James Rees

Our Head of Cyber Security Tom Exelby was recently interviewed by Intelligent CISO, where he tells all about his career in the British Army, his current role, and the hot topics in cyber security at the moment. Read the full article here: https://buff.ly/4iH9yg4

28

1 Comment

ICO urges organisations to strengthen cyber security amid rising attack risks The ICO reports a sharp increase in cyber attacks, urging sectors like finance, retail, and education to bolster cyber security.

1

The Saepio team have pulled together this series of webinars to guide UK Businesses towards cyber resilience and achieve CE Plus. Yesterday's webinar our Solutions Architect Tori Mittens covered Malware Protection. Thanks to all of you who attended, we always aim to make our webinars useful, short and actionable. If you'd like to watch it, click on the link 👉 https://lnkd.in/evXNpuHX #cyberresilience #malwareprotection #cybersecurity

8

On the Razorwire podcast - looking at the human cost of operational failures at TSB with Paul C Dwyer Listen to the full episode here: https://lnkd.in/e4eHaw_W #operationalresilience #DORA #cybersecurity #disasterrecovery

7

By the end of March 2025, all CTLs must have achieved a UK Cyber Security Council Security Testing Title at the ‘Principal’ level or higher. Funding is available to cover the cost of CTLs obtaining their professional title if an application is started before 30th September 2024, just two weeks away. The Cyber Scheme are the only Licensed Body to offer two alternative routes towards your professional registration; interview or employer testimonial. This supports our testing community by offering a choice of application process which suits individuals and their preferred career pathway. You choose.   Each assessment method has its merit for individuals which is why we offer both options. 1. A simple application form followed by a one-hour online interview. 2. A more detailed application form which will be peer reviewed and adjudged from its content. For more information or to begin your application, please click here: https://lnkd.in/gibvP4XT

9

5 Comments

This week I've been mulling over planning timescales for information risk and security management - a pertinent topic as we plummet towards the new calendar year and, for many, the new financial year. How's it going with your 2025 budget? Do you have an eye towards 2026 and beyond? https://lnkd.in/gUFiKpyZ

8

6 Comments

New Report on Understanding Cyber Risk reveals a 8.5 risk understanding rating for firms with Cyber Essentials. Full Report = https://lnkd.in/eHHpZ2jZ     Bravo to all at Department for Science, Innovation and Technology + Pye Tait Consulting including Doreen Charlton. MA. for the great work on #CyberSecurity

1

🚨 3TB of stolen patient data leaked on dark web following a cyber attack back in March on NHS Dumfries and Galloway. ⚠ This recent development showcases the ruthless nature of ransomware groups and the potential consequences that can occur following a cyber breach. 🛡 As cyber attacks become more sophisticated, cyber security defenses must continue to advance, for the sake of both organisations and the people that trust them. #CyberSecurity #Ransomware #CyberNews

11

Data protection meets Cloud security in this two day course 👇 Become a Certified ISO 27018 Cloud Privacy Specialist with our training course where you'll be able to learn how to protect Personally Identifiable Information in the Cloud. Save 25% on training in Cloud security this autumn https://ow.ly/gpFN50TOw2K #CloudSecurity #DataProtection #ISO27018 #CloudPrivacy #CyberSecurityTraining #CloudComputing

4

The MSSP market is badly broken. This has been unfolding for some time now, increasing cost pressures combined with the lack of any meaningful performance measures have created a worrying 'race to the bottom' situation. The key warning sign is a strong focus on reactive security. There are now a multitude of low-end EDR/XDR solutions that can be paired with a very low cost SOC. The level of real-world protection provided by these solutions tends to be massively oversold, in reality they often just create a single fragile layer of defence. At Secmatics we put a strong focus on proactive threat-driven risk reduction, I see far too many organisations that believe they are safe because they have '24x7 security monitoring', and yet have easily discoverable actively exploited vulnerabilities in their infrastructure. Good security starts at home. You need a cohesive threat-informed technical strategy along with the right combination of proactive and reactive defences. If your security parter is not actively working with you to identify and proactively mitigate threats and vulnerabilities then it is probably time to look elsewhere. Caveat Emptor.

