Regulatory compliance and standard requirements

AWS gets EU approval for data replication outside of Europe

The European Union Data Protection Authorities has approved Amazon Web Services’ Data Processing Agreement Continue Reading

By

• Cliff Saran, Managing Editor

Samsung targets business with Microsoft tools integration

Samsung has pre-installed Microsoft OneNote, OneDrive, and Skype on the new Galaxy S6 and Galaxy S6 edge, as it expands into business Continue Reading

By

• Cliff Saran, Managing Editor

Case study: Norwegian insurer invests in Darktrace machine-learning cyber defence

Shipping insurance company DNK hopes to inspire the rest of the shipping industry to adopt Darktrace’s cyber defence system Continue Reading

By

• Jenny Stadigs

BlackBerry 10.3.1 review: Access Android apps and Blend

BlackBerry has finally released version 10.3.1 of its mobile operating system, which gives access to the Amazon Android app store Continue Reading

By

• Cliff Saran, Managing Editor

General election 2015: Major parties focus on tech agenda

With advancements around data protection and state surveillance of internet traffic, the UK is heading into its first tech-aware general election Continue Reading

By

• Cliff Saran, Managing Editor

FCC’s Tom Wheeler offers up net neutrality plan

The Federal Communications Commission (FCC) may rule in favour of a strong regulatory environment to preserve the open internet Continue Reading

By

• Alex Scroxton, Security Editor

Obama calls for single US data breach notification law

The US president is calling for a single US data breach notification law as part of proposed legislation to improve data security Continue Reading

By

• Warwick Ashford, Senior analyst

Attackers bypass conventional security, says FireEye study

Hackers breach most conventional, signature-based security technologies, with 27% involving advanced threats Continue Reading

By

• Warwick Ashford, Senior analyst

IT fails to get a grip on shadow applications

IT managers are unaware how much shadow IT is used by their business, the Cloud Security Alliance has warned Continue Reading

By

• Cliff Saran, Managing Editor

Cabinet Office begins procurement for next stage of Gov.uk Verify

The Cabinet Office has submitted a tender notice for a £150m three-year framework for the provision of identity assurance services Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

US interception in the EU faces new legal challenges

US government orders against Microsoft to hand over email data 'infringes privacy legislation' in other countries Continue Reading

By

• Fiona O’Cleirigh

Care.data faces more delays over concerns about patients

The NHS’s Care.data scheme may face more delays due to concerns over lack of publicity and clarity of the proposed programme Continue Reading

By

• Clare McDonald, Business Editor

CGI secures communications between pilots and air traffic control

Satellite communications firm Inmarsat has outsourced the provision of security IT and services to CGI Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Police forces use private cloud to access Holmes database

Police forces across the UK will access the Holmes major investigation system via a private cloud service Continue Reading

By

• Cliff Saran, Managing Editor

Cloud providers rush to build European datacentres over data sovereignty

Cloud providers IBM and Google build datacentres in the EU as enterprises insist on keeping their data in Europe Continue Reading

By

• Archana Venkatraman, Datacentre Editor

UK ranks third in right to be forgotten requests to Google

The UK has made the third-highest number of requests for links to be removed from Google's search results Continue Reading

By

• Warwick Ashford, Senior analyst

Azure CTO Mark Russinovich's top ten public cloud security risks

Microsoft Azure cloud CTO Mark Russinovich identified ten key security risks of public cloud services Continue Reading

By

• Archana Venkatraman, Datacentre Editor

Malware being used to steal cash from ATMs

Criminals are using malware to steal cash from ATMs without debit and credit cards Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

European firms far from ready for new data rules, study shows

As European authorities aim to ratify revised data protection rules by 2015, many firms have a lot to do to comply Continue Reading

By

• Warwick Ashford, Senior analyst

Case study: Deutsche Post DHL develops software contract templates to reduce costs

Deutsche Post DHL has created contract templates to manage software costs. Computer Weekly speaks to the people leading the initiative Continue Reading

