In Depth

In Depth

Security policy and user awareness

• How gamifying cyber training can improve your defences

  Security training is the cornerstone of any cyber defence strategy. With ever-escalating online threats, it is now more important than ever that this training is an engaging experience  Continue Reading

• Will the OCSF create an open and collaborative cyber industry?

  The Open Cybersecurity Schema Framework promises to transform security data analysis and collection, but there are challenges around adoption  Continue Reading

• What do the US’s new software security rules mean for UK organisations?

  The White House announced recently that all software supplied to the US government and its agencies needs to be secure, so what does this mean for the UK and EU security sectors?  Continue Reading

• What to look for when taking out a cyber insurance policy

  We look at the steps organisations need to take when buying cyber insurance  Continue Reading

• The cyber security impact of Operation Russia by Anonymous

  The campaign against the Russian government by Anonymous surprised many with the depth and scale of the cyber attacks. What can we learn from this online war?  Continue Reading

• Secure everything, not just the weakest link

  The rise in cyber attacks on supply chains has expanded the role of IT security chiefs and the complexity of keeping organisations secure  Continue Reading

• What the world can learn from Saudi Arabia’s fight against industrial control system attacks

  Iran learned from attacks on its infrastructure and unleashed similar malware on Saudi Arabia. The world has now gained valuable lessons from the Saudi response  Continue Reading

• What the EU’s content-filtering rules could mean for UK tech

  EU proposals to clamp down on child sexual abuse material will have a material impact on the UK’s technology sector  Continue Reading

• Attack of the clones: the rise of identity theft on social media

  The proliferation of social media has resulted in the rise of identity theft on these platforms, with accounts copied for fraudulent or malicious purposes. What can be done to mitigate it?  Continue Reading

• How to retain cyber talent in the Great Resignation

  The cyber security industry is experiencing alarming rates of resignations, leaving organisations vulnerable to cyber attacks. How can we better retain cyber talent?  Continue Reading

• Recruitment risks: Avoiding the dangers of fraudulent candidates

  Tech companies are seeing an increase in fraudulent job applications, with associated impacts on risk and cyber security. So how can organisations protect themselves from fraudulent applicants while ensuring they recruit the best talent?  Continue Reading

• How can I avoid an exodus of cyber talent linked to stress and burnout?

  Cyber security professionals have played a crucial role during the pandemic, yet many feel like their employers aren’t providing adequate mental health support and have considered quitting their jobs as a result. What can employers do to help them?  Continue Reading

• It takes a village: Protecting kids online is everyone’s responsibility

  The rapid uptake of smartphones among children has contributed to the increasing number of cases of cyber bullying and online grooming. Is this an educational issue or a cultural problem, and can modern enterprise help?  Continue Reading

• How Dutch hackers are working to make the internet safe

  We hear how the personal mission of a Dutch hacker grew into a serious organisation with international ambitions  Continue Reading

• What neurodivergent people really think of working in cyber security

  Many firms are filling cyber security skills gaps by hiring neurodivergent talent – but more support is needed for neurodivergent cyber security professionals, writes autistic tech journalist Nicholas Fearn  Continue Reading

• Navigating PIPL: European businesses plot their next steps into China

  How does China’s strict new Personal Information Protection Law impact European businesses?  Continue Reading

• Is the IT sector beset by fear-mongering?

  The arms race between hackers and security teams has led to a plethora of new technologies, but it can be hard to differentiate between sensible cyber purchases and those that are promoted by exaggerating risk  Continue Reading

• Digital surveillance of remote workers may increase enterprise risk

  From productivity tools to security threats, we explore how digital surveillance is forcing remote workers towards shadow IT  Continue Reading

• How to manage endpoint security in a hybrid work environment

  The future of the workplace is clearly hybrid, but this has untold implications around endpoint security. How can businesses overcome these?  Continue Reading

• Online Safety Bill puts user protection onus on platform providers

  The Online Safety Bill will place new duties and responsibilities on online platforms accessible from the UK, but as it currently stands, it contains several grey areas  Continue Reading

• Back on the office network: What are the risks for mobile users?

  Many people are returning to offices and bringing their mobile devices with them. What are the cyber security implications of this?  Continue Reading

• Five ways to ensure remote working security and compliance

  A mix of on-site and remote working has become a fact of life for many organisations. We look at five key things you should consider to ensure compliance and security  Continue Reading

• The rise and rise of supply chain attacks

  Supply chain attacks in Asia-Pacific and elsewhere have intensified as cyber threat actors look to exploit the weakest links in business and digital supply chains  Continue Reading

• What the Telecommunications (Security) Bill means for UK industry

  The Telecommunications (Security) Bill is intended to reinforce the security of the UK telecommunications infrastructure, but what are the implications for industry?  Continue Reading

• How do I get my users to pay attention to security training?

