Resources

Test Gated Post

ISO 27001

What is Cyber Security? Definition and Best Practices

ISO 27001

UK Government Minimum Cyber Security Standard

ISO 27001

Transitioning to ISO 27001:2022 | GRC Solutions

ISO 27001

SWIFT CSCF Compliance | IT Governance Ltd

ISO 27001

Speak to a cyber security expert

ISO 27001

What is Social Engineering? Examples & Prevention Tips

ISO 27001

Securities and Exchange Commission Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure

ISO 27001

The Sarbanes-Oxley Act | GRC Solutions

ISO 27001

What is Phishing? Attack Techniques & Prevention Tips

ISO 27001

NIST Cybersecurity Framework (CSF) | GRC Solutions

ISO 27001

Operators of Essential Services and the NIS Regulations

ISO 27001

Digital Service Providers and the NIS Regulations

ISO 27001

NIS Regulations: Cyber Assessment Framework

ISO 27001

The NIS Directive and NIS Regulations

ISO 27001

Management system integration

ISO 27001

ITSM (IT Service Management)

ISO 27001

GRC Solutions ITIL and ITSM books

ISO 27001

ITIL®

ISO 27001

IT Governance: definition & explanation

ISO 27001

ISO 27701

ISO 27001

ISO 27017 and ISO 27018 Cloud security | GRC Solutions

ISO 27001

ISO 27005

ISO 27001

ISO 27001 Risk Assessments

ISO 27001

FastTrack™ | ISO 27001 | GRC Solutions

ISO 27001

Typical ISO 27001 certification costs

ISO 27001

Key Benefits of ISO 27001 Certification

ISO 27001

ISO/IEC 27001:2022 and ISO/IEC 27002:2022

ISO 27001

iso27001 2022 transition training

ISO 27001

ISO27001

ISO 27001

iso27000 family

ISO 27001

ISO22301 business continuity standard

ISO 27001

ISO20000

ISO 27001

ISO9001 Quality Management Standards

ISO 27001

ISMS Benefits

ISO 27001

Infosec

ISO 27001

Implementing ISO27001

ISO 27001

GDPR and ISO 27001

ISO 27001

Gambling Commission Compliance

ISO 27001

Federal Cybersecurity and Privacy Laws

ISO 27001

EU Digital Operational Resilience Act

ISO 27001

EU Cybersecurity Act

ISO 27001

Email Security

ISO 27001

DFARS

ISO 27001

Data Classification Software

ISO 27001

Cyber Threats

ISO 27001

Cyber Security Standards

ISO 27001

Cyber Security Risk Management

ISO 27001

Cyber Security Risk Assessment

ISO 27001

Cyber Security Consultancy Services

ISO 27001

Cyber Resilience Framework

ISO 27001

Cyber Resilience

ISO 27001

Cyber Incident Response

ISO 27001

Cyber Crime

ISO 27001

Compliance

ISO 27001

Cloud Security

ISO 27001

Capability Maturity Model

ISO 27001

Business Resilience

ISO 27001

Benefits of ISO 22301

ISO 27001

BC DR

ISO 27001

Advanced Persistent Threats APT

ISO 27001

Accredited Certification

SOC 2

SOC reporting

GDPR

The pecr and eu eprivacy directive

GDPR

GDPR privacy compliance framework and standards

GDPR

GDPR Data Mapping

GDPR

GDPRConsultancy

GDPR

GDPR Compliance with ISO 27001

GDPR

GDPR Anniversary

GDPR

ePrivacy Regulation EPR

GDPR

DPO as a Service

GDPR

DPA and GDPR penalties

GDPR

GDPR Gap Analysis

GDPR

DPA 2018 part 4 intelligence processing

GDPR

DPA 2018 part 3 law enforcement processing

GDPR

DPA 2018

GDPR

Data subject access requests

GDPR

Data Sovereignty and the Cloud

GDPR

Data protection officer dpo under the gdpr

GDPR

Data Protection dpa and eu data protection regulation

GDPR

Data Protection

GDPR

Data Privacy

GDPR

Data Governance

GDPR

Data Breaches

GDPR

Articles of the GDPR

PCI DSS

PCI DSS | What It Is and How to Comply

Cyber Essentials

Vulnerability testing for Cyber Essentials

Cyber Essentials

Cyber Essentials: Secure Configuration

Cyber Essentials

Cyber Essentials: Patch Management

Cyber Essentials

Cyber Essentials: Malware Protection

Cyber Essentials

ISO 27001 and the Cyber Essentials Scheme

Cyber Essentials

Defining the scope for Cyber Essentials certification

Cyber Essentials

The Cyber Essentials Scheme

Cyber Essentials

Cyber Essentials Repeat Testing and Assessment Fees

Cyber Essentials

The Cyber Essentials SAQ (Self-Assessment Questionnaire)

