The added bonus of an effective risk management process
Risk Management + Accountability = Increased likelihood of approval.
ISO27001, DORA, NIS2: They’re all about managing risk.
Risk management is at the centre of ISO 27001, DORA and NIS2. If you don’t believe me, see how many times risk is mentioned in each of them.
Cyber 3-2-1: Your MSP could be your MSV, a bride’s dream becomes a nightmare, and Donie O’Sullivan gets scammed
Cyber 3-2-1: Your MSP could be your MSV, a bride’s dream becomes a nightmare, and Donie O’Sullivan gets scammed.
What have ISO 27001, DORA, and NIS2 got in common?
ISO 27001. DORA. NIS2. They are all about risk management.
Cyber 3-2-1: Questionable ethics in Avast, a chatbot on a sugar rush, and more problems with SMS security codes.
Cyber 3-2-1: Another reason to stop using SMS for security codes, some questionable ethics in Avast, and your chatbot could be as reliable as a child on a sugar rush.
NIST CSF: Version 2.0 is here.
The NIST Cybersecurity Framework (CSF) has just been updated to Version 2.0. Here’s why you should take a look.
Cyber 3-2-1: 500k to the wrong account, checking out of LinkedIn, and Lockbit bites the dust.
Cyber 3-2-1: Local authority sends €500k to a ‘spurious’ account, North Korea loves AI and LinkedIn, and the Lockbit ransomware operation is taken down by 11 law enforcement agencies.
Information Security is not about Technology.
ISO27001 reminds us that information security is not just about technology.
Cyber 3-2-1: Why you don’t care, shouldn’t care, but should care.
Cyber 3-2-1: You don’t care about cyber security. It doesn’t matter whether cyber crime costs $8 trillion or $8 billion. And you should care if someone tells you to put all of your cash in a shoebox.
DORA proportionality, elephants, and the Leaving Cert.
What I really think about the theory and reality of proportionality in DORA.