Taheera Lovell

On the 8th May we are offering an online cyber bullying worksheet for parents. Cyber bullying is just one of the many unhealthy relationships we tackle at Soundproofbox CIC It’s important for parents to understand how to spot the signs and what to do if their child is being cyber bullied. Understanding cyberbullying as a parent is crucial because it helps you: 🚩Protect your child: Recognising signs of cyberbullying allows you to intervene early and provide support. 🚩Foster open communication: Knowing about cyberbullying encourages dialogue with your child about online safety and their digital experiences. 🚩Advocate for change: Equipping yourself with knowledge empowers you to advocate for policies and resources that address cyberbullying effectively. 🚩Promote digital literacy: Understanding cyberbullying helps you teach your child about responsible online behavior and navigating digital platforms safely. Click on the link to book a ticket #cybersafety #parents #education #bullying #cybersafe

6

2 Comments

🔔BIG NEWS🔔 The infosec.live community has officially been registered as a not for profit here in the U.K. The “Infosec Community CIC” has been formed to ensure the direction of our platform remains for the benefits of its members, rather than making a profit. This will also allow us to access certain funds for the communities growth, enable us to build strong partnerships with training providers and certification providers to obtain the best discounts for our members. Thanks to all of you who have supported infosec.live over the last (nearly) 3 years (We are 3 in June) I look forward to seeing the community grow and provide even more valuable resources for our members and the wider cybersecurity industry! A special thanks to the following advisory board members who have been instrumental in our growth so far. Prof Buck Rogers Jaye Tillson Steve Hindle Greg van der Gaast Chimeria G. Steve Armstrong Jake Bernardes Colin Dobell We are looking for partners to help us with our growth plans, from vendors to individuals looking to make a difference in the industry. Exciting times ahead. #notforprofit #community #cybersecurity

133

45 Comments

The biggest changes to UK Healthcare Data Security and Protection Toolkit have arrived. #assurance. I looked through the NHS CAF (Cyber Assessment Framework) DSPT Portal changes earlier and it looks good in principle, however Boards are not yet equipped with the understanding of how much more difficult the assurance process is going to be. By my estimate it will take a minimum of 2 years to "learn the new dance", and to be able to meet these new assertions. As much as it is outcome heavy, it is also evidence heavy. Remember, once the auditors have processed this new information, expect some tricky conversations and an increase in blood pressure. To senior leaders, support your IT and IG Teams because they are going to need it! Congrats to NHS England for getting this over the line. It is certainly more higher grade than the previous assurance model. #defendasone #cyber #ciso #nhs #cisolife #healthcare #patientsafety #cybersecurity #gdpr #nhs #nhsengland #compliance

49

10 Comments

A more serious thought about the ICO's statement on Advanced, "hackers initially accessed a number of Advanced’s health and care systems via a customer account that did not have multi-factor authentication." It isn't clear if this is a customer's organisation's account, or a customer's Advanced account, but in any event the absence of MFA is a risk no-one should be accepting. Procurement and governance processes should be ensuring pretty much every system has MFA enabled and enforced, for accounts relating to health records this is quite simply a non-negotiable.

6

3 Comments

𝐒𝐨𝐜𝐢𝐚𝐥 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐢𝐧 𝟐𝟎𝟐𝟒 According to a recent UK government cyber security breaches survey, 90% of organisations reported that phishing was by far their most common type of cyber attack.    Social engineering attacks capitalise on human emotions like fear, excitement, curiosity, anger, guilt, and sadness, much more than human ignorance.   Which therefore means most employees are vulnerable to different social engineering attacks such as;   *Voice phishing  *SMS phishing  *Angler phishing  *Baiting, just to name a few.   Angler phishing happens on social media, and most employees have at least one social media account on which they can be targeted by bad actors to eventually gain access to the IT assets of their employer.   Taking the above statement into account, would it be fair to say that employers 𝐌𝐔𝐒𝐓 invest in relevant policies, awareness, education, and training solutions to mitigate the risks of their employees being socially engineered by malicious actors into granting access to the organisation's IT systems?   Or do you think it is solely the responsibility of the employee to ensure that they don't fall prey to attacks that could compromise their employer's systems. Your thoughts will be highly appreciated 🙏. #cybersecurity #socialengineering #cyber #mallard #cybersecurityhackers #whitehathackers #phishing #smishing #vishing #shouldersurfing #capslock #pentestersquad #Cybermillion #Enforta #cybersmart