Cyber Essentials

Cyber Essentials for the MOD Supply Chain

Cyber Essentials

Cyber Essentials FAQs

Cyber Essentials

Cyber Essentials Benefits

Cyber Essentials

Cyber Essentials: Boundary Firewalls and Internet Gateways

Cyber Essentials

Cyber Essentials Plus Case Study

Cyber Essentials

Cyber Essentials: User Access Control

AI Governance

What is AI governance and why does it matter?

AI Governance

ISO 42001: What it is and why it matters for AI management

AI Governance

The EU AI Act: what it means for your organisation and how to comply

CISSP study planner

IT Standards | GRC Solutions

Become an GRC Solutions channel partner

Ethical Hacking Career Roadmap

Cyber Essentials – 2025 Scheme Changes: What You Need to Know

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in October 2025 – At Least 21.2 Million Breached Records

Uncategorised

GRC Solutions Named Among the UK’s Top 20 Cyber Security Innovators

ISO 27001

Uncategorised

Data Leakage Prevention and Data Deletion – ISO 27001 Controls 8.12 and 8.12 Explained

ISO 27001

Threat Intelligence – ISO 27001:2022 Control 5.7 Explained

DORA

ISO 27001

Training

How DORA fits with ISO 27001, NIS2 and the GDPR

Cyber Security

Training

CISM Exam Tips from a Consultant: Five Insider Insights to Help You Pass

ISO 27001

How To Comply with ISO 27001’s New Cloud Services Control

DORA

What DORA Means for ICT Suppliers: MSPs, SaaS and Cloud in Scope

Cyber Essentials

Cyber Security Must Be a Board Priority – And It Starts With Cyber Essentials

ISO 27001

Training

Top 5 Skills Every ISO 27001 Internal Auditor Needs

Business Continuity

Cyber Security

DORA

ISO 22301

NIS Regulations

AWS Outage: A Supply-Chain Security Lesson

Cyber Security

Global Encryption Day: Why Encryption Is a Core Requirement

Business Continuity

Cyber Resilience

Cyber Security

Expert insight

ISO 27001

Risk Management

Why You Need Cyber Resilience and Defence in Depth

ISO 27001

ISO 27001:2022 Clause 6 – What’s Changed and What You Need to Do About It

Cyber Security

4 reasons to get CISMP qualified

Cyber Security

Training

CISM vs CISSP: Which Certification is Right for You in 2025

Cyber Security

Training

CISMP vs Security+: Which Certification is Right for You in 2025?

ISO 27001

Training

ISO 27001 for Non-IT Roles: A Beginner’s Guide

Uncategorised

CRISC Salary & Career in the UK: What to Expect in 2025

Uncategorised

5 Practical Skills You’ll Gain from a GDPR Practitioner Course

ISO 27001

Training

ISO 27001 Internal vs Lead Auditor Training Compared

Uncategorised

Global Data Breaches and Cyber Attacks in September 2025: Nearly 2 Million Records Exposed and Potentially 1.5 Billion More

Cyber Security

Training

Is CISM Worth It? Salary, Career Value & Employer Demand in 2025

GDPR

Privacy

Training

5 Common GDPR Mistakes – and How Training can Fix Them

ISO 27001

Training

5 Reasons ISO 27001 Implementations Fail (and How to Avoid Them)

Cyber Security

News

Our Experts’ Views on the Jaguar Land Rover Cyber Attack

Data Protection

GDPR

A Guide to the EU GDPR’s Requirements for an EU Representative

GDPR

Privacy

Training

Who Needs ISO 27001 Foundation Training?

Data Protection

GDPR

Privacy

Human Error and Accidental Data Breaches: Lessons from Recent Cases

Privacy

Training

How to Become a DPO (Data Protection Officer) in the UK

Uncategorised

How to Get Cyber Essentials Certified in 2025: Updated Steps and Key Changes

GDPR

Training

GDPR Foundation vs Awareness Training: Which is Right for Your Team?