  As cyber security risks grow daily, businesses must educate staff about these through cyber awareness training. But how can they ensure this is taken seriously by employees?  Continue Reading

• Deploying productivity monitoring software ethically

  While software that tracks the activities of staff can be helpful to companies with a remote workforce, managers must consider employees’ concerns and privacy  Continue Reading

• Why some jobseekers have turned to cyber crime during the pandemic

  Research shows that many people have been seeking cyber crime-related work on the dark web, but why?  Continue Reading

• Ecolabels and data sanitisation key to recycling and reusing IT assets

  Ecolabels on hardware and data sanitisation of devices are key to recycling and reusing old IT equipment respectively, helping enterprises avoid unnecessary asset destruction and contributing to increasingly high levels of electronic waste globally  Continue Reading

• Backup appliances the hot topic for Pas-de-Calais fire brigade

  With requirements for strict, long-duration backup and archiving, French fire brigade set out to replace optical media with a StorageCraft appliance and disaster-proof storage  Continue Reading

• How to choose the right email security service for your organisation

  With email security threats growing rapidly, businesses can quickly identify and block these by using a top email security service. Here’s how to select the right provider  Continue Reading

• Anti-money laundering technology must operate in a collaborative ecosystem

  With new technologies making it easier for banks to spot money laundering activity, we look at why the problem persists at scale, finding that ecosystems and collaborative processes need to be built  Continue Reading

• India is becoming a hotspot for IoT

  India is set to be a cradle for internet of things deployments thanks to its vibrant economy and its potential to play a bigger role in global manufacturing  Continue Reading

• Does email security need a human solution or a tech solution?

  People spend a lot of time using email systems, but many do not realise that this makes them attractive targets for cyber criminals. With education and technology, businesses can tackle this problem head-on  Continue Reading

• Dealing with the challenge of beg bounties

  The rise of so-called beg bounties is becoming a challenge for security teams, and can be a drain on time and resources. But what is a beg bounty, and how does it differ from a bug bounty?  Continue Reading

• Is it time to ban ransomware insurance payments?

  The former head of the NCSC recently called for a dialogue over whether or not it is time to ban insurers from covering ransomware payments. Is he on the right track?  Continue Reading

• How can healthcare organisations fight increased cyber crime in 2021?

  As the Covid-19 pandemic enters what may be its most dangerous phase, we explore how healthcare organisations can ward off cyber threats while preserving their ability to deliver critical care  Continue Reading

• Picking the right IAM tools is based on more than today’s needs

  With remote working now normal, it is important to take proactive steps in managing credentials across platforms that can be subject to multiple data protection regulations. IAM services can streamline this process, but care must be taken to ensure ...  Continue Reading

• The nation state threat to business

  The SolarWinds hack shows the widespread damage possible from a nation state cyber attack. What is the threat to business and how can it be mitigated?  Continue Reading

• Security Long Reads: Cyber insiders reveal what’s to come in 2021

  In this long read, we gather together the thoughts of cyber security insiders from across the industry to get their take on what will happen in 2021  Continue Reading

• Patching: Balancing technical requirements with business considerations

  With an increasing reliance on subscription models alongside the regular patching of software, updates have become an essential part of modern business practices. However, care needs to be taken to ensure the optimum patching process is implemented  Continue Reading

• Post-pandemic approaches to IAM for cloud security

  Cloud technology may have saved businesses from catastrophe during the pandemic, but it has also introduced additional challenges around identity and access management. Here’s why IAM policies are crucial in the new normal  Continue Reading

• This Christmas, Covid-19 heightens retail security risks for everyone

  Do you think it’s only retailers and consumers who need to consider cyber security when shopping online during the holidays? You’re dead wrong. This year, the Covid-19 pandemic and the shift to remote working has thrown a spanner in the works  Continue Reading

• How to build an effective vulnerability management programme

  As cyber criminals increasingly look to exploit vulnerabilities in software and hardware, businesses must build and implement an effective vulnerability management programme to counter this growing threat  Continue Reading

• Credential stuffing: When DDoS isn’t DDoS

  Ten years ago, credential stuffing attacks posed a comparatively minor threat, but with an escalating number of data breaches, the threat posed has now increased. What are the solutions to this very human problem?  Continue Reading