By

• Cliff Saran, Managing Editor

WikiLeaks reveals Australian police are using surveillance software

Australia's New South Wales police are using spyware that has been linked to repressive states, according to leaked documents Continue Reading

By

• Warwick Ashford, Senior analyst

Local authorities can improve data protection, says ICO audit

There is room for improvement in how local authorities protect personal data, says an audit report by the ICO Continue Reading

By

• Warwick Ashford, Senior analyst

Paddy Power hit by data breach in 2010

Gambling firm Paddy Power owns up to 2010 data breach after recovering a compromised dataset in Canada Continue Reading

By

• Alex Scroxton, Security Editor

Hacker and UFO hunter Gary McKinnon launches SEO business

Hacker Gary McKinnon has set up a search engine optimisation business after winning a 10-year battle against extradition to the US Continue Reading

Search firms meet EU regulators over right to be forgotten

Google, Microsoft and Yahoo have met EU data protection authorities to discuss the implications of the right to be forgotten ruling Continue Reading

By

• Warwick Ashford, Senior analyst

Privacy key to UK business opportunity, says KPMG

Finding the right balance between privacy and business insight could help UK firms take the lead in innovative online services, says KPMG Continue Reading

By

• Warwick Ashford, Senior analyst

The legal considerations of the internet of things

As with many new technologies, there are a number of tricky legal challenges to consider as part of widespread IoT adoption Continue Reading

By

• Kim Walker

Barclays passes government’s ‘internet-born threat’ test

Barclays Bank has been awarded the government’s cyber security certificate for digital banking services after independent tests of services such as Pingit Continue Reading

Security Think Tank: The dos and don’ts of a good incident response plan

What does a good information security incident response plan look like? Continue Reading

By

• Tim Holman, 2-sec

Most people keen to share biometric data for smoother travel

A study has revealed that 89% of citizens agree with the use of biometric identification to aid travel Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Wearable tech must comply with privacy laws, warns ICO

Wearable technology must comply with UK data privacy laws, warns the ICO Continue Reading

By

• Warwick Ashford, Senior analyst

Google begins complying with European takedown requests

Google has begun removing search results in response to takedown requests from European citizens Continue Reading

By

• Warwick Ashford, Senior analyst

Voice recording compliance: What it is and how to achieve it

Voice recording compliance is subject to the regulation by the FSA, PCI, and Data Protection and Freedom of Information Acts Continue Reading

By

• Antony Adshead, Storage Editor

Vodafone blows lid on government spy networks

Vodafone reveals secret mobile phone-tapping network and joins Microsoft and Cisco in calling for debate on electronic surveillance Continue Reading

By

• Alex Scroxton, Security Editor

Principles of compliance in the financial services industry

Compliance in financial services can appear a staggeringly complex web of laws and regulations, but some key principles apply, says Mathieu Gorge of Vigitrust Continue Reading

By

• Antony Adshead, Storage Editor

US judge orders Microsoft to hand over email data held in Dublin

A US Judge has ordered Microsoft to give the District Court access to the contents of one of its customer’s emails stored on a server located in Dublin Continue Reading

By

• Archana Venkatraman, Datacentre Editor

UK update to copyright law imminent

The UK is to update its 1988 copyright law for the digital age in line with a nearly three-year-old review Continue Reading

By

• Warwick Ashford, Senior analyst

Google says government data requests are up 120% since 2009

Government requests for information about Google customers, have increased by 120% since 2009 Continue Reading

By

• Warwick Ashford, Senior analyst

Customer privacy an ongoing challenge, says Unilever

Unilever has set up a programme to address the continually evolving challenge of privacy issues relating to customer data Continue Reading

By

• Warwick Ashford, Senior analyst

Hacktivism: good or evil?