The Data Protection Officer (DPO) Role – A beginner’s guide

Cyber Security

Training

CISSP® Exam Myths: What Learners Get Wrong

Uncategorised

UK GDPR Representative Services: What You Need to Know

ISO 27001

How to Maintain ISO 27001 Certification: 7 Top Tips

Cyber Security

ISO 27001

Supply chain security

3 ISO 27001:2022 Controls That Help Secure Your Cloud Services

DORA

ISO 27001

How ISO 27001 Helps You Comply With DORA

Free White Paper: The EU AI Act and ISO 42001 – A Beginner’s Guide

Data Protection

GDPR

GDPR Data Protection Impact Assessments: The 7 Key Stages of the DPIA Process

Uncategorised

Global Data Breaches and Cyber Attacks in August 2025: over 17.3 million records exposed

Cyber Essentials

Cyber Security

Cyber Essentials: The 5 Cost-Effective Security Controls Everyone Needs

Cyber Security

SOC 2

Nine Steps to SOC 2 Compliance – Including a SOC 2 Readiness Checklist

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in July 2025: over 14.9 million records exposed

Data Protection

Privacy

Data Protection Enforcement: Your Cookie Compliance Questions Answered

GDPR

A Guide to TOMs (Technical and Organisational Measures) Under the GDPR

Cyber Security

Expert insight

Penetration Testing

Security Testing

What are the Different Types of Penetration Test?

GDPR

The Six Data Processing Principles of the UK GDPR Explained

Cyber Security

Training

The 4 CRISC Domains Explained

Cyber Security

ISO 27001

Supply chain security

What Are ISO 27017 and ISO 27018, and What Are Their Controls?

Cyber Security

Training

The 9 CISMP Domains Explained

News

How One Weak Password Destroyed a 158-Year-Old Company

GDPR

Nine Steps to Conducting a GDPR Gap Analysis

Cyber Essentials

Are You Ready for Cyber Essentials?

GDPR

How to Write a GDPR Data Retention Policy – with template

Cyber Security

Training

The 4 CISM Domains Explained

PCI DSS

Choosing the Right PCI DSS SAQ: A Practical Guide

Cyber Security

Information Security vs Cyber Security: The Difference

Cyber Security

Training

The 5 CISA Domains Explained

AI

How ISO 42001 supports EU AI Act compliance

Uncategorised

Global Data Breaches and Cyber Attacks in June 2025: Over 16 billion records exposed

Cyber Security

ISO 27001

Risk Management

7 Steps to a Successful ISO 27001 Risk Assessment (Updated for 2025)

Data Protection

GDPR

How to Write a GDPR Data Protection Policy (Updated for 2025)

Cyber Security

Training

Building Your Cyber Security Career: The Credentials Needed for Management and Specialist Roles

GDPR

How to Respond to a DSAR (Data Subject Access Request) 

Data Protection

GDPR

How to Write a GDPR Data Privacy Notice – Updated Guide and Template for 2025

Data Protection

GDPR

Privacy

The Critical Role of a DPO: Why Outsourcing is the Smart Choice

Data Protection

GDPR

Privacy

The Data (Use and Access) Act and How it Affects the UK GDPR and DPA 2018, and PECR

Cyber Security

Understanding the CIA Triad in 2025: A Cornerstone of Cyber Security

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in May 2025 – More Than 1.4 Billion Records Breached

Cyber Security

Penetration Testing

Penetration Testing for SaaS Providers: Building Trust and Security

Uncategorised

How to Start Your Career in Data Protection and Privacy

Data Protection

GDPR

GDPR Documentation: The Documents You Need to Comply with the UK and EU GDPR

ISO 27001

How to FastTrack your ISO 27001 ISMS Implementation and Certification

Author of the month

Cyber Security

ISO 27001

Staff Awareness

Author of the Month: Bridget Kenyon

Data Protection

CCTV and the GDPR in 2025: What Employers Must Know

GDPR

The GDPR in 2025: What’s the Difference between Personal Data and Special Category Data?

