, 
, 
, 
, 
or the 
.
. DPOs also have an essential role as intermediaries between relevant stakeholders, such as supervisory authorities, data subjects, and business units within an organisation.
if it: 
also means you can rely on several experienced DPOs rather than just one, which means more hands on deck should you ever suffer a breach.
expert to your organisation. Your appointed DPO will:
;
) and the manner of their implementation and outcomes;
for all 
;
.
exposed information belonging to 146 million people around the world, mostly in the US.
.
to investigate the breach, found that it affected three distinct groups in the following ways:
(GDPR) in May this year, the investigation took place under the 
instead.
,” said information commissioner Elizabeth Denham.
has successfully implemented a broad range of measures to prevent the recurrence of such criminal incidents and it acknowledges the strengthened procedures which are now in effect.
against our US parent company last year was a pivotal moment for our company. We apologise again to any consumers who were put at risk.”
Risk IQ’s Evil Internet Minute infographic tells you the bad things happening every minute on the Internet:
- 5 successful ransomware attacks
- 9 phishing attacks
- 1,274 new malware variants
- 5,518 records compromised
Any data you look at shows that the scale of ‘Internet evil’ increases every year. The economic impact of cyber crime now exceeds $1.1 million per minute. This is a major corporate risk, irrespective of organisational size, and cyber insurance is an inadequate response – insurers will not pay out where you have been negligent.
The EU’s GDPR (General Data Protection Regulation) makes the tests for negligence pretty clear: absence of accountability, insufficient corporate governance and countermeasures that do not adequately respond to the frequency and virulence of today’s attacks.
In an environment where four potentially vulnerable web components are discovered every minute, an annual penetration test is only slightly better than not bothering at all. We run penetration tests about once a month; you should be doing them at least quarterly. However, even if you do this, you need to recognise that purely technical responses have limited benefits. Staff are the weakest of your links, particularly as phishing and ransomware attacks get smarter every day. And your supply chain may increasingly be your attackers’ fastest route into what passes for your secure environment. Staff awareness training only every year or two would be desperately short-sighted.
We’re going to see more and more organisations reporting data breaches – it’s now an offence to not report one, and you can be punished with significant fines. The costs don’t stop there. After you report a breach, and undergo investigation, fines and reputational damage, you still have to spend the money to get secure. It therefore probably works out less expensive in the long run to make comprehensive cyber security investments before you are breached (assuming that you haven’t already been breached, and you just don’t know it yet).
over the past few years has caught most businesses off guard. Their cyber security departments are severely understaffed, causing them to look desperately for qualified professionals to help tackle the threat.
, so if you’re looking to enter the field, or further your career in it, you could benefit massively from gaining a relevant qualification. Here are four reasons why:
(Certified Information Security Manager) qualification is the most versatile. It’s the globally accepted standard of achievement among information security, information systems audit and IT governance professionals.
is a safe career, it’s also one that offers plenty of room for growth. Qualifications plus experience is a powerful combination that can help you move into more senior positions.
qualification is essential. If you’re interested in information security, you’ll need a CRISC qualification.
, 
, 
and 
training courses. If you book before 22 December, you’ll receive a 10% discount on the courses and a 5% discount on all reading materials.