IT lawyer Dai Davis looks at the rise of hacktivism and its impact on business and international politics Continue Reading

By

• Dai Davis, Percy Crow Davis & Co

IT Security Salary Index (UK)

Are you being paid the right rate for the job? Check out this IT Security salary index from Acumin. Continue Reading

Governance, Risk Management and Compliance (GRC)

Ensuring that all the stakeholders' information needs are met requires a holistic approach to managing information – the creation of a GRC platform, say analysts Clive Longbottom and Rob Bamforth. Continue Reading

Should you allow a bring your own device policy?

Employers are realising there are challenges presented by BYOD which, if not dealt with, could have a serious impact on the business Continue Reading

By

• Sarah Burke

Rights groups call on White House to open privacy review

A coalition of 25 rights groups is calling for a 90-day US government review of big data and the future of privacy to be opened up to the public Continue Reading

By

• Warwick Ashford, Senior analyst

Bank of England publishes Waking Shark II cyber security exercise results

Bank of England publishes the results of its Waking Shark II security exercise, which tested financial institutions' contingency plans for cyber attack Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

Internet at risk of 'cybergeddon' says WEF

Internet is at risk of fragmenting amid concerns over spying and cyber crime, says World Economic Forum Continue Reading

By

• Bill Goodwin, Computer Weekly

Top European IT initiative to support business in 2014?

Expanding IT to support business growth is one of the biggest areas of focus for IT departments in 2014, so what does this mean? Continue Reading

By

• Warwick Ashford, Senior analyst

Security considerations for UK enterprises

This Research Snapshot from Vanson Bourne looks at IT security spending trends, awareness of cyber-threats, and the factors perceived as the biggest security risks for organisations. Continue Reading

Facebook faces lawsuit over monitoring private messages

Facebook is facing a lawsuit that claims it scans the contents of private messages to profile the user’s online activity Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 IT privacy stories of 2013

Stories related to whistleblower Edward Snowden’s revelations about internet mass surveillance programmes by the US and the UK have dominated this year Continue Reading

By

• Warwick Ashford, Senior analyst

UK citizen wins legal round against Facebook over Prism leaks

A British citizen has applied for a judgement against Facebook in a case that will test the right of tech firms to give UK personal data to the NSA. Continue Reading

By

• Fiona O’Cleirigh

What’s new in ISO 27001: 2103 for storage and backup?

This year, ISO 27001: 2013 was published, putting more emphasis on mapping risk to an ever-expanding and mobile IT infrastructure. But what is new in ISO 27001: 2013? Continue Reading

By

• Antony Adshead, Storage Editor

UK citizen sues Microsoft over Prism private data leak to NSA

A court action brought in the UK will test Microsoft's legal right to disclose private data on UK citizens to US intelligence services Continue Reading

By

• Fiona O’Cleirigh

The Guardian denies Snowden stories damaged national security

Guardian editor Alan Rusbridger defends decision to publish stories on documents leaked by whistleblower Edward Snowden Continue Reading

By

• Warwick Ashford, Senior analyst

NCA changed UK cyber crime fighting, says NCCU head

The NCA has changed the UK law enforcement landscape, says Andy Archibald, head of the NCA’s National Cyber Crime Unit Continue Reading

By

• Warwick Ashford, Senior analyst

Government lays out 2014 cyber security agenda

The UK government has reiterated its commitment to addressing cyber security and laid out some plans for 2014 at the Cyber Security Summit 2013 Continue Reading

By

• Warwick Ashford, Senior analyst

FTSE 350 firms complete cyber risk assessment

Most FTSE 350 companies put cyber risk on the board agenda, but many need to improve how they manage that risk Continue Reading

By

• Warwick Ashford, Senior analyst

Report highlights poor UK attitudes to mobile security

Businesses should note that many UK mobile users do not take security precautions and do not know how to guard against data theft Continue Reading

By

• Warwick Ashford, Senior analyst

Google reaches $17m multi-state settlement over Safari snooping

Google has reached a $17m settlement agreement with 10 US states for bypassing Apple Safari privacy settings Continue Reading

