IT governance
IT governance provides the core workflows and processes that help IT managers to oversee the successful functioning of the IT department, and to prove the value of IT to the business. Regulations and compliance are just as important as technological and management skills, and we highlight the best practice in IT governance and the example of successful IT leaders.
-
Feature
11 Jul 2023
Norwegian data privacy experts sound alarm over generative AI
Hundreds of millions of people embrace generative artificial intelligence, blissfully ignorant of what it’s doing to data privacy. Continue Reading
-
News
24 Apr 2023
Finland and Estonia deepen cross-border digital partnerships
Finland and Estonia, two global tech pioneers, are increasingly sharing their expertise Continue Reading
-
News
28 Jan 2022
Cyber skills gap affecting data privacy practice, finds ISACA
Organisations are struggling to fill both legal and technical privacy roles, with potentially damaging consequences, according to a report Continue Reading
-
News
27 Jan 2022
CISOs must get out in front of Ukraine cyber crisis, says NCSC
The National Cyber Security Centre is urging UK organisations to take steps to bolster their cyber security resilience in response to the ongoing Ukraine crisis Continue Reading
-
News
27 Jan 2022
Novel phishing campaign highlights need for MFA, says Microsoft
Microsoft details a new multi-stage phishing campaign that only affects victims without multifactor authentication in place Continue Reading
-
Feature
27 Jan 2022
Refrigeration firm freezes legacy backup for one Cohesity cluster
France-based Clauger had reached limits of capacity and complexity with multi-supplier legacy backup, so moved to one Cohesity cluster and gained restores that took mere minutes Continue Reading
-
Feature
27 Jan 2022
Navigating PIPL: European businesses plot their next steps into China
How does China’s strict new Personal Information Protection Law impact European businesses? Continue Reading
-
Feature
27 Jan 2022
Cloud-era disaster recovery planning: Setting strategy and developing plans
In the second in a series on cloud-era disaster recovery, we look at how to formulate a DR strategy and develop detailed DR plans for your organisation, while taking cloud services into account Continue Reading
-
Opinion
27 Jan 2022
Security Think Tank: Focus on ‘nudging’ to build effective cyber training
In-house or outsourced? What makes a good security training programme, and what questions should buyers ask when procuring training-as-a-service? Continue Reading
-
News
26 Jan 2022
MPs to debate landmark IoT security law
Proposed bill mandates tighter protections for connected products, and adds new rules for broadband roll-out into the bargain Continue Reading
-
News
25 Jan 2022
Prepare, but don’t panic, over supposed Russian cyber threat
A fresh alert from the US Department of Homeland Security may have IT security teams jumpy over the possibility that their organisations could be targeted by Russian state actors Continue Reading
-
News
25 Jan 2022
Cyber Essentials programme gets biggest update since launch
NCSC implements a thorough revision of its Cyber Essentials scheme to reflect the changing security landscape Continue Reading
-
News
25 Jan 2022
UK government launches internal cyber strategy
Multi-pronged government security strategy is designed to protect both core systems and public services Continue Reading
-
News
25 Jan 2022
Retailers mired by manual data integration
Retail relies on third-party data sources to drive business decisions and competitive pricing, but many struggle to pull in this data Continue Reading
-
News
24 Jan 2022
MPs say Online Safety Bill fails to tackle full range of harms
A DCMS select committee has warned that the Online Safety Bill should be expanded to cover more types of harmful content, such as child abuse material designed to circumvent content removal Continue Reading
-
News
21 Jan 2022
Tinder algorithm charging users more based on age
Popular dating app Tinder could have broken data protection and equality laws by using personal data about people’s age to set different prices Continue Reading
-
News
21 Jan 2022
Cyber pros: Don’t revel in REvil’s downfall just yet
The arrests of REvil’s alleged kingpins is a welcome step, but as with any disruption to cyber criminal activity, it is never wise to assume law enforcement action means the threat has passed entirely Continue Reading
-
News
21 Jan 2022
MoJ faces ICO enforcement over subject access requests backlog
Ministry of Justice receives enforcement notice from information commissioner over ‘substantial’ backlog of subject access requests described as being of ‘significant concern’ Continue Reading
-
News
20 Jan 2022
Ransomware attacks dropped 37% in December, claims NCC
Latest monthly data reveals a significant decline in ransomware attacks at the end of 2021, but a new, emergent gang is making waves Continue Reading
-
News
20 Jan 2022
Updated cyber security regulations proposed for managed services sector
The Network and Information Systems regulations are to be updated to include MSPs and outsourcers, following a spate of supply chain attacks Continue Reading
-
News
20 Jan 2022
Data of 515,000 vulnerable people stolen in Red Cross attack
