Tim Anderson

The ICO has posted a document discussing #CyberSecurity areas to learn from others regarding previous breaches (https://lnkd.in/esvupixY) and apparently failing to patch systems processing personal data isn't one of the biggest issues. Does anyone believe that? #BeyondCyber #GovernanceMatters #DataProtection

5

Compliance doesn't have to be a painpoint! We've recently closed out and delivered a handful of ISO 27001 internal audits and vCISO support for ISO 27001 and the feedback is in! Below is an example of some awesome Trustpilot feedback from an awesome customer we helped get ready for their ISO 27001 audit. 👇🏼 Each business is a unique rubiks cube of challenges and opportunities. Getting to understand them in a finite amount of time to advise on the effectiveness and efficiency of security controls is an art as much as a science. At Steel FYI we pride ourselves in giving practical, friendly, and commercially-minded advice on how to achieve compliance and prevent material breach, without tying the business up in red-tape. If you want some support in making ISO 27001 work for your business, not the other way around, drop me a message 📨

21

Are you looking to improve your leadership skills? I had the pleasure of meeting Andy Ellis at RSA last week and have been digging into his book ever since. Being one of the most well-known and experienced cybersecurity leaders, he shares dozens of lessons and observations that anyone, at any stage of their career, can use to create a work culture of continuous improvement and strong leadership Andy Ellis is a graduate of MIT and former US Air Force officer. In his 20-year tenure, he designed, built, and brought to market many of Akamai’s security products, leading the Fortune 1,000 company from its start as a content delivery network into an industry powerhouse with a billion-dollar dedicated cybersecurity business.  Andy is now the founder of leadership development firm Duha, where he teaches his leadership philosophy not only to other executives, but strives to make leadership training more accessible to people at all career levels. My takeaways so far: ✅Focus on the present, worrying about failure can make it happen! ✅Consistency matters ✅Performance development is for EVERYONE in your team. Grab a copy if you’re looking to improve your leadership skills, I’m glad I did. #leadership #cybersecurity

30

learn how VFC has been used successfully in real world scenarios by attending this webinar.

1

Learn how VFC has improved and assisted Cyber/Digital/Incident Response investigations

3

Where is your data? Who hosts that data? What contracts are in force to protect your data being "handed over" to third parties at a whim? If Police Scotland struggle to get their head around the implications of their actions, how are SMEs supposed to cope? Do SMEs have the legal wherewithal to understand the Cloud Act? (Do SMEs even know where their data is? Much of it is likely lurking in the shadows, after all). I know I'm asking questions rather than answering them. Cloud services were meant to make our lives easier, but do they? #cloudsecurity #ico #shadowdata https://lnkd.in/eetuxeQZ

8

1 Comment

https://lnkd.in/eZfp59HD Schools need greater support and funding for protection and mitigation against such attacks. If a school is run as an academy can they face an ICO fine? There were 347 cyber incidents reported in the education and childcare sector in 2023, a BBC report revealed. It represented a 55% increase on 2022.

11

1 Comment

New Blog! This time focussing on Security Monitoring, this is my background subject really, but this one doesn’t talk about the solutions you could implement for a good reason, because the most important thing is your need. A lot of businesses don’t get value because they listen to the vendor not their own business, having the need nailed down will save unnecessary cost and make your vendor relationship more sustainable. There are some tips in here that you should be aware of when approaching or re-approaching your perfect solution (if there is such a thing).

8

1 Comment

The Nikki-Universal ransomware attack shows how quickly things can spiral when cybercriminals strike—and why the stakes are higher than ever for businesses worldwide. Attacks like these aren’t just about encrypted files; they’re about leaked secrets, operational chaos, and reputation damage. With hackers using tactics like double and triple extortion, it’s clear: defense strategies must evolve. For more insights and analysis, check out the detailed post on Matisoft’s LinkedIn page. Follow Matisoft Cyber Security Labs for more insights and updates on this and related topics. #MatisoftLabs #Cybersecurity #RansomwareAttack #DataSecurity #RiskManagement #IncidentResponse #CyberResilience

1

Questions for NIS Compliance interest... We are helping many organisations with  NIS compliance work and have an interest in other organisations' experiences. Vibert Ltd advises NIS and NIS2 compliance as an ex- NIS Regulator and have many common findings. What do you experience? NIS and NIS2 are driving cyber/resilience improvements across many industries. Some are responding faster than others. Which industries are slowest and how can we all help them better? NIS2 will be a tidal wave starting in 2024 with addition of thousands of organisations, many new sectors, and accountabilities of Essential and Important entities. NIS V1.2.x UK may also do similar in future..... How will CAs and CSIRTs manage this mega wave? Our typical services may comprise, for example: NIS Advisory to CxOs/Boards/Senior Staff and NRO/DNROs etc. on NIS importance. NIS Advisory to OES for Inspection Readiness walk arounds and workshops. NIS Advisory to OES as Dummy Inspections. NIS Advisory regards Regulatory Enforcement. Teams calls with Seniors. Other possibilities.. Suggestions? Our NIS visits offered typically discuss topics like : - The Inspection Schedule across each phase. Interactions with Regulator during Inspections. Site visits: Where, how, and what is looked for. Each day of an Inspection. CAF discussions. Typical topics of an Inspection. What to prepare and how to present. What will be the outcome of each day and each phase. Who will attend from the Regulator and the OES. What will be asked and what won’t be said. Timelines. Outcomes. Information Notices and Fines. How to be best prepared. Etc. What topics are we missing? As an Ex-OFGEM NIS Inspector, we offer customers a unique insight into NIS Inspection preparedness that teams might find a useful differentiator. Some Consultants add us into their CAF programmes, just for a handful of days, which gives them a strong sales boost. We currently assist several OES in preparation for NIS Inspections. We trained many of the other Competent Authorities Inspectors in “our way” as we were leading UK (and probably EU) in NIS Inspections. E.g. OFGEM, ICO, DfT, CAA, HSE, DWI, etc. Suggested USPs… :- "Ex-NIS Regulator Principal Inspector Advisor"!!.. "Led the UKs 1st NIS Inspections"... "Developed the UKs NIS Inspection and Enforcement Programmes".... "Trains NIS Inspectors"... "Covers IT, OT, Cyber, Physical Security, Process, GRC, etc.".... !! We look forward to hearing from Operators and from Consultancies so we can develop the right SOW and Proposal for all our needs. How can we all help to assist more compliance as it will benefit society as a whole. Cevn Vibert CITP CEng FIET FInstMC FBCS 27kLA GICSP Global Director NIS Advisory and OT Industrial Security. [email protected] Vibert Ltd. www.vibert.ltd.uk #QuestionForGroup