• Why securing the DNS layer is crucial to fight cyber crime

  Domain name system security is often overlooked by organisations, but focusing on this layer could actually improve the effectiveness of cyber security strategies. We explore the latest DNS trends and best practice  Continue Reading

• Double extortion ransomware attacks and how to stop them

  As ransomware attacks increase, hackers are diversifying their tactics to get victims to hand over larger sums of money. We investigate the rise of double extortion attacks  Continue Reading

• Getting physical with datacentre security

  Whether it is natural disasters, terrorism or break-ins, datacentres will be vulnerable to a range of risks unless they are physically secured. Here’s how you can improve the physical security of your datacentre  Continue Reading

• APT groups’ mobile momentum finally faces resistance

  State-backed APT groups are increasingly targeting mobile devices as Covid-19 puts the spotlight on remote working infrastructure security. We explore how the industry is fighting back  Continue Reading

• How to apply zero-trust models to container security

  Containers have become a common fixture in software development, but they have resulted in new concerns for security teams. Is zero-trust the answer to tackling them?  Continue Reading

• Coronavirus: How to go back to the office safely and securely

  Security teams should be used to supporting remote workers effectively by now, but what’s going to happen when people start returning to their offices? We look at the risks and how to address them.  Continue Reading

• GDPR at two: How far we’ve come, how far we still have to go

  Marking two years of the General Data Protection Regulation, industry voices weigh in on the state of data protection and privacy, consider what has changed, and what still needs to change  Continue Reading

• What are the security priorities for the post-coronavirus world?

  The Covid-19 pandemic is forcing massive change across the business world and things may never go back to normal. What does security look like in this new world, and what will buyers be prioritising?  Continue Reading

• Contact tracing: The privacy vs protection debate

  The Covid-19 pandemic has necessitated extreme measures not seen in peacetime for over 100 years. Contact-tracing apps are being developed as a tool for managing the pandemic, but are they a step too far?  Continue Reading

• A carrot-and-stick approach to fixing cyber security complacency

  With a majority of IT decision-makers holding the opinion that their employers are complacent when it comes to data protection, we look at what needs to be fixed, and how to fix it  Continue Reading

• Why security validation matters

  FireEye’s top executives in Asia-Pacific discuss the benefits of security validation and offer their take on the region’s cyber threat landscape  Continue Reading

• The AWS bucket list: Keep your cloud secure

  Misconfigured cloud installations risk billions of records being exposed, damaging organisations’ finances and reputations. Paying attention to securing AWS storage buckets is a simple matter  Continue Reading

• Coronavirus: How to implement safe and secure remote working

  Find out what CIOs and CISOs need to know to enable their end-users to work remotely and stay secure during the Covid-19 coronavirus crisis, and learn how users can help themselves  Continue Reading

• Is this Netflix-style thriller the future of security training?

  Cyber awareness specialists at KnowBe4 reckon that bringing Netflix-style production values to corporate videos heralds a new approach to security training  Continue Reading

• Startup uses machine learning to support GDPR’s right to be forgotten

  Non-intrusive algorithms enable users to track which companies hold their data, so they can take it back  Continue Reading

• Whisper it… but could a cyber attack be good for your career?

  All too often it’s the CISO who carries the can for an enterprise security failure, but this might not be a bad thing. There’s lots of evidence to suggest that falling victim to a cyber attack may actually enhance your CV  Continue Reading

• Human factors are critical to securing digital transformation

  Sourcing the latest cyber security technology to support digital transformation projects is all well and good, but it’s meaningless if you fail to address your organisational culture and the people within it  Continue Reading

• Get ready for CCPA: Implications for UK businesses

  The California Consumer Privacy Act, a wide-ranging data privacy and consumer protection law, comes into effect on 1 January 2020. How does CCPA differ from the EU GDPR regulations and what are the responsibilities for UK businesses operating in the...  Continue Reading

• Taking responsibility for security in the cloud

  From accidental leaks to full-on data breaches, maintaining security across cloud services is becoming a headache for enterprises. What questions should organisations be asking of their cloud service provider and, ultimately, whose responsibility is...  Continue Reading

• Security puzzle calls for some joined-up thinking

  The age of digitisation brings new risks to organisations, so security needs to be more integrated  Continue Reading

• McAfee’s push for secure cloud adoption

  Organisations must do more to secure their cloud environments as malicious actors increasingly focus their attention on exploiting cloud vulnerabilities, says McAfee  Continue Reading

• Data management strategies are evolving – so must enterprises

  A growing number of data-driven initiatives, alongside heightened demand for security in governance, data management and compliance, has led to the rise of a more holistic approach – integrated risk management  Continue Reading

