Articles relating to GDPR and data protection
Cyber 3-2-1: What have a €60,000 fine, a €100,000 fine, and Multi-Factor Authentication (MFA) got in common? All is revealed in the 2022 Annual Report that has just been published by Ireland’s Data Protection Commission.
Cyber 3-2-1: Another issue laiden down with news about recent cyber attacks, including against a UK financial advisory firm with some very interesting high-value clients. In response, the 5 steps you need to take right now to avoid the worst-case scenario of a ransomware attack. Plus an offer to ease my conscience.
I frequently encounter a broken relationship between my client and their IT MSP (managed service provider). In this first of two articles, I discuss why these relationships break down.
Cyber 3-2-1: Happy New Year. I know I’ve been talking a lot this week about how it’s not so happy for LastPass users, so I will not linger too much on that carnage for the moment. Instead, let’s talk about what Ukraine’s Cyber Police, the UK’s NCSC, and Ireland’s DPC have been up to while we’ve been eating too much chocolate.
Cyber 3-2-1: An outsourced HR provider reports a breach 60 days after it was identified, the European Commission agrees a new directive to oblige service providers to do better, and what the data protection regulators can tell us about security.
How our colleague could be exposing the organisation to a data protection risk.
Email auto-forwarding: What can we learn from a breach at the Teaching Council?
You may not care about disk encryption. But your regulator does. Read how many organisations put themselves (and their customers' personal data) at risk by not implementing this simple security measure.
Cyber 3-2-1: 58% of cyber incidents start with a phishing email. Plus: North Face, LastPass, and Uber: 3 breaches; many lessons. This week’s action: On the internet, we’re all Capricorns.
Cyber 3-2-1: A ransom payment won’t prevent a data protection penalty, LinkedIn is the scammers’ favourite brand, and some of the latest lures used in phishing emails. This week’s action: It’s time for some cybersecurity refresher training.