Blog / CISO
Let us start by stating an age-old maxim : You cannot eliminate all risks. But you can reduce the level of risks to an acceptable standard. That’s why building an Information Security and Risk Management (ISRM) programme is essential. Our businesses generate an ever-increasing volume of data. So, in an era where information is currency, and cyber threats continue to evolve, an effective ISRM programme is a necessity. Let’s take a quick look at ISRM and what it takes to put in place an effective programme.CISO cybersecurity featured
We are operating in an era of expansive cyber-security breaches within both government and non-government organisations. As such, we must continue to build business resilience in the face of constant attacks. Failure to stay ahead of the curve will lead to major losses in the business environment and significant security risks for the country at large. Having worked with government security agencies and the local business community, we’ve seen first-hand what happens when you don’t have a resilient security system.cybersecurity culture CISO
We consistently recommend that you build a resilient business where cyber-security a priority. But what does organisational culture have to do with improving cyber-security? As most managers and CISOs know, one of the least static areas of business is cyber security. That’s because more than half of the fraud in the UK is conducted online. Therefore, in light of mounting attacks, it’s important to increase awareness at the company level. Plus, to ensure your cybersecurity policies are effective, you must get buy-in and action from all levels of staff.ciso security
Managing third-party risk is inevitable when you work with vendors, suppliers, contractors, and business partners. And the harrowing thing is that you have no control over their networks or security. On-off or snapshot assessments of third-party risks still leave your business vulnerable as neither your business nor the third-party’s operates in a static environment. As things change in real time, you need real-time intelligence to manage third-party risk in your firm.security insider-threat CISO
With insider threats, your biggest assets become your biggest risks. One of today’s most damaging security threat comes from trusted insiders. Insider threats can come from anyone in your organisation, from those with the highest access to your company data to those who you think have no access at all. Your insiders are both employees and third parties. The risk is at all levels. Its no wonder that 25% of all security incidents involve company insiders.
Topicsatlassian ciso cloud covid19 crime culture cybersecurity insider-threat malware remote-working security
If the Covid-19 pandemic has forced your organisation to adopt remote working for employees, it is very likely that you were required to roll out new...
We are operating in an era of expansive cyber-security breaches within both government and non-government organisations. As such, we must continue to...