Data Protection

Privacy

Data Protection Gap Analysis: Identifying Weak Spots Before Regulators Do

Cyber Security

GDPR

Penetration Testing

Security Testing

Lessons Learned from the Legal Aid Agency Data Breach

Cyber Security

Phishing

How to Spot a Phishing Email in 2025 –with Real Examples and Red Flags

Cyber Security

Penetration Testing

Security Testing

The Co-op, M&S, Harrods… You? Mitigating the Risk of Ransomware

Training

The 8 CISSP domains explained

Expert insight

Windows 10 End of Life: What Does it Mean for Your Organisation?

Author of the month

Cyber Resilience

Cyber Security

Cyber Terrorism

ISO 22301

ISO 27001

NIST

Author of the Month: Richard Bingley

Author of the month

Cyber Resilience

Cyber Security

ISO 22301

ISO 27001

Author of the Month: Andrew Pattison

Cyber Essentials

The Cyber Essentials Scheme’s 2025 Update and What it Means for Your Organisation

Data Protection

GDPR

Privacy

Training

What It Takes to Be Your Organisation’s DPO or Data Privacy Lead

Expert insight

Free Expert Insights: Index of Interviews

Expert insight

ISO 27001

How Can Organisations Transition to ISO 27001:2022?

Expert insight

Penetration Testing

Security Testing

Training

The Benefits of Becoming an Ethical Hacker

Data Protection

GDPR

Step-by-Step Guide to Achieving GDPR Compliance

ISO 27001

How You Can Continually Improve Your ISO 27001 ISMS (Clause 10)

Data Protection

GDPR

Privacy

How a GDPR Gap Analysis Helps Secure Support From Senior Management

Cyber Security

Expert insight

ISO 27001

Risk Management

How to Select Effective Security Controls

Breaches and Hacks

Cyber Security

Data Protection

Phishing

Cyber Threats During the Holidays: How to Stay Safe From Seasonal Scams and Data Breaches

Cyber Essentials

Expert insight

ISO 27001

Cyber Essentials vs ISO 27001: Key Differences

Expert insight

Penetration Testing

Security Testing

Staff Awareness

Meet the Hacker: How Simulated Phishing Addresses Your Biggest Security Risk

Cyber Security

Expert insight

Penetration Testing

Security Testing

Breaking In to Keep Hackers Out: The Essential Work of Penetration Testers

Cyber Essentials

Cyber Security

Expert insight

How Do the Cyber Essentials and Cyber Essentials Plus Assessments Work?

Cyber Security

Staff Awareness

How to Create a Strong Security Culture

Cyber Security

Expert insight

Phishing

Staff Awareness

Your Biggest Security Risk: The Insider Threat

AI

Cyber Security

Expert insight

Privacy

Layering Defences to Safeguard Sensitive Data Within AI Systems

Data Protection

Expert insight

GDPR

Privacy

How Organisations Are Failing to Process Personal Data Lawfully Under the GDPR

Cyber Security

Training

The 6 CCSP Domains Explained

Data Protection

GDPR

Privacy

GDPR: International Data Transfers Using the IDTA, SCCs or BCRs

Cyber Security

Expert insight

ISO 27001

Supply chain security

Strategies for Securing Your Supply Chain

Cyber Security

Supply chain security

How to Meet the NCSC’s 14 Cloud Security Principles

Cyber Security

Expert insight

Penetration Testing

Security Testing

The Insider Threat: Strategies to Safeguard Against Malicious Insiders

Data Protection

GDPR

Privacy

GDPR: Data Subject Rights and Organisations’ Responsibilities

Data Protection

Expert insight

GDPR

Privacy

How Do You Demonstrate Accountability Under the GDPR?

Cyber Security

Supply chain security

Security Risks of Outsourcing to the Cloud: Who’s Responsible?

PCI DSS

7 Steps to Prepare for PCI DSS Audit Success

Staff Awareness

How to Overcome Unconscious Bias in the Workplace

GDPR Benchmark Report: Compliance Insights

PCI DSS

8 Ways to Reduce Your PCI DSS Compliance Burden

AI

Cyber Security

Expert insight

ISO 27001

Security Testing

How to Address AI Security Risks With ISO 27001

Staff Awareness

How to Write a Modern Slavery Statement – 6-Step Guide

Cyber Security

Expert insight

Risk Management

How Do You Mitigate Information Security Risk?