The International Committee of the Red Cross is probing a cyber attack that has already seen the personal data of hundreds of thousands of the world’s most vulnerable people compromised Continue Reading
-
Opinion
20 Jan 2022
Security Think Tank: Cyber training is useless without staff empowerment
In-house or outsourced? What makes a good security training programme, and what questions should buyers ask when procuring training as a service? Continue Reading
-
News
19 Jan 2022
Investigators find Beijing 2022 app riddled with security flaws
Security flaws in Olympic app may put personal health data at risk of compromise in a man-in-the-middle attack Continue Reading
-
Feature
19 Jan 2022
Cloud-era disaster recovery planning: Assessing risk and business impact
In the first in a series on cloud-era disaster recovery, we provide a step-by-step guide to building firm foundations for the disaster recovery plan, with risk assessment and business impact analysis Continue Reading
-
News
19 Jan 2022
Twelve million jobs to be lost to automation in Europe by 2040
Millions of current jobs in Europe will be carried out by robots as software robots automate processes Continue Reading
-
News
18 Jan 2022
Police take down VPN linked to multiple ransomware hits
German police led a multinational effort to seize and take down the LabVPN service, which was allegedly used by cyber criminals to facilitate ransomware attacks Continue Reading
-
News
17 Jan 2022
Test police algorithms in court rather than legislate, Lords told
Police algorithms and their impacts should be tested and challenged in court, rather than controlled by new laws, says policing minister Continue Reading
-
Podcast
14 Jan 2022
Podcast: 2022 compliance preview – GDPR goes global
We talk to Mathieu Gorge, CEO of VigiTrust, about what’s looming in compliance, with regulations based on the principles of the General Data Protection Regulation plus the concept of cyber accountability Continue Reading
-
News
13 Jan 2022
Councillors refuse public release of IT audit of Hackney Psya ransomware attack
Hackney councillors claim an IT audit report is exempt for disclosure as it relates to action taken in relation to the prevention, investigation or prosecution of crime Continue Reading
-
News
13 Jan 2022
NCSC sounds alarm over Russia-backed hacks
The UK’s National Cyber Security Centre joins US calls to be wary of Russian state interference in critical national infrastructure IT systems Continue Reading
-
News
13 Jan 2022
ICO investigates police use of app to covertly record calls from mobile phones
Surrey and Sussex police forces call in regulators after 1,000 police officers downloaded an app to covertly record phone calls on police-issued mobile phones Continue Reading
-
News
12 Jan 2022
MEPs demand EU probe into Pegasus spyware abuse
A group of European Parliament Members has called for an EU-wide investigation into NSO Group’s Pegasus spyware after it emerged EU member states may have used it Continue Reading
-
News
12 Jan 2022
UK government bodies challenged on secure identity
Public sector bodies in the UK recognise secure identity and access management as critical to the roll-out of digital services, but face challenges in addressing this Continue Reading
-
News
12 Jan 2022
Microsoft fixes six zero-days in January Patch Tuesday update
A larger than of late Patch Tuesday update from Microsoft comes as defenders continue to grapple with Log4Shell Continue Reading
-
News
12 Jan 2022
Dutch cyber volunteers receive major funding boost
The Dutch Institute for Vulnerability Disclosure has received a $100,000 donation to expand the scope of its work Continue Reading
-
News
11 Jan 2022
Banks accused of neglecting customer security measures
Which? singles out Metro Bank, Virgin Money and TSB over insecure online banking processes Continue Reading
-
Feature
11 Jan 2022
A legal minefield called the metaverse
Will the metaverse create a $1tn revenue market? Who knows? How long will it take to reach this lofty potential? Who can tell? Will people invest across this emerging landscape of speculative riches? You bet Continue Reading
-
News
11 Jan 2022
Cyber security failure one of biggest risks facing countries and businesses, warns WEF
Cyber risks are among the top five risks facing organisations and governments over the next two to five years. Digital inequality and the over-crowding of space with communication satellites present further risks Continue Reading
-
News
10 Jan 2022
Ministry of Justice caught up in multiple cyber incidents
Besides multiple disclosed data breaches, department was also affected by two ransomware attacks Continue Reading
-
News
06 Jan 2022
France fines Facebook and Google over alleged cookie malpractice
French data protection authorities clamp down on tech platforms for purposely making it more burdensome for users to decline tracking cookies Continue Reading
-
News
05 Jan 2022
Google buys Siemplify in first phase of cyber investment
Once integrated into Google Cloud, Siemplify’s platform will serve as the basis for deeper security development at Google Continue Reading
-
News
30 Dec 2021
Top 10 technology and ethics stories of 2021
Here are Computer Weekly’s top 10 technology and ethics stories of 2021 Continue Reading
