serves as a wake-up call to enterprises. We also reveal the techniques and technologies being used to protect one Australian school, as well as a more general look at the main cyber threats to orgainsations in Australia. Read the issue now. Continue Reading

Lauri Love suicide risk if extradited to US over hacking allegations

Westminster Magistrates’ Court hears evidence from medical experts that alleged hacker Lauri Love is at risk of suicide if extradited to the US Continue Reading

By

• Bill Goodwin and Fiona O'Cleirigh

Lower average cost of Australian data breaches is not a sign of comfort

The average cost of a data breach to Australian organisations dropped in 2015, according to research Continue Reading

By

• Beverley Head

Shadow data and the risks posed by cloud storage and apps

Cloud storage and apps can open up an organisation to risks of data leakage. Computer Weekly looks at key areas of vulnerability and what you can do to prevent your data going viral Continue Reading

By

• Bryan Betts, Freeform Dynamics

Philippines government data breach is a warning to Asean region

Security is a rising concern in the Asean region, with fears fuelled by incidents such as the recent hacking incident in Manila Continue Reading

By

• Zafar Anjum

IoT security: Lack of expertise will hurt, says Bruce Schneier

Government action at national and international levels is essential for addressing IoT security issues, but the relevant expertise is lacking, according to security expert Bruce Schneier Continue Reading

By

• Warwick Ashford, Senior analyst

How emails sent to and from Parliament are monitored

Government officials deny that emails sent by MPs are open to surveillance by GCHQ and NSA - we examine the evidence Continue Reading

By

• Duncan Campbell and Bill Goodwin

MPs’ private emails are routinely accessed by GCHQ

Computer Weekly investigation reveals the extent of interception of MPs’ and peers’ email communications and data Continue Reading

By

• Duncan Campbell and Bill Goodwin

NHS data security standards to be designed around technology, people and processes

The Care Quality Commission’s delayed review of NHS data security standards will encourage NHS organisations to have senior information risk owners and Caldicott Guardians at board level Continue Reading

By

• Lis Evenstad

Countdown begins to new EU data protection rules

In this week’s Computer Weekly, with the new EU data protection rules ready to become law, firms now have just two years to prepare for the stringent regulations – we assess the challenges. Manufacturing giant Rolls-Royce talks about why it moved its HR systems to the cloud and the lessons it learned. And we look back at 50 years of technology innovation in storage. Read the issue now. Continue Reading

Public cloud uptake rises, but Europe still lags behind the US

Okta research finds the most popular cloud applications in all regions are mail, sales and marketing, social media and document storage Continue Reading

By

• Cliff Saran, Managing Editor

10 key facts businesses need to note about the GDPR

With less than two years before the new EU data protection rules come into force, there are key areas businesses need to focus on to ensure they will be compliant Continue Reading

By

• Warwick Ashford, Senior analyst

UK court rejects demands for Lauri Love to hand over encryption keys

Court rules against an attempt by the National Crime Agency to force activist Lauri Love to disclose encryption keys by bypassing the Regulation of Investigatory Powers Act Continue Reading

By

• Julia Gregory and Bill Goodwin

Australian health sector an easy target for cyber criminals, says IBM

A push to encourage greater adoption of electronic health records has raised the spectre of online record theft Continue Reading

By

• Beverley Head

D-Day for GDPR is 25 May 2018

The European Parliament’s official publication of the General Data Protection Regulation means it will become enforceable on 25 May 2018 Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security in Belgium will gain prominence after terror attacks

Belgium’s physical security has been branded inadequate, so how does the country’s cyber security measure up? Continue Reading

By

• Stef Gyssels

GCHQ told analysts to assume surveillance 'bulk data' is legal

Documents obtained by charity Privacy International reveal insights into GCHQ’s collection of sensitive bulk data, as lawyers question the impact of surveillance on legal privilege, fair trials and protection of whistleblowers Continue Reading

By

• Alex Scroxton and Bill Goodwin

How IT in a portacabin supports £1bn London Bridge station overhaul

In this week’s Computer Weekly, we find out how a temporary IT set-up based in a portacabin is supporting the UK’s largest critical infrastructure project – the £1bn redevelopment of London Bridge train station. Our latest buyer’s guide looks at converged infrastructure products. And we analyse research showing data protection topping the list of UK security priorities. Read the issue now. Continue Reading

Activist Lauri Love faces order to disclose encryption keys

The UK’s National Crime Agency takes an unusual legal step to force a former university student accused of hacking to disclose encryption keys Continue Reading

By

• Bill Goodwin, Computer Weekly

Panama Papers revealed by graph database visualisation software

The 11.5 million files leaked from Panama-based law firm Mossack Fonseca are being interrogated by journalists using a combination of Neo4j’s graph database and data visualisation software Linkurious Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