Cyber Security

Expert insight

Risk Management

Where to Start with Cyber Security Risk Management

Staff Awareness

Tips for Environmental Sustainability at Work and How ISO 14001 Can Help

Cyber Essentials

Cyber Security

ISO 27001

What Is Access Control and Why Do Cyber Essentials and ISO 27001 Require It?

Data Protection

GDPR

Privacy

A Guide to GDPR International Transfers

PCI DSS

Supply chain security

Online Merchants: PCI DSS Compliance Tips When Outsourcing

Staff Awareness

Are You Meeting Your Occupational Health & Safety Requirements?

CyberComply

Data Protection

Expert insight

GDPR

Privacy

Streamlining GDPR Compliance With ROPAs, Data Flow Maps and DPIAs

Cyber Security

Expert insight

ISO 27001

5 Cyber Security and ISO 27001 Myths

Business Continuity

Cyber Resilience

Expert insight

Supply chain security

CrowdStrike: Lessons on the Importance of Contracts, Insurance and Business Continuity

PCI DSS

Staff Awareness

How to Easily Meet the PCI DSS Awareness Training Requirements

Expert insight

ISO 27001

ISO 27001:2022 Transition Challenges and How to Use ISO 27002

Breaches and Hacks

Data Protection

Staff Awareness

Analysing Data Breaches Caused by Human Error

PCI DSS

The Good, the Bad and the Improvable of PCI DSS v4

Breaches and Hacks

Expert insight

News

Penetration Testing

Security Testing

‘RockYou2024’: Nearly 10 BILLION Unique Plaintext Passwords Leaked

Data Protection

Expert insight

GDPR

Privacy

Supply chain security

GDPR Article 28 Contracts: What You Need to Know

Data Protection

Expert insight

GDPR

Privacy

Records of Processing Activities (ROPAs): Simplifying GDPR Compliance

Cyber Security

Expert insight

Phishing

Ransomware

Security Trends for 2024 and Beyond

AI

Creating an AI Policy – A Guide for SMEs

Cyber Security

Expert insight

Ransomware

Worrying Ransomware Trends, and What to Do About Them

Expert insight

Penetration Testing

Security Testing

Security Tips and Concerns for Remote Working

Cyber incident response

Cyber Resilience

Cyber Security

Expert insight

A Practical Guide to Cyber Incident Response

Expert insight

ISO 27001

ISO 27001 and Physical Security

The Week in Cyber Security and Data Privacy

6,009,014 MovieBoxPro Accounts Breached in Another Data Scraping Incident

Breaches and Hacks

Cyber Security

Monthly Data Breaches and Cyber Attacks

News

Global Data Breaches and Cyber Attacks in 2024

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in April 2024 – 5,336,840,757 Records Breached

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 22 – 28 April 2024

Channel Partners

Looking Back on the Channel Partner Event and Awards 2024

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 15 – 21 April 2024

Cyber Security

Cyber Defence in Depth: An Expert’s Overview

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 8 – 14 April 2024

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 1 – 7 April 2024

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in March 2024 – 299,368,075 Records Breached

Cyber Security

Training

An Expert Overview of CISM®

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 25 – 31 March 2024

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 18 – 24 March 2024

Cyber Security

The False Economy of Deprioritising Security

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 11 – 17 March 2024

ISO 27001

ISO 27001:2022 Annex A Controls Explained

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 4 – 10 March 2024

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in February 2024 – 719,366,482 Records Breached

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 19 – 25 February 2024

Cyber Essentials

Ashley Brett on Cyber Essentials Solutions

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 12 – 18 February 2024

Cyber Security

CyberComply

Expert insight

Privacy

Maintaining GDPR and Data Privacy Compliance in 2024

Channel Partners

Sophie Sayer on the IT Governance Partner Programme

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 5 – 11 February 2024

Cyber Security

Expert insight

Penetration Testing

Your CVSS Questions Answered

Ransomware

Staff Awareness

Elearning Staff Awareness Course Overview: Ransomware

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 29 January – 4 February 2024

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in January 2024 – 29,530,829,012 Records Breached

Expert insight

Expert Insight: Vanessa Horton on Anti-Forensics

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 22 – 28 January 2024

Expert insight

News

Security Testing

‘Mother of All Breaches’: 26 BILLION Records Leaked

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 15 – 21 January 2024

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 8 – 14 January 2024

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 1 – 7 January 2024

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in 2023 – 8,214,886,660 records breached

