Cyber Security Consultancy: Access Management Essentials
Introduction The organisation is thriving, built from the ground up and with many loyal customers. It hasn’t been easy –surviving recessions, global pandemics and even world wars. Then one day, it all falls apart… An employee logs in using their password – but it’s weak and easily guessed. Behind the scenes, the credentials are exploited […]
Legal and Regulatory Lessons from Real-World Breaches
Introduction An organisation has a mixture of technology, new and old. A third party provides IT support. Then it happens… Suddenly, a legacy system stops working. Operations grind to a halt. There’s a massive reliance on old technology. The third-party IT team spent days getting the system back online. There are clear signs of a […]
Why Organisational Structure Matters in a Cyber Security Crisis
Introduction Imagine an organisation experiencing super heavy demand. Everyone’s supporting and juggling multiple roles – working together to get the job done, with no designated lead, and an assumption that everything is covered. Then it happens… A suspicious email is delivered – undetected. A staff member clicks it. Malicious software begins to spread across the […]
Cyber Security Consultancy: Why Planning Prevents Costly Breaches
Introduction The company website is attracting thousands of customers, and orders are flowing smoothly. Everything looks good. Then it happens… You find out that customer credit cards have been compromised. The website is suddenly a key point of focus – for the wrong reasons. A cyber-attack has led to the unauthorised collection of customer […]
ICO Privacy Notice Generator: A Free Tool for UK Organisations
Introduction You run an organisation in the UK, supporting many customers. One day, a concerned client contacts you, asking how their personal information is being stored and used. You pause to think… Names, contact details, and personal information are being collected – but does anyone really know how it’s controlled? There was a time you […]
Email Password Compromise Check
Introduction Imagine waking up to find your personal information has been compromised in a data breach. The attackers have access to your accounts and their using them against you – they’ve gained unauthorised access and are causing huge disruptions. Implications could be financial, legal, psychological and reputational. What if it would have been possible […]
NCSC Check Your IP Address and Website
Introduction Imagine discovering that your company’s website has been compromised, a cyber criminal has access to your data, has been able to inject malicious software, and has defaced your website. What if this could have been prevented by using a free and simple tool – provided by the National Cyber Security Centre (NCSC)? In […]
NCSC Check Your Email Security
Introduction Imagine receiving a call from your most valuable supplier, worried that their payment for the month had not been processed. You’re sure that it had and give them assurances that the payment had been made. You ask them to double-check. During the conversation, you explain that you had actioned their request (from a few […]
The Importance of Multi-Factor Authentication (MFA)
Introduction Imagine building a thriving business, surviving recessions, adapting with technology, and employing hundreds of people – with an annual turnover of £94 million, more than £100,000 a year is spent on IT and cyber security. Then overnight, that’s all taken away. The company goes into administration. Operations cease, and hundreds of jobs are […]
The Importance of Vulnerability Fixes
Introduction Imagine hackers scanning the internet, looking for access. They’re using artificial intelligence and machine learning to automate and speed up their processes. They find a missing security patch, an outdated system or a misconfiguration to gain a foothold. They make their way to the data and copy it to their own location. They […]