-
News
29 Dec 2021
Top 10 Nordic IT stories of 2021
Computer Weekly selects some of the biggest Nordic tech stories of 2021 Continue Reading
-
News
24 Dec 2021
Top 10 Benelux stories of 2021
Computer Weekly looks at the top IT stories from the Benelux region in the past year Continue Reading
-
Opinion
23 Dec 2021
Vulnerabilities to fraud are increasing across the board
As the pandemic continues to affect how we work, socialise, shop and conduct business, so it has increased opportunities for digital fraud and cyber crime. Jason Lane-Sellers explores the latest LexisNexis Risk Solutions ‘Cybercrime report’ Continue Reading
-
News
23 Dec 2021
Top 10 Middle East IT stories of 2021
The Middle East is about more than oil these days, with advanced technology industries developing across the region. Here are Computer Weekly’s top 10 Middle East IT stories of 2021 Continue Reading
-
Opinion
22 Dec 2021
A trial relying on computer evidence should start with a trial of the computer evidence
Learning from the Post Office Horizon scandal - the most widespread miscarriage of justice in recent British legal history Continue Reading
-
News
21 Dec 2021
Top 10 cloud storage, DR and datacentre storage stories of 2021
Key articles from 2021 that demonstrate the growing importance of cloud storage and disaster recovery, but also the snags that lead to cloud repatriation and difficulties restoring from the cloud Continue Reading
-
News
20 Dec 2021
Finnish government launches digital economy transformation projects
The Finnish government launches two transformation projects as part of the country’s mission to pioneer a digital economy Continue Reading
-
News
20 Dec 2021
Top 10 artificial intelligence stories of 2021
This year, artificial intelligence has moved to operationalisation, explainability and regulatory frameworks. Here are Computer Weekly’s top 10 artificial intelligence stories for 2021 Continue Reading
-
News
20 Dec 2021
Top 10 ransomware and backup stories of 2021
Key articles from 2021 that highlight the link between ransomware and snapshots and backup and their role in repelling attacks, plus effects of the pandemic on backup and recovery Continue Reading
-
Opinion
20 Dec 2021
Security Think Tank: Reframing CISO-boardroom relations
Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading
-
Opinion
17 Dec 2021
Security Think Tank: When will they ever learn?
Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading
-
Opinion
16 Dec 2021
Enabling secure remote working is once again a top priority
The pandemic has bought many new security risks, particularly around remote working. As the UK government once again urges people to work from home under its Plan B restrictions, these risks must be tackled as a priority Continue Reading
-
News
15 Dec 2021
Gig economy algorithmic management tools ‘unfair and opaque’
Report published by Worker Info Exchange warns of algorithmically enabled rights abuses in the gig economy, noting the insufficient transparency of employers and the lacklustre nature of legal redress Continue Reading
-
News
15 Dec 2021
After Log4j, December Patch Tuesday piles on the pressure
December’s Patch Tuesday update from Microsoft contains several critical CVEs, but this month all attention is focused on the fall-out from Log4Shell, and burn-out is becoming a real issue Continue Reading
-
News
15 Dec 2021
Digital Ethics Summit: Innovation needs regulation to be ethical
Experts attending the 2021 Digital Ethics Summit spoke out against the idea that regulation will stifle technological innovation, arguing that setting clear rules will produce more ethical innovation Continue Reading
-
Opinion
15 Dec 2021
Security Think Tank: Get to know your personal threat landscape
Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading
-
News
15 Dec 2021
UK government to take ‘whole-of-society’ approach to cyber
Second iteration of the UK’s National Cyber Strategy broadens its focus to build a ‘whole-of-society’ security posture Continue Reading
-
News
15 Dec 2021
CMA wants Apple and Google to open up mobile ecosystem
Interim report from Competitions and Markets Authority finds Apple and Google exert too much control over the mobile device market Continue Reading
-
News
14 Dec 2021
Almost half of networks probed for Log4Shell weaknesses
Close to half of corporate networks have already been actively targeted by individuals seeking to exploit the critical Log4Shell Apache bug Continue Reading
-
News
14 Dec 2021
Joint committee publishes report on improving Online Safety Bill
MPs and peers release report on Online Safety Bill following five-month inquiry into the draft legislation and make a number of recommendations on how it can be improved to deal with harmful content and abuse on the internet Continue Reading
-
E-Zine
14 Dec 2021
The rules for a safer internet
In this week’s Computer Weekly, as the government publishes the Online Safety Bill, we look at what the laws mean for internet services. A ransomware victim shares the insider story of the trauma of losing their corporate IT systems. And we ask, what happens when quantum computers get too powerful to verify their output? Read the issue now. Continue Reading
-
News
13 Dec 2021
What is Log4Shell, and why are we panicking about it?