Monthly Data Breaches and Cyber Attacks

Global Data Breaches and Cyber Attacks in December 2023 – 2,241,916,765 Records Breached

Cyber Security

Expert insight

Expert Insight: Adam Seamons on Zero-Trust Architecture

The Week in Cyber Security and Data Privacy

The Weeks in Cyber Security and Data Privacy: 18 – 31 December 2023

Cyber Resilience

Cyber Security

DORA

Risk Management

Supply chain security

The Third-Party Threat for Financial Organisations

Cyber Security

CyberComply

GDPR

ISO 27001

Privacy

Sam McNicholls-Novoa on CyberComply

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 11 – 17 December 2023

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 4 – 10 December 2023

Monthly Data Breaches and Cyber Attacks

Data Breaches and Cyber Attacks in November 2023 – 519,111,354 Records Breached

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023

DORA

Expert insight

Expert Insight: Cliff Martin

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 20 – 26 November 2023

Cyber Resilience

Alan Calder on Cyber Resilience

DORA

Risk Management under the DORA Regulation

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 13 – 19 November 2023

Catches of the Month

Catches of the Month: Phishing Scams for November 2023

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 6 – 12 November 2023

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 30 October – 5 November 2023

Expert insight

Expert Insight: Andrew Snow

Monthly Data Breaches and Cyber Attacks

Data Breaches and Cyber Attacks in October 2023 – 867,072,315 Records Breached

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 23 – 29 October 2023

Expert insight

Expert Insight: Stephen Hancock on SAQ SPoC

The Week in Cyber Security and Data Privacy

The Week in Cyber Security and Data Privacy: 16 – 22 October 2023

Podcast

IT Governance Podcast 20.10.23: Casio, Cisco, MOVEit (again) and the ICC

Catches of the Month

Catches of the Month: Phishing Scams for October 2023

Podcast

IT Governance Podcast 6.10.23: TikTok, Sony and MOVEit and DarkBeam

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in September 2023 – 3,808,687,191 Breached Records

News

Royal Family’s Website Targeted by Denial-of-Service Attack

Podcast

IT Governance Podcast 22.09.23: MGM Resorts, Microsoft Azure, International Criminal Court

News

MGM Resorts suffers ransomware infection following social engineering attack

Catches of the Month

Catches of the Month: Phishing Scams for September 2023

Podcast

IT Governance Podcast 08.09.23: Electoral Commission (again), Meta, Pôle emploi

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in August 2023 – 79,729,271 Records Breached

Podcast

IT Governance Podcast 25.8.23: Tesla, Duolingo, Lapsus$ trial

Podcast

IT Governance Podcast 11.8.23: Electoral Commission, PSNI, Capita

Catches of the Month

Catches of the Month: Phishing Scams for August 2023

Uncategorised

What is Vishing? Definition, Examples and Prevention

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in July 2023 – 146 Million Records Breached

Uncategorised

What is Tailgating? Definition, Examples & Prevention

News

Norwegian Government Hit by Widespread Cyber Attack

Phishing

What is Smishing? Definition, Examples and Prevention

Podcast

IT Governance Podcast 14.7.23: EU-US DPF, UK-US data bridge, MOVEit patches and other security fixes

Penetration Testing

Red Team vs Blue Team: What’s the Difference?

Monthly Data Breaches and Cyber Attacks

Data Breaches and Cyber Attacks Quarterly Review: Q2 2023

Catches of the Month

Catches of the Month: Phishing Scams for July 2023

Uncategorised

List of Data Breaches and Cyber Attacks – June 2023

Podcast

IT Governance Podcast 30.6.23: ChatGPT, LetMeSpy and MS Teams, plus Alan Calder on cyber security

News

Phone-Tracking App LetMeSpy Says It Has Been Hacked

Cyber Security

How to Recover From a Cyber Attack

News

100,000 ChatGPT Accounts Hacked in Malware Attack

Phishing

10 Ways to Prevent Phishing Attacks in 2023

Podcast

IT Governance Podcast 16.6.23: MOVEit, LinkedIn, Spotify and Google Bard

News

Ofcom Becomes the Latest Victim of MOVEit Supply Chain Attack

Penetration Testing

API Penetration Testing Checklist

Phishing

51 Must-Know Phishing Statistics for 2023

Catches of the Month

Catches of the Month: Phishing Scams for June 2023

Podcast

IT Governance Podcast 2.6.23: Capita, NHS, Meta, GDPR, DPDI Bill and Alan Calder on cyber regtech

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks – May 2023

Cyber Security

What is a DoS Attack?