7

Enhancing online safety for children is more crucial than ever, as they navigate the digital world. Ofcom's research reveals that children as young as 5 are increasingly present online, a third use social media unsupervised and a growing number have personal profiles. You can read more about this in Ofcom's report here: https://lnkd.in/ecx2fpX8 It's clear that regulating content alone is no longer sufficient. We must ensure that digital services are safe by design, incorporating independent checks and audits of risk assessments and a duty to educate and empower users. I am privileged to have co-authored an article with Vicki Nash, which explores how adopting a systems-driven approach can significantly enhance online protection for children. https://lnkd.in/etKS-7D8 #OnlineSafety #DigitalWellbeing #ChildProtection

20

3 Comments

There are three levels within the UK Essential Digital Skills Framework:  • The Foundation Level  • Life Essential Digital Skills (EDS) • Work Essential Digital Skills (EDS) Each level is a standalone Skills The same five skill areas are used within Life and Work EDS: Communicating Handling information and content Transacting Problem-solving Being safe and legal online Tasks There are specific tasks that demonstrate an individual’s  proficiency across different levels:

2

1 Comment

WEBINAR ALERT: Monday, September 30, 2024, 11:00am This webinar will set out how the law on sexual harassment is changing, and what actions you need to take to ensure compliance with the new law. After watching this webinar, you should be able to: * Understand how the law is changing and what that means for your organisation * Know what you need to do now to get ready * Be aware of the new powers given to the EHRC and employment tribunals to tackle employers who don’t comply https://lnkd.in/erJUYCvA CIPD HR-inform Rahim Joseph-Garrison

5

1 Comment

As I am currently learning cyber security, I've found out a lot of mistakes I had made and what other individuals and organisations are doing to cause slow processing of data and hindered the flow of network which is caused by different malware. Do you know that as a new employee given an office system, you are to do these few things before you start using the computer? 1) Turn the firewall on 2) Install antivirus and antispyware 3) Manage your operating system and browser 4) Set up password protection. Have a productive day

6

Is Your Business Protected from Cyber Threats? The recent cyber attack on the NHS blood test provider is a stark reminder of the growing risks we face. Sensitive data being compromised can have severe consequences. Did you know an IBM study revealed that up to 95% of data breaches are due to employee/human mistakes? Upskilling staff in cyber security is not just an option but a necessity. You can invest in your team's knowledge and secure your business today. Learn more about our government-funded Skills Bootcamp in Cyber Security and speak to a member of our Skills Bootcamps: Stephen Crawley, Clare Whittingham, Andy Longhurst, Rob Smith, James Sykes at Pathway Group https://lnkd.in/eqpeVrnV Let's make your business cyber-safe together! #CyberSecurity #SkillsBootcamp

12

Dealing with an email data breach – replies from famous catchphrases (see if you know the person who said it) 1️⃣    “You stupid boy” – on hearing an email was sent to wrong person 2️⃣    “I don’t believe it” – On hearing they have done it a 2nd time 3️⃣    “You plonker” – On hearing they have done it a 3rd time 4️⃣    “I have a cunning plan” – to stop them doing it again 5️⃣    “Am I bovvered” – how I feel when I hear they have done it a 4th time 6️⃣    “Just like that” – showing them how not to send an email to the wrong person 7️⃣    “Shut that door” – on telling the person they are no longer required 8️⃣    “Ooh John Boy – on reporting the data breach to the ICO  9️⃣    “don’t panic” – when you hear someone else has sent an email…. Guess where? 🔟  “Is that your final answer” – when you ask the CEO what he wants to do next Give yourself an extra pat on the back if you know who said the catchphrases

7

Sorry to be the bearer of evil tidings, but UK-GDPR rules apply to every business, no matter how large or small you are - it's not like Health & Safety in this respect!  If you collect personally identifiable information, you are liable for it under UK-GDPR. So, if you get it wrong - how much could it cost you?  Well, UK-GDPR gives the Information Commissioner's Office the power to impose fines of up to £17.5 million or 4% of the total annual worldwide turnover in the preceding financial year (whichever is greater) for breaches of the UK-GDPR.  That may not seem a lot, particularly if you have a small turnover, but even so - a small amount of a small turnover will still hurt! It simply doesn't make sense to risk it!  If you don't need the records, call us, and we'll set you up with a shredding facility. No more worries!  #securestorage #securedata #recordsmanagement #gdpr #datadestruction #weee #papershredding #SMBRM #MakingLifeSafer https://bit.ly/3UxI6nH

1

Sorry to be the bearer of evil tidings, but UK-GDPR rules apply to every business, no matter how large or small you are - it's not like Health & Safety in this respect!  If you collect personally identifiable information, you are liable for it under UK-GDPR. So, if you get it wrong - how much could it cost you?  Well, UK-GDPR gives the Information Commissioner's Office the power to impose fines of up to £17.5 million or 4% of the total annual worldwide turnover in the preceding financial year (whichever is greater) for breaches of the UK-GDPR.  That may not seem a lot, particularly if you have a small turnover, but even so - a small amount of a small turnover will still hurt! It simply doesn't make sense to risk it!  If you don't need the records, call us, and we'll set you up with a shredding facility. No more worries!  #securestorage #securedata #recordsmanagement #gdpr #datadestruction #weee #papershredding #SMBRM #MakingLifeSafer https://bit.ly/3UxI6nH

