A US Senator points out why he thinks someone with IT technology experience is not necessarily qualified to be a Chief Information Security Officer. It's a reminder of why the majority of ISO27001 is not about technology.
A recent ransomware attack shows the SEC filing deadline is starting to bite.
Cyber 3-2-1: SEC requires public disclosures of cyber attacks, Russians target staff through Microsoft Teams, and 5,000 businesses in Ireland suffer because staff members were fooled by SMS messages.
Cyber 3-2-1: It’s not as simple as “Windows 7 = bad / Windows 10 = good”, or “Password = bad / Passwordless = good”. But it certainly is as simple as “2FA = Good”. This week’s action: Test your backups