'Citizens will be stripped naked' by Turkey’s data law

Turkey's data protection law, introduced in March 2016, will make Turkey a near total surveillance state, yet the EU, apparently more concerned about securing Turkey's help in controlling immigration, is turning a blind eye Continue Reading

By

• Craig Shaw & Zeynep Sentek

Apple vows to raise security as FBI breaks into iPhone

Apple says it will help law enforcement with investigations, but will increase the security of its products after the FBI broke into an iPhone Continue Reading

Canadian Elizabeth Denham set for the UK's next information commissioner

Canadian privacy commissioner Elizabeth Denham is to become the UK's next information commissioner as government pushes ahead with the snoopers' charter Continue Reading

By

• Warwick Ashford, Senior analyst

Britain to pay billions for monster internet surveillance network

New questions raised about Britain’s snoopers’ charter after Denmark abandons its own UK-style surveillance programme for a second time Continue Reading

By

• Duncan Campbell , 2QQ Ltd, Sussex University

RSAC16: RSA’s Amit Yoran comes out in support of strong encryption

A policy of weakened encryption would harm US economic interests and undermine those trying to defend digital environments, according to RSA president Amit Yoran Continue Reading

By

• Warwick Ashford, Senior analyst

RSAC16: US works on data access agreement with UK

The US is negotiating with the UK to establish a new framework that will permit UK authorities to access electronic communications directly from US companies Continue Reading

By

• Warwick Ashford, Senior analyst

Protecting the UK from cyber attacks

In this week’s Computer Weekly, we talk to the National Crime Agency’s top cyber cop, Sarah Goodall, about how the police are tackling IT security threats against the country through global collaborations. We ask CIOs for their tips on building an IT strategy for the digital age. And we review the big six storage suppliers’ plans for all-flash arrays. Read the issue now. Continue Reading

Majority of Britons support government surveillance for national security

A survey reveals that a majority of UK citizens support government surveillance for national security as Apple attempts to rally public support in its row with the FBI over encryption Continue Reading

By

• Warwick Ashford, Senior analyst

Surviving broadband failure

In this week’s Computer Weekly, after the recent BT broadband outage, we examine the options to keep your communications in place in the event of a failure, to ensure business continuity. We look at the prospects for the OpenStack open source cloud platform in the enterprise. And we see how Ireland is making progress on delivering a digital health service. Read the issue now. Continue Reading

Judge orders Apple to unlock San Bernardino gunman’s iPhone

A US judge has ordered Apple to help the FBI bypass the auto-erase function on the San Bernardino gunman's iPhone to find the passcode and access data, but the company says it will contest the order Continue Reading

By

• Warwick Ashford, Senior analyst

EU managers need to up cyber security collaboration, study finds

There is still much work to be done in the area of collaboration and sharing responsibility when it comes to preventing data breaches, a study has found Continue Reading

By

• Warwick Ashford, Senior analyst

US IT professionals overconfident in cyber attack detection, study finds

Most US IT professionals are confident in key security controls to detect cyber attacks – but unsure how long it would take automated tools to discover a breach Continue Reading

By

• Warwick Ashford, Senior analyst

TechUK calls on government to take reports on spy laws seriously

Government must address the fundamental concerns raised by expert witnesses, MPs and Lords about the draft Investigatory Powers Bill, says TechUK Continue Reading

By

• Warwick Ashford, Senior analyst

Bulk data collection unnecessary for surveillance, says cyber expert

Opting for bulk data collection and other intrusive surveillance overlooks other means available that do not involve collateral damage to businesses and innocent people, says cyber expert Continue Reading

By

• Warwick Ashford, Senior analyst

HSBC online services hit by DDoS attack

HSBC was hit by a distributed denial of service (DDoS) attack, which targeted its online personal banking services. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO launches data privacy assessment tool for SMEs

The ICO has launched an online self-assessment tool to help SMEs to comply with data protection laws and improve data handling procedures Continue Reading

By

• Warwick Ashford, Senior analyst

Business urged to take action on data privacy

Security professionals use Data Protection Day to encourage businesses to do more to protect personal data Continue Reading

By

• Warwick Ashford, Senior analyst

Keep data safe or risk financial impact, ICO warns business

The knock-on effect of a data breach can be devastating for a company, warns information commissioner Christopher Graham Continue Reading

By

• Warwick Ashford, Senior analyst

Is government surveillance going too far?