6

Thanks for commenting in Chasing Cyber on the QRNG Framework we published last week (https://lnkd.in/etETiMGZ), Duncan Jones. As my colleague, Itan Barmes, Quside's Carlos Abellan, and I worked through the drafts we did indeed strive to make the point that you highlight: that such frameworks can help provide a degree of assurance and market differentiation. I look forward to seeing how this type of activity evolves as industry requirements for quantum cyber readiness continue to crystallize. As Itan Barmes consistently points out, topics like this are, of course, more broadly applicable than the quantum threat. Adnan Amjad, Mark Nace, Emily Mossburg, Scott Buchholz, Deborah Golden, Clare Harding, Duleesha Kulasooriya, Robert Hillard, Dana Spataru, Marc Verdonk, Niels van de Vorle, Itan Barmes, Casper Stap, Ben Shapiro, Vikram M., Rita Gatt, Julie Gleeson #Deloitte #CyberRiskManagement #QuantumCyberReadiness https://lnkd.in/eNiQaMxN

28

3 Comments

Great article by James Coker summarising the key aspects of the Secureworks exercise session he attended this week. The 5 top tips he calls out: ✅ Make Careful Decisions ✅ Establish the True Nature of the Attack ✅ Keep Communications Regular, But Considered ✅ Engage Outside Support ✅ Practice Ransomware Incident Scenarios https://lnkd.in/ezMt2dyk https://lnkd.in/evjRevJq

1

1 Comment

I was saddened to read this article, especially as I know how tight budgets are for UK councils and public sector organisations in general. This no doubt will come at a heavy price for the council, both in monetary terms and time for the IT team to work on remediation. If you are in any doubt about the security of your website application PMD Data Solutions can provide you with a FREE web application vulnerability assessment. Send me a DM and I'd be happy to help #WAFaaS #Webapplicationsecurity #vulnerabilityassessment

1

Boost your #business immunity! This is a FREE service from the National Cyber Security Centre to help you inform those important #riskmanagement decisions.

4

🚨 Secure Your Business with Laneden Cyber Security Services - Q1 Offer! 🚨 As we kick off 2025, there’s no better time to prioritise your organisation’s cybersecurity. At Laneden Ltd, we specialise in Penetration Testing, Threat Simulation, and Compliance Testing, tailored to address your unique security needs. 🌟 Special Q1 Offer: We're offering a 15% discount on all our cybersecurity services for engagements booked in the first quarter of 2025! 🌟 Whether you’re looking to: ✅ Identify vulnerabilities in your external or internal infrastructure ✅ Simulate real-world threats to test your defences ✅ Meet regulatory compliance requirements ✅ Conduct a remediation check or enhance your overall security posture Don’t wait—this offer is only valid until 31st March 2025. Ready to start? Book a free Discovery Call with us today to explore how we can support your cybersecurity needs. 👉 Schedule Your Discovery Call Here : https://lnkd.in/gxtnaSFz Let’s work together to make 2025 the year your organisation achieves a stronger, more secure future. 💻🔐 #CyberSecurity #PenetrationTesting #ThreatSimulation #ComplianceTesting #CyberResilience #Laneden #Q1Offer #BusinessSecurity

8

UK launches 'world 1st' cyber laws to protect consumers from weak internet connected devices.. Common or easily guessable passwords like ‘admin’ or ‘12345’ will be banned to prevent vulnerabilities and hacking  Manufacturers will have to publish contact details so bugs and issues can be reported and dealt with Manufacturers and retailers will have to be open with consumers on the minimum time they can expect to receive important security updates https://lnkd.in/eSYFUkEK

12

Another attack; another breach; and the same advice to those impacted - change your passwords and adopt a hygienic approach to password management. I have 452 credentials stored in my own personal password safe/vault. I don't think I'm that much of an outlier, but that is a lot of passwords and that means my "person attack surface" is already frightening. And it's not just passwords. I couldn't tell you off the top of my head what information is being held about me in a lot of those systems/platforms/apps/sites - are their credit card details on file, PII, preferences, other information they have "inferred"? As consumers, we put our trust in these suppliers of services that they will look after our information. It's not good enough that they say: "sorry, would you mind changing your passwords". They shouldn't let it happen in the first place! #breach #attacksurface #password #passwordhygiene https://lnkd.in/eHMsG5Qb

15