• Mitigating social engineering attacks with MFA

  The growing frequency of social engineering attacks highlights the increasing need for organisations to take steps to mitigate the effects of phishing  Continue Reading

• How IT pros are building resilience against email security threats

  For most people, emails are an easy and harmless way to communicate in the workplace, but they could also be a security disaster waiting to happen  Continue Reading

• Facebook’s privacy game – how Zuckerberg backtracked on promises to protect personal data

  Facebook promised its users privacy then quietly abandoned its promises in pursuit of profits. Now it faces antitrust regulation  Continue Reading

• A guide to choosing cloud-based security services

  Cloud-based security services can help organisations with a growing cloud footprint to reduce cost and address the manpower crunch in cyber security  Continue Reading

• The rise of DevSecOps

  The increasing complexity of security threats facing enterprises is leading to DevSecOps approaches, which combine operations and development with security, so that all business units are involved in security operations  Continue Reading

• The future of network-connected device security

  The proliferation of poorly secured network-connected devices has prompted the UK government to publish new best practice guidelines. Do these go far enough?  Continue Reading

• Securing the SD-WAN: The next network challenge

  Every time an enterprise weighs up whether or not to try SD-WAN, security is an essential part of the picture  Continue Reading

• Getting a handle on mobile security in your enterprise

  Everyone now has a mobile device at work, so how can enterprises ensure they are secure?  Continue Reading

• Why GDPR is great for SMEs

  SME laggards facing potential fines for non-compliance should wake up and smell the tasty carrot of a leaner, smarter business post-GDPR  Continue Reading

• How UK organisations are leaving themselves open for cyber attack

  UK organisations are leaving themselves wide open to cyber attack despite huge investments in cyber security systems, according to two former hackers now working in cyber defence  Continue Reading

• The cyber threats lurking within every company

  Insider threats have been around for a long time, but it is only recently that people have begun to acknowledge the true danger they pose  Continue Reading

• Interview: James Bamford on surveillance, Snowden and technology companies

  Investigative journalist and documentary maker James Bamford was among the first to uncover the secrets of the US National Security Agency and its global surveillance  Continue Reading

• The true cost of a cyber security breach in Australia

  The costs of cyber security breaches can quickly add up with fines, reputational damage and overhauls to network security all hitting the coffers. The case of one Australian firm shows why paying a ransom to a hacker might be tempting.  Continue Reading

• The security dangers of home networks

  Most companies take reasonable steps to protect their networks from virus attacks, but one area of vulnerability that is often overlooked is infection from employees’ home networks  Continue Reading

• How to ensure strong passwords and better authentication

  Five steps to ensure stronger passwords and better authentication to reduce the threat of business data theft  Continue Reading

• How to reduce the risk of social engineering attacks

  Implement simple checks to reduce the risk of the main types of social engineering attacks  Continue Reading

• Top tips for remote and mobile workers to improve their cyber security

  Steps remote and mobile workers can take to improve cyber security on mobile devices, using public Wi-Fi and computers, and handling USB devices  Continue Reading

• Bill Binney, the ‘original’ NSA whistleblower, on Snowden, 9/11 and illegal surveillance

  Always a patriot: Computer Weekly talks to Bill Binney, the senior NSA official who blew the whistle before Edward Snowden  Continue Reading

• How to secure the SDN infrastructure

  As more enterprises look to deploy software-defined networking, the need for security from the ground up should not be underestimated  Continue Reading

• Hacktivism: good or evil?

  IT lawyer Dai Davis looks at the rise of hacktivism and its impact on business and international politics  Continue Reading

• Top 10 Android security tips

  As Android becomes more prevalent in the enterprise, Computer Weekly gives you 10 top tips for keeping your devices secure  Continue Reading

• Big data journalism exposes offshore tax dodgers

  How journalists harnessed big data to challenge offshore financial secrecy  Continue Reading

• How to create a good information security policy

  Information security policies provide vital support to security professionals, yet few organisations take the time to create decent policies  Continue Reading

• How to find the most vulnerable systems on your internal network

  Most corporate networks share common vulnerabilities, but many could be mitigated with education in “hacker thinking” for technical staff  Continue Reading

• Social media: A security challenge and opportunity

  Generation Y workers are posing increasing security challenges to their employers as they share data unreservedly  Continue Reading

• CW500: Managing the mobile workforce (part 1)

  Mobile working has transformed Colt Telecommunications beyond recognition over the past three years  Continue Reading