information security Archives - Page 2 of 2

Graphic quoting GCHQ Director Anne Keast-Butler's 2026 Annual Lecture at Bletchley Park: "From boardrooms to living rooms" — Cambridge Risk Solutions commentary

“From Boardrooms to Living Rooms”: What the GCHQ Director’s Bletchley Speech Really Said

1 Comment / Information Security & ISO 27001 / Helen Molyneux

“From Boardrooms to Living Rooms”: What the GCHQ Director’s Bletchley Speech Really Said It’s rare for the Director of GCHQ to speak in public. Anne Keast-Butler said as much herself this morning, standing at Bletchley Park to deliver the first annual GCHQ lecture. The fact that she felt compelled to do so tells you something

“From Boardrooms to Living Rooms”: What the GCHQ Director’s Bletchley Speech Really Said Read More »

Empty distribution warehouse with idle conveyor belt and lone worker facing a blank screen — illustrating the operational impact of a cyber incident

M&S just told us exactly what a cyber incident costs. Are you ready for yours?

1 Comment / Information Security & ISO 27001 / Helen Molyneux

M&S just told us exactly what a cyber incident cost a UK business. Are you ready for yours? Yesterday, Marks & Spencer published its full-year results. Profits down 23.8%. Fashion and home revenue down 7.7%. £131 million in direct costs attributed to a single cyber incident. And all of it traceable back to a third-party

M&S just told us exactly what a cyber incident costs. Are you ready for yours? Read More »

A blurred figure walks past rows of colour-coded medical records files in a hospital records room

48 staff. No dismissals. No ICO investigation. The Southport records breach tells us everything we need to know about insider threat.

Leave a Comment / Company News / Helen Molyneux

48 staff. No dismissals. No ICO investigation. The Southport records breach tells us everything we need to know about insider threat. When the news broke this week that 48 NHS staff had inappropriately accessed the medical records of Southport attack victims — and that the highest sanction any of them received was a final written

48 staff. No dismissals. No ICO investigation. The Southport records breach tells us everything we need to know about insider threat. Read More »

Official certification stamp with the word 'CERTIFIED' in red ink.

How to Audit Information Security Effectively

Company News / DOWO

How to Audit Information Security Effectively In today’s digital landscape, safeguarding sensitive data is a top priority for every organisation. Conducting an internal audit of information security is a crucial step in identifying vulnerabilities, ensuring compliance, and strengthening overall security measures. This guide outlines the essential steps to effectively audit information security and implement best […]

How to Audit Information Security Effectively Read More »

Diagram of key information security controls including access, network, and physical security.

Post Office scandal highlights Information Security Failings

Company News / DOWO

It is probable that the Post Office scandal highlights information security failings by both the Post Office and their contractor, Fujitsu, some of which I will summarise in this short blog. I, like much of the adult population of the UK, have watched, appalled and angry, as the docu-drama Mr Bates vs the Post Office […]

Post Office scandal highlights Information Security Failings Read More »

ISO 27001 information security management system standard document.

ISO 27001 pdf – is it free?

Company News / DOWO

It is interesting to note the number of searches for ISO 27001 pdf, or even the number of searches for a free version of the standard. This presents some interesting questions and considerations, not least those of ethics! Regardless of the fact that most ISO standards are derived by a group of volunteers, the copyright […]

ISO 27001 pdf – is it free? Read More »