By

• Warwick Ashford, Senior analyst

Mass surveillance a bad idea, says Information Commissioner Christopher Graham

Information Commissioner Christopher Graham says issues of national security must not overshadow concerns of legitimate public interest Continue Reading

By

• Warwick Ashford, Senior analyst

Web surveillance not a good idea, says Info Commissioner

Information Commissioner Christopher Graham says issues of national security cannot be allowed to overshadow concerns of legitimate public interest Continue Reading

By

• Warwick Ashford, Senior analyst

Global profiles of the fraudster

Computers, rather than conmen, are set to be the future face of fraud, as criminals turn to robotics in an effort to avoid detection, this report from KPMG reveals. Continue Reading

Thales launches critical infrastructure cyber security lab

Thales has set up a cyber security lab dedicated to help improve the security of critical national infrastructure, government and business Continue Reading

By

• Warwick Ashford, Senior analyst

US publishes draft cyber security framework

The US has published a draft framework of voluntary cyber security standards aimed at reducing risks to critical national infrastructure Continue Reading

By

• Warwick Ashford, Senior analyst

Government overhauls security classification to fit digital age

In its first overhaul since World War II the government is consolidating six security bands to three with a system deemed more appropriate in the digital age. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Who owns your LinkedIn account?

It is common for employees to use personal social networking accounts for work, but who actually owns those accounts? Continue Reading

By

• Sarah Burke

Risk assessment key to cloud adoption, says Isaca

There is mass confusion among small and medium businesses about cloud computing, says Amar Singh, chair of Isaca UK Continue Reading

By

• Warwick Ashford, Senior analyst

Windows 2012 Server Network Security

This book chapter offers an introduction to Windows 8 and Windows Server 2012 network security and IPv6. It includes a 30% discount code for Computer Weekly readers. Continue Reading

Windows Server 2012 Security from End to Edge and Beyond

This extract from the book Windows Server 2012 Security from End to Edge and Beyond shows you how to plan your platform security requirements and gives you the critical questions to ask. Continue Reading

Printing: a false sense of security?

Louella Fernandes and Bob Tarzey show how secure printing technology can provide authentication, authorisation and accounting capabilities, helping businesses improve document security and meet compliance regulations. Continue Reading

Box.com forges new cloud security model

Service providers and consumers need to move to a security model better suited to the cloud computing, says Box.com Continue Reading

By

• Warwick Ashford, Senior analyst

Targeted attacks and how to defend against them

Analysts Bob Tarzey and Louella Fernandes assess the scale and real impact of targeted attacks the measures being taken to defend against them. Continue Reading

ICO to investigate sale of online dating profiles

The UK’s data protection watchdog is to investigate the sale of 10,000 online dating profiles to the BBC’s Panorama programme Continue Reading

By

• Warwick Ashford, Senior analyst

An introduction to cyber liability insurance cover

Cyber liability insurance cover has been around for 10 years, but most security professionals seem to have not heard of it or know that it exists Continue Reading

By

• Sarb Sembhi

UK to block online porn by default

The UK is to block online pornography by default to all new internet users, David Cameron is to announce Continue Reading

By

• Warwick Ashford, Senior analyst

IT security case studies

Four critical IT security case-studies selected from the winners of Computer Weekly's European User Awards for security Continue Reading

Needle in a Datastack: The rise of big security data

This research from McAfee investigates how well organisations are positioned to address the challenges of managing security in a world of ever increasing amounts and types of data. Continue Reading

IT Security Case Studies

Warwick Ashford presents 4 essential IT security case-studies selected from the winners of Computer Weekly's European User Awards. Continue Reading

OpenCorporates makes company data public

Company data is being made available as part of an initiative to place more government data in the public domain Continue Reading

Yahoo wants Fisa objections revealed

Yahoo is the latest company implicated in the Prism internet surveillance programme to call for more transparency around its involvement Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft notches up over 3,000 copyright cases