In this week’s Computer Weekly, as the UK prepares new laws on surveillance and data collection, we hear from security experts on the challenges of balancing privacy and security and their insider view on GHCQ and the NSA. We examine the growing threat of ransomware and how to tackle it. And we look at the implications of new EU data protection rules. Read the issue now. Continue Reading

Australian prime minister Malcolm Turnbull calls for free, open and secure internet

International norms of behaviour should prohibit states from conducting cyber intellectual property theft, says Australian prime minister Malcolm Turnbull Continue Reading

By

• Warwick Ashford, Senior analyst

GMB takes concerns over British Airways IT outsourcing to MPs

Trade union fears that the expansion of IT outsourcing at BA is a risk to security and will see UK jobs disappear Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

UK not involved in mass surveillance, says Theresa May

Coffee shops and libraries could be the target of interception warrants, Theresa May tells MPs and peers Continue Reading

By

• Julia Gregory

Firms can monitor employees’ online chats, EU court rules

Human rights court says it is not unreasonable for employers to want to verify that staff are completing their professional tasks during working hours Continue Reading

By

• Warwick Ashford, Senior analyst

ICO reiterates call for stronger sentences for data theft

The information commissioner (ICO) reiterates his call for stronger sentences for data theft after a court fined a woman just £1,000 for selling 28,000 customer records Continue Reading

By

• Warwick Ashford, Senior analyst

Tech firms critical of UK draft Investigatory Powers Bill

Facebook, Google, Microsoft, Twitter and Yahoo say they are particularly concerned about six key aspects of the UK's draft Investigatory Powers Bill Continue Reading

By

• Warwick Ashford, Senior analyst

UK IoT research hub opens with support from academic world

A consortium of nine UK universities have come together to work alongside the Engineering and Physical Sciences Research Council on research into the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Interview: James Bamford on surveillance, Snowden and technology companies

Investigative journalist and documentary maker James Bamford was among the first to uncover the secrets of the US National Security Agency and its global surveillance Continue Reading

By

• Bill Goodwin, Computer Weekly

Disaster recovery planning: Where virtualisation can help

The disaster recovery planning process is not fundamentally technology-centric, so when can virtualisation make it quicker and easier to restore services after an unplanned outage? Continue Reading

By

• Chris Evans

The US and China agree more steps to fight cyber crime

The US and China have made progress in expanding co-operation on cyber crime as China claims criminals and not state-backed hackers broke into the US Office of Personnel Management Continue Reading

By

• Warwick Ashford, Senior analyst

Workday ringfences support in Europe after Safe Harbour ruled unsafe

US cloud HR and financial services provider reponds to Safe Harbour failure by ringfencing European data Continue Reading

By

• Bill Goodwin, Computer Weekly

Use legal protection to soften cyber attack impact, says Kemp Little

IT outsourcing provides an opportunity for businesses to transfer risk and recover losses from cyber attacks, says law firm Kemp Little Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber security mindset needs to change, says report

Government organisations are prime targets for cyber attacks, leading to increased importance on robust information security, according to a report by Intel Security and the Digital Government Security Forum Continue Reading

By

• Lis Evenstad

Snoopers’ charter will force ISPs to raise broadband prices

The Science and Technology Select Committee hears that ISPs may be forced to put up their service charges to cover the cost of retaining communications data, should the Investigatory Powers Bill become law Continue Reading

By

• Alex Scroxton, Security Editor

Germany is finalising legislation to shore up CNI cyber security

Germany is working to ensure digital sovereignty through IT security legislation and negotiations on IT security regulations and transatlantic trade at a European Union level Continue Reading

By

• Warwick Ashford, Senior analyst

Avoiding security issues when recycling hardware

What are the options for the environmentally and ethically responsible recycling of end-of-life hardware, without compromising data security? Continue Reading

By

• Peter Ray Allison

Theresa May proposes bulk data and internet tracking under the Investigatory Powers Bill

The home secretary has unveiled the draft Investigatory Powers Bill, which sets out the government's plans to collect data on UK citizens' internet use Continue Reading

By

• Cliff Saran, Managing Editor

Lack of data classification very costly to firms, says survey

Most data retained by organisations is not identified or classified and gobbles budget spent on storage, as well as being potentially non-compliant, reveals Veritas-sponsored survey Continue Reading

By

• Antony Adshead, Storage Editor

The true cost of a cyber security breach in Australia

The costs of cyber security breaches can quickly add up with fines, reputational damage and overhauls to network security all hitting the coffers. The case of one Australian firm shows why paying a ransom to a hacker might be tempting. Continue Reading

By

• Beverley Head

Max Schrems: The man who broke Safe Harbour

Schrems has persuaded a high court judge to confirm that Edward Snowden’s evidence is acceptable in court and that the US is engaged in mass surveillance of European citizens Continue Reading

By

• Kevin Cahill

Facebook ruling not only landmark data protection case in Europe, say experts

A landmark ruling against Slovakia-based website Weltimmo could impact the Max Schrems case against Facebook and new European data protection rules currently being finalised Continue Reading

By

• Warwick Ashford, Senior analyst

120-day patching gap puts many firms at risk of cyber attack, study shows

The probability of a vulnerability being exploited hits 90% between 40-60 days after discovery, but many firms are taking up to 60 days beyond that to patch, while others are failing to patch at all, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Department for Culture, Media and Sport takes over responsibility for data protection policy

