In an ideal world, it would be possible for organizations to prevent hacking. Given the many routes in to any given business coupled with social engineering tactics, it’s impossible to prevent hacking ...

It’s often forgotten there are three types of security controls. Administrative controls in terms of policies are easy to remember, since this is usually first on an auditors list of requested ...

It’s no longer just data that is lost in a breach, it is no longer just a question of financial loss: it has become a question of basic corporate survival. Bricks and mortar trading is in decline ...

Nov. 15 looms large for corporate executives who will soon have to certify compliance with Section 404 of the Sarbanes-Oxley Act. Their assertions on the effectiveness of internal controls over ...

January 2025 is a big month for the finance industry – and the clock is ticking. The Digital Operational Resilience Act (DORA) is set to shape how financial entities, such as banks, insurance ...

Technical controls update includes revisions surrounding the use of cloud services, multi-factor authentication, and password management. New pricing structure better reflects organisational size and ...