1

💡 The National Cyber Security Centre have released a report on the findings from an evaluation on the impact of the Cyber Essentials Scheme 💡 Many of the findings make me question why more businesses don't become certified, and why Cyber Essentials isn't a compulsory certification for businesses in the UK... ❗ Most Cyber Essentials users surveyed for this impact evaluation (82%) are confident that the technical controls provide protection against common cyber threats, while a similar proportion (80%) believe they are helping to mitigate cyber security risks within their organisation.  ❗ Almost two thirds (64%) of Cyber Essentials users agree that being certified through the scheme better enables their organisation to identify where they experience a common, unsophisticated cyber attack.  ❗ Most Cyber Essentials users (85%) believe that the scheme has directly improved their understanding of cyber security risks, while an even greater proportion (88%) believe that the scheme has directly improved their understanding of the steps they can take to reducing those risks.  ❗ Whilst arguably a subjective measure, Cyber Essentials offers peace of mind against the potential reputational, financial and legal consequence of a cyber attack. In particular, most scheme users (80%) identify a commercial benefit that being certified can reduce the financial cost to their organisation of a common, unsophisticated cyber attack.  ❗ Most Cyber Essentials users (91%) say that the scheme has directly improved their confidence at being able to consistently implement steps to reduce cyber security risks. They generally say they are keeping on top of Cyber Essentials scheme requirements regularly through established internal processes, which is helping to boost their confidence further. Most scheme users (91%) also believe that Cyber Essentials has directly improved their confidence in being protected in the event of such an attack.  ❗ Most Cyber Essentials users (79%) believe that the scheme has a positive impact on the confidence of their own clients and customers. A fifth (20%) of organisations that had never obtained Cyber Essentials are of the same view, which suggests that some of their clients would ideally like to see evidence of certification. ❗ Just under half of Cyber Essentials users (48%) report saving time on cyber security due diligence where a potential supplier is CE certified, rising to 59% where a potential supplier is CE Plus certified. This time can then be used by organisations in other ways. (It is important to note here that there are currently fewer CE Plus certifications compared to standard CE certifications). The full study is here: https://lnkd.in/dRDUmVsR #cyberessentials #ncsc #businessrisk #protectingyourfinances

8

Covid was devastating there were positive consequences to the trying times we all faced. That of the UK National Health Service (NHS) developing an ability to analyse and share highly sensitive health data for obvious reasons. They built multiple Trusted Research Environments (TRE) to allow carefully curated access to data for research to be conducted. This progressed a conversation to Secure Digital Environments (SDEs) as a concept which developed the thinking into provision of a national TRE. The National TRE is an SDE for all health data in the UK generated by the NHS to be accessed by any accredited researcher for any analysis they desire for the improvement of human health. This is quite a blog, not in amount of text but the potential for all humans: One giant step for secure data access https://buff.ly/3HPE2eU "Our TRE service proved invaluable in understanding the impact of COVID-19 and the efficacy of treatments, but it wasn’t scalable or flexible enough for the wider community of researchers who we want to support. Two and a half years later, we are evolving the service to become a national Secure Data Environment. The national SDE platform delivers an improved experience for users by introducing a virtual desktop that hosts powerful analysis and interrogation tools such as: 👍 Databricks - a collaborative analytics platform that supports SQL and Python languages for the analysis of big data in the cloud 👍 Rstudio - a data analysis tool for R, a programming language for statistical computing and graphics 👍 Gitlab, the code management and code version control tool, is also integrated with the national SDE and provides users with a secure, cloud-based repository to store and back-up versions of code when using Databricks and RStudio. It also allows approved users with the same data sharing agreement to work collaboratively with their colleagues in shared project folders. The national Secure Data Environment, with data security as its focus, will reduce the need for other similar national environments to be created elsewhere in the system. It will also enable more collaboration amongst the research community and reduce the time and cost of research – with the ultimate aim of improving and saving lives." #gdpr #dataprotection #research #personaldata #researchers #innovation #futurism #technology #data #future #regulation #compliance #privacy #DataSavesLives #economics #economy #funding #machinelearning #privacypreservingtechnologies #privacyenhancingtechnologies #TRE #TrustedResearchEnvironments #ai #datasharing #sharing #ICO #DataSharing #DPO #DataProtectionOfficer #TheEvidenceQuarter #SDE #SecureDataEnvironments

2

1 Comment