In its battle against piracy, Microsoft says it has settled 3,265 copyright cases in the past year and warns of links to malware distribution Continue Reading

By

• Warwick Ashford, Senior analyst

Tougher EU penalties for cyber crime not enough, say security experts

The European Parliament has adopted a draft directive to toughen up EU penalties for cyber crime, but security experts say this is not enough on its own Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Prism unlikely to change much

Does the data collected by Prism put the US Government at risk from other state or non-state sponsored activists? Continue Reading

By

• Petra Wenham

UK joins EU demands for Google to rewrite privacy policy

The UK’s privacy watchdog has joined data protection authorities in France, Spain, Germany and Italy in demanding changes to Google’s privacy policy Continue Reading

By

• Warwick Ashford, Senior analyst

NSA Prism scandal could hit US cloud providers, says EC vice-president

EC vice-president Neelie Kroes says US cloud services providers could lose business because of fears over US Prism surveillance programme Continue Reading

By

• Warwick Ashford, Senior analyst

Senior MPs flout EU cookie law

Two years after the EU cookie regulation and UK law came into force, not all UK websites are compliant, including the sites of 13 senior MPs Continue Reading

By

• Warwick Ashford, Senior analyst

Identity management key to browser-based IT strategy

A cloud-based identity management system is key to enabling a browser-based IT strategy at online recruitment firm Reed.co.uk Continue Reading

By

• Warwick Ashford, Senior analyst

The challenges of information governance in our increasingly litigious age

Formulating the right enterprise-wide information governance policies is essential in heading off potential legal and compliance costs Continue Reading

By

• Doug Miles

UK links to US internet surveillance remain unclear

The government insists that UK spy agencies operate within the law, but questions remain Continue Reading

By

• Warwick Ashford, Senior analyst

PM urged to criminalise internet rape porn

Campaigners are calling for the criminalisation of possessing internet pornography depicting rape Continue Reading

By

• Warwick Ashford, Senior analyst

Human error causes most data breaches, Ponemon study finds

Human errors and system problems caused two-thirds of data breaches in 2012, according to a study from Symantec and the Ponemon Institute Continue Reading

By

• Warwick Ashford, Senior analyst

Privileged accounts key to most APT attacks, says Cyber-Ark

The theft, misuse and exploitation of privileged accounts is becoming an increasingly key tactic in advanced persistent threat attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Microsoft declares conformance with ISO 27034-1

Microsoft has declared conformance with ISO 27034-1, the first part of an international standard for secure software development Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber criminals hack Washington court system

Hackers gain access to the personal data of 160,000 US citizens after compromising Washington State court service servers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Symantec helps NHS trust cut security costs by a quarter

The Royal Liverpool and Broadgreen University Hospitals NHS Trust cut security costs by 25% in its partnership with security supplier Symantec Continue Reading

By

• Warwick Ashford, Senior analyst

Netherlands considers hacking powers for police

The Netherlands government considers legislation to give police powers to hack into computers, install spyware and read emails Continue Reading

By

• Warwick Ashford, Senior analyst

Computer Weekly European User Awards for Security: Winners

The winners are in for the Computer Weekly European User Awards for Security. See who made the top spots. Continue Reading

By

• Kayleigh Bateman, Computer Weekly

CW buyer's guide: context-aware security

This 11-page Computer Weekly buyer's guide looks at how organisations should approach context-aware security technologies and what business benefits they can deliver. Continue Reading

CW Special Report on CSC

This 16-page report from Computer Weekly analyses the challenges facing CSC, its financial performance, the services it offers, its place in the IT market and its future strategy. Continue Reading

Big data security: getting a grip on multiple data sources

Big data analyses multiple data points, but how do you ensure that ecosystem is secure? In this podcast, Mathieu Gorge, CEO of Vigitrust, outlines the key steps in achieving big data security Continue Reading

By

• Antony Adshead, Storage Editor