Government transfers responsibility for data protection policy and ICO oversight from Ministry of Justice (MOJ) to Department for Culture, Media and Sport (DCMS) Continue Reading

By

• Alex Scroxton, Security Editor

RSA Group flags ID theft risk to Lloyds Bank customers following datacentre storage theft

International insurance group has seen 500 customers take up offer of identity theft protection in wake of datacentre theft Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Cloudian boosts object storage HyperStore compliance features

Distributed object storage software maker Cloudian upgrades HyperStore with added granularity of data protection features that can help meet compliance requirements Continue Reading

By

• Antony Adshead, Storage Editor

Life’s a breach: How to handle the press after a hacking attack

Emily Dent, specialist in crisis PR, offers some advice to organisations that unexpectedly find themselves in the headlines Continue Reading

By

• Emily Dent

ICO orders Google to remove links to right to be forgotten takedowns

The Information Commissioner's Office (ICO) says Google must remove newer links that reveal the same details as previously removed links Continue Reading

Broadband Stakeholder Group to review UK net neutrality policy

The Broadband Stakeholder Group commissions an independent review into the UK’s industry-led approach to net neutrality and the open internet Continue Reading

By

• Alex Scroxton, Security Editor

Mobile phone users at risk as hackers bug and track victims

An investigation by Australian TV show 60 Minutes demonstrates how hackers based thousands of miles away in Germany were able to record the calls of an Australian senator and track his movements Continue Reading

By

• Ross Coulthart, 60 Minutes Australia

Technology experts warn of dangers of artificial intelligence arms race

An open letter signed by more than 12,000 technology experts calls for a ban on artificial intelligence (AI) to manage weapons “beyond meaningful human control” Continue Reading

By

• Warwick Ashford, Senior analyst

SaaS criteria to track for business outcomes

Organisations should evolve their SaaS selection criteria to focus on newer metrics that are better indicators of supplier performance Continue Reading

By

• Liz Herbert

UK considers 10-year jail sentences for online piracy

The UK government is considering new measures to increase the sanctions for criminals who infringe the rights of copyright holders for large-scale financial gain Continue Reading

By

• Warwick Ashford, Senior analyst

Wi-Fi enhances guest experience and profitability for Belgian theme park

Bobbejaanland, one of the largest theme parks in Belgium, is using a Fortinet Wi-Fi network to offer visitors access on the go, and improve its management capabilities Continue Reading

By

• Xavier Mertens

Facebook wins first round in European privacy battle

Facebook has welcomed a Vienna court’s rejection of a 25,000-strong class action lawsuit against the social networking firm for allegedly breaching European privacy laws Continue Reading

By

• Warwick Ashford, Senior analyst

How to cull old, potentially risky data

Unused data is a potential security risk, with old spreadsheets, reports and email containing industry secrets and laced with company gossip. If it's no longer useful, it's time to delete it Continue Reading

By

• Christian Cawley

Most of more than 733,000 police communications data requests approved

Big Brother Watch is calling for a curb on the scale of police access to communications data and greater transparency in the use of this data Continue Reading

By

• Warwick Ashford, Senior analyst

PSNGB rebrands to drive information sharing across PSN

PSNGB, the trade association set up to promote the Public Services Network, rebrands itself as Innopsis and says its work is far from over Continue Reading

By

• Alex Scroxton, Security Editor

EU data protection regulation will drive privacy by design, says KuppingerCole

The EU data protection regulation will drive privacy by design in companies with European clients, says KuppingerCole analyst Karsten Kinast Continue Reading

By

• Warwick Ashford, Senior analyst

Bill Binney, the ‘original’ NSA whistleblower, on Snowden, 9/11 and illegal surveillance

Always a patriot: Computer Weekly talks to Bill Binney, the senior NSA official who blew the whistle before Edward Snowden Continue Reading

By

• Fiona O'Cleirigh

Collaboration key to cyber security, says US homeland security chief

Collaboration between governments and with the private sector key to improving global cyber security Continue Reading

By

• Warwick Ashford, Senior analyst

Banks hide cyber crime losses, says City of London Police

Banks obscure the amount of money lost to cyber fraudsters – preferring to write off cyber theft as operating losses – says the City of London Police Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security risk potential linked to young, mobile users

A study conducted by wireless supplier Aruba Networks has identified a distinct cohort of high-risk, security-agnostic workers Continue Reading

By

• Alex Scroxton, Security Editor

Can legislation stop cyber crime?

Rising cyber crime suggests criminal law does not deter criminals and that a better legal solution is required to prevent further rises Continue Reading

By

• Stewart James

NHS data security: Lessons to be learned

The NHS does not always provide a trusted repository for patient data, but some trusts are examples of good practice in action Continue Reading

By

• SA Mathieson