A CEO’s involvement shouldn’t only come as a last resort. CEOs should take a proactive stance to highlight that security is also in the business’s best interest and can be balanced with the overarching goals of the business. With the CEO on board, the spotlight then shifts back to the CISO who must then begin work to create a security-focused organization.
A key concept of many privacy laws is the definition of “personal data”, “personal information” or “personally identifiable information”. If it’s not “personal data”, you are likely outside of the scope of data protection laws, however that is a line in the sand which is constantly moving – in this article David Fraser of McInnes Cooper in Canada examines what that constantly shifting line means for privacy, and the individual.
New research provides evidence we’re entering the Great Privacy Awakening. In the absence of a federal law, consumers are taking action: From using ad-blockers, and deleting their browser history to using their privacy rights and requesting their data be deleted.
For connected medical devices, cyberattacks are a massive threat to patient safety. As BLE connectivity for IoMT devices becomes more prevalent, protocol fuzzing validation will become even more critical in maintaining patient safety and trust in advancing technologies.
Organizations that have more mature data governance and information security programs are likely to have some level of integration between these functions already, but many continue to struggle with the idea and often treat them as separate, siloed programs.
The Five Eyes proposal for lawful access compromises on encryption, infringes upon our right to privacy, puts our personal data at risk, and utlimately undermines public trust in technology.
The global technology supply chain is becoming increasingly complex and vulnerable, how should we safeguard IoT and connected devices as they travel through the chain?
Coronavirus is forcing organizations to accommodate large-scale remote workforce that demanding that they look into new security architecture, processes and methodologies.
An internet bill of rights seems necessary now that the internet is inextricably intertwined with everyone's life, but the shepherds of this technology cannot be counted on to adequately self-regulate.
Researchers recently uncovered an IoT botnet that has infected more than 1M organizations. Can we survive the next DDoS attack and avoid a botnet apocalypse?










