Organizations and their employees can mount a formidable cyber defense against cyber attacks by having an incident response plan in place, educating employees on cyber-safety practices, and integrating zero-trust with existing security models.
Cyber insurance providers wants policyholders to increase their cyber resilience. A thorough incident response strategy that leverages digital forensics can help enterprises ensure they have the means to protect themselves even after an attack has occurred.
The cyberattack on Colonial Pipeline was a big lesson. It is imperative that critical infrastructure companies uplevel their protection against modern security risks by using modern techniques and automation to comply with new cybersecurity regulations.
EEA’s PSD2 regulation aims to protect consumers against fraud by securing the digital payments for Card Not Present (CNP) transactions. Study shows that merchants have seen some higher loss from failed and abandoned transactions than that from fraudsters.
Over the next 10 years, we will see companies continue to replace their on-premise network and security appliances with a secured corporate network over the internet. Remote access solutions like zero trust network access (ZTNA) and secure access server edge (SASE) are here to stay.
The Tim Hortons coffee chain became a cherished Canadian institution over nearly 60 years in business. However, questionable mobile app privacy practices tarnished the brand and now have the company facing the wrath of regulators and customers.
Changes in the risk and compliance arena are accelerating in the recent years. With these developments it is urgently needed to redefine the place of privacy and the privacy team in this evolving landscape just the same as establishing links with overlapping, adjacent and related areas of risk and compliance.
Myths about an SBOM further exposing an organization to attack or leaking trade secrets hamper an enterprise’s security efforts around visibility and transparency into software assets that could put an entire organization at risk.
During the privacy-last era, consumer trust in brands was repeatedly broken when brands captured, sold, and abused data without consent - even though it was technically legal. To rebuild trust, brands need to change their strategies to be privacy-first instead of last.
The EU Digital Markets Act (DMA) appears headed for adoption in May. Companies providing “core platform services”, as well as those potentially receiving data from such companies, should understand not only what the DMA requires, but also its impact on existing obligations under the GDPR.
