A critical vulnerability in Cisco Identity Services Engine (ISE) allows remote attackers to gain full control. Learn who’s affected and how to stay protected.

The post Advisory: Cisco ISE Vulnerability Alert appeared first on CyberHoot.

A good way to start any compliance project is with a gap analysis to determine both where your current practices fall short of your obligations and where you should focus to bring them up to standard. When it comes to the UK GDPR (General Data Protection Regulation) and DPA (Data Protection Act) 2018, it’s also important to carry out gap analyses on a regular basis to ensure you continue to fulfil your legal obligations, especially when your data processing activities – and the personal data you process – change. Our GDPR Gap Analysis service uses our proprietary GDPR RADAR™ assessment

The post Nine Steps to Conducting a GDPR Gap Analysis appeared first on IT Governance Blog.

The global craze around cryptocurrency has fueled both innovation and exploitation. While many legally chase digital gold, cybercriminals hijack devices to mine it covertly. Recently, we encountered a phishing website impersonating a well-known bank, hosting a fake Android app. While the app does not function like a real banking application, it uses the bank’s name […]

The post Android Cryptojacker Disguised as Banking App Exploits Device Lock State appeared first on Blogs on Information Technology, Network & Cybersecurity | Seqrite.

IASME’s Cyber Essentials Readiness Tool and how it helps you prepare for certification Cyber Essentials is a UK government-backed certification scheme that helps organisations protect themselves from around 80% of common cyber threats. It’s widely recognised as a minimum standard for cyber security assurance and is often required in public-sector procurement contracts. The certification process is managed by IASME (the IASME Consortium), which licenses certification bodies – such as IT Governance Ltd – to carry out Cyber Essentials and Cyber Essentials Plus certifications. What is the Cyber Essentials Readiness Tool? The Cyber Essentials Readiness Tool, developed by IASME on behalf

The post Are You Ready for Cyber Essentials? appeared first on IT Governance Blog.

  Under the GDPR (General Data Protection Regulation), organisations must create a data retention policy to help them manage the way they handle personal information. But how long can you keep personal data for? If you keep sensitive data for too long – even if it’s being held securely and not being misused – you may still be violating the Regulation’s requirements. That might sound strict, but there’s a good reason for it. In this blog, we explain why that’s the case, how data retention policies work and how you can create one in line with the GDPR’s data retention

The post How to Write a GDPR Data Retention Policy – with template appeared first on IT Governance Blog.