It’s been described as a ‘design failure of catastrophic proportions’ that threatens the very fabric of the digital world. Find out what the Log4j2 Log4Shell panic is all about, and what you should do about it Continue Reading
-
Opinion
13 Dec 2021
Security Think Tank: There’s much more to do to secure hybrid workers
Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading
-
News
10 Dec 2021
C-suite’s biggest ransomware fear: Post-attack regulatory sanctions
Exposure to regulatory sanctions such as fines are the biggest worry for C-suite executives in the wake of a ransomware attack Continue Reading
-
News
09 Dec 2021
What are the challenges associated with the MITRE ATT&CK framework?
Businesses sometimes struggle to use the MITRE ATT&CK framework effectively. Learn more about some of the challenges, and how to overcome them Continue Reading
-
News
09 Dec 2021
UK and US to collaborate on privacy innovation contest
Joint UK-US innovation challenge contest centring on privacy-enhancing technology announced at Summit for Democracy in Washington DC Continue Reading
-
Opinion
09 Dec 2021
The power of AI can be unleashed with a focus on ethics
An EY survey reveals the public’s concerns around the growing use of artificial intelligence – but also the opportunities for organisations that take the right ethical approach Continue Reading
-
Opinion
09 Dec 2021
Security Think Tank: Good documentation could save your bacon
Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading
-
News
08 Dec 2021
Russia may be collaborating with US to bring cyber criminals to heel
Trustwave’s SpiderLabs says its analysis of chatter on underground dark web forums suggests cyber criminals are starting to panic that formerly ‘friendly’ governments are on their case Continue Reading
-
News
08 Dec 2021
CIO interview: Nicola Wadham, Financial Ombudsman Service
CIO Nicola Wadham brings Computer Weekly up to speed on the Financial Ombudsman Service’s IT challenges and successes Continue Reading
-
News
08 Dec 2021
UK privacy chief denies conflict of interest in new role
UK information commissioner will join a private law firm that represents technology companies she used to regulate, raising questions about conflicts of interest and drawing ‘revolving door’ criticisms Continue Reading
-
News
08 Dec 2021
Number of .uk domain suspensions at record low
Statistics from Nominet show how effective law enforcement action against cyber crime in the UK is paying off Continue Reading
-
News
07 Dec 2021
Investigation mounted into Spar supermarket cyber attack
Possible supply chain cyber attack left more than 300 Spar supermarkets unable to process credit card payments Continue Reading
-
News
06 Dec 2021
IT Priorities 2022: Pandemic’s long tail for cyber buyers
Pandemic response has been top of mind for cyber leaders these past 18 months, and as Covid-19 turns two, the TechTarget/Computer Weekly IT Priorities 2022 study shows buyers are still focused on how Covid has upended the workplace Continue Reading
-
News
03 Dec 2021
Serious violence duty in PCSC Bill would gut UK data rights
Proposed data gathering powers for UK police could override existing data protection rules, damage citizens’ trust in essential public services and further entrench discriminatory policing practices Continue Reading
-
Podcast
02 Dec 2021
COP26 reflections, tech sector reacts to Sunak on skills – Computer Weekly Downtime Upload podcast
Caroline Donnelly, Clare McDonald and Brian McKenna reflect on datacentres and climate change