1

📣 Calling all CISOs! Don't miss our latest blog in techUK from Mark Jow, discussing cyber risk and how CISOs are addressing cybersecurity gaps ➡️ https://ow.ly/ikv250Ukc5T #cybersecurity #CyberStrategy #TechUK

52

Questions for NIS Compliance interest... We are helping many organisations with  NIS compliance work and have an interest in other organisations' experiences. Vibert Ltd advises NIS and NIS2 compliance as an ex- NIS Regulator and have many common findings. What do you experience? NIS and NIS2 are driving cyber/resilience improvements across many industries. Some are responding faster than others. Which industries are slowest and how can we all help them better? NIS2 will be a tidal wave starting in 2024 with addition of thousands of organisations, many new sectors, and accountabilities of Essential and Important entities. NIS V1.2.x UK may also do similar in future..... How will CAs and CSIRTs manage this mega wave? Our typical services may comprise, for example: NIS Advisory to CxOs/Boards/Senior Staff and NRO/DNROs etc. on NIS importance. NIS Advisory to OES for Inspection Readiness walk arounds and workshops. NIS Advisory to OES as Dummy Inspections. NIS Advisory regards Regulatory Enforcement. Teams calls with Seniors. Other possibilities.. Suggestions? Our NIS visits offered typically discuss topics like : - The Inspection Schedule across each phase. Interactions with Regulator during Inspections. Site visits: Where, how, and what is looked for. Each day of an Inspection. CAF discussions. Typical topics of an Inspection. What to prepare and how to present. What will be the outcome of each day and each phase. Who will attend from the Regulator and the OES. What will be asked and what won’t be said. Timelines. Outcomes. Information Notices and Fines. How to be best prepared. Etc. What topics are we missing? As an Ex-OFGEM NIS Inspector, we offer customers a unique insight into NIS Inspection preparedness that teams might find a useful differentiator. Some Consultants add us into their CAF programmes, just for a handful of days, which gives them a strong sales boost. We currently assist several OES in preparation for NIS Inspections. We trained many of the other Competent Authorities Inspectors in “our way” as we were leading UK (and probably EU) in NIS Inspections. E.g. OFGEM, ICO, DfT, CAA, HSE, DWI, etc. Suggested USPs… :- "Ex-NIS Regulator Principal Inspector Advisor"!!.. "Led the UKs 1st NIS Inspections"... "Developed the UKs NIS Inspection and Enforcement Programmes".... "Trains NIS Inspectors"... "Covers IT, OT, Cyber, Physical Security, Process, GRC, etc.".... !! We look forward to hearing from Operators and from Consultancies so we can develop the right SOW and Proposal for all our needs. How can we all help to assist more compliance as it will benefit society as a whole. Cevn Vibert CITP CEng FIET FInstMC FBCS 27kLA GICSP Global Director NIS Advisory and OT Industrial Security. [email protected] Vibert Ltd. www.vibert.ltd.uk #QuestionForGroup

6

GCHQ director speaks on cyber challenges facing UK Government Communications Headquarters (GCHQ) director Anne Keast-Butler delivers a keynote address at CyberUK 2024, discussing why the next few years will be the most threatening and transformational in cybercrime, and how we can navigate those risks in a time of unprecedented acceleration of technology. Keast-Butler shares with you the future threats that she predicts, and how GCHQ and their partners can counter them. Watch here: https://loom.ly/WBHgtUI #GCHQ #CyberUK #CyberConference #CyberCrime #RansomWare #CyberChallenges #CyberProtection #ExtechCloud

3

The Data Security and Protection Toolkit (DSPT) has changed in September 2024 for some health and care organisations to align with the National Cyber Security Centre’s (NCSC) Cyber Assessment Framework (CAF). Read all about the NHS DSP Toolkit changes at https://lnkd.in/e4pvh8-t #dsptoolkit #nhsdigital #nhsdspt #cybersecurity

4

🚨INFOSECURITY EUROPE EVENT REMINDER🚨   This Thursday, WCRC Director Paul Peters will be at Infosecurity Europe for the ‘Ransomware: Time to decide - will you or won't you pay?’ panel discussion.   He’ll be joined by Dr Jon Davies, FCIIS, CEng from News Corp, Gareth Bateman at Marsh and Infosecurity Magazine’s deputy editor, James Coker will be chairing the conversation.   Topics covered include:   ⚖️The argument for and against paying ransom fines 🔍If governments are looking to step in and legislate 🗃️Case studies - how have previous attacks been resolved? 💷Ransomware payments being non-tax deductible ⚠️The insurance implication 💡Chainalysis   Register for tickets: https://lnkd.in/dQTuueN   #InfosecurityEurope #Ransomware #CyberSecurity #Cyber

11