GDPR

GDPR Article 32: Your Guide to the Requirements

Podcast

IT Governance Podcast 19.5.23: A Capita special, featuring pension providers, Colchester City Council and Alan Calder’s analysis

Uncategorised

What Is a Brute Force Attack? Definition, Prevention and Examples

News

Eurovision Organisers Concerned About the Threat of Cyber Attacks

Cyber Essentials

Cyber Essentials Pricing in 2023: What You Need to Know

Catches of the Month

Catches of the Month: Phishing Scams for May 2023

Podcast

IT Governance Podcast 5.5.23: ChatGPT, LockBit, T-Mobile and Alan Calder on cyber security for boards

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in April 2023 – 4.3 Million Records Breached

Cyber Security

World Economic Forum: Organisations Must Invest in Security as ‘Catastrophic Cyber Event’ Looms

Uncategorised

IT Governance Podcast 21.4.23: Capita, Chrome, LockBit for Macs and Alan Calder on cyber security

News

Capita Admits That Its ‘Cyber Incident’ Was Ransomware and That Customer Data Was Breached

Cyber Security

What Is Data Minimisation? Definition & Examples

Monthly Data Breaches and Cyber Attacks

Data Breaches and Cyber Attacks Quarterly Review: Q1 2023

Catches of the Month

April 2023’s Catch of the Month: Uncovering Phishing Scams

Podcast

IT Governance Podcast 2023-7: Capita, ChatGPT and TikTok (yet again)

Cyber Security

How to Prevent Malware Attacks: 8 Tips for 2023

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in March 2023 – 41.9 Million Records Breached

GDPR

GDPR Article 17: What Is the Right to Erasure?

Cyber Security

Data Backups Are for Life, Not Just for World Backup Day

Podcast

IT Governance Podcast 2023-6: Ferrari, Dole, TikTok (again), Android

News

TikTok Banned on UK Government Devices

Cyber Security

Training

3 reasons cyber security training is essential

Podcast

IT Governance Podcast 2023-5: WH Smith, the Data Protection and Digital Information Bill, TikTok

Catches of the Month

Catches of the Month: Phishing Scams for March 2023

Cyber Essentials

Cyber Essentials is Updating its Technical Requirements

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in February 2023 – 29.5 Million Records Breached

Uncategorised

IT Governance Podcast 2023-4: EU-US Data Privacy Framework, Twitter 2FA, GoDaddy, HardBit 2.0

News

Twitter’s Security Move: Charging Users for SMS Two-Factor Authentication

News

Is Pepsi Okay? Bottling Plant Suffers Malware Attack

Uncategorised

IT Governance Podcast 2023-3: Bank security flaws ranked, ION ransom paid, MP hacked

Catches of the Month

Phishing Alert: February 2023’s Notable Scams

Cyber Security

How to Investigate a Cyber Incident: 5-Step Guide

Monthly Data Breaches and Cyber Attacks

List of Data Breaches and Cyber Attacks in January 2023 – 277.6 Million Records Breached

Podcast

IT Governance Podcast 2023-2: Mailchimp, fast food, T-Mobile, ice rinks, iOS update and ISO 27001

Uncategorised

What Are You Doing for Data Protection Day?

News

NortonLifeLock Says Customer Accounts were Compromised in Credential-Stuffing Attack

Uncategorised

7 Ways to Avoid Physical Security Threats in the Workplace

Uncategorised

IT Governance Podcast 2023-1: more ransomware attacks on the education sector, and DPC and Meta sued

Catches of the Month

Catches of the Month: Phishing Scams for January 2023

Uncategorised

Data Breaches and Cyber Attacks in 2022: 480 Million Breached Records

News

Criminal Hackers Leak Email Addresses of 220 Million Twitter Users

Monthly Data Breaches and Cyber Attacks

List of data breaches and cyber attacks in December 2022 – 31.5 million records breached

Data Protection

GDPR

GDPR – A compliance guide