Organisations are increasingly looking to technology as an enabler of their resilience programmes. Why? Because, by facilitating the aggregation of data across business continuity, (BC), operational resilience (OpRes), crisis management, risk and third-party teams, technology can solve many of the pain points faced, whilst improving the quality of best practice Read more…
The cyber kill chain, also known as the Lockheed Martin Cyber Kill Chain, is a concept and framework used in the field of cybersecurity to describe the stages of a cyber attack. It provides a systematic approach to understanding and countering the various steps involved in a typical cyber attack. Read more…
Conducting a business impact analysis (BIA) is an important step in assessing the potential effects of disruptions on your business operations. It helps you identify critical processes, prioritize resources, and develop appropriate recovery strategies. Here’s a step-by-step guide to conducting a BIA: Define the scope: Determine the boundaries of your Read more…
Proactive security intelligence involves the proactive identification, analysis, and response to potential security threats and risks. The components of proactive security intelligence typically include: Threat Intelligence: Gathering information about potential threats, including cyber threats, physical threats, insider threats, and emerging risks. This involves monitoring various sources such as threat feeds, Read more…
Data security and cybersecurity are related concepts but have different scopes and focus areas. Here’s a breakdown of the difference between the two: Data [or Information] Security: Data security refers to the protection of digital data from unauthorized access, use, disclosure, disruption, modification, or destruction. It focuses on safeguarding the Read more…
Tackling interconnected risks in enterprises requires a comprehensive and proactive approach. Here are some strategies that can help enterprises effectively address interconnected risks: Risk Assessment and Identification: Begin by conducting a thorough risk assessment to identify and understand the interconnected risks that your enterprise faces. This involves evaluating internal and Read more…
It takes a lot to keep the public safe. Here are some examples of technical applications: Surveillance Systems: Closed-circuit television (CCTV) cameras and other surveillance technologies are widely used to monitor public spaces, such as streets, parks, and transportation hubs. These systems help deter crime, provide evidence for investigations, and Read more…
Implementing and managing an effective Payment Card Industry Data Security Standard (PCI DSS) program involves several key steps: 1. Understand PCI DSS Requirements: Familiarize yourself with the PCI DSS standards and requirements to ensure you have a clear understanding of what needs to be implemented and maintained. 2. Scope Definition: Read more…
Travel risk management refers to the process of identifying, assessing, and mitigating potential risks associated with business or personal travel. It involves implementing strategies and measures to protect travelers’ well-being, minimize financial loss, and ensure business continuity. The value of travel risk management can be summarized as follows: Duty of Read more…
The application programming interface (API) has become integral to setting up functionality and flexibility. But they’re also potential attack vectors that need to be high on the security team’s radar. When it comes to ensuring the security of third-party APIs, following best practices is crucial to protect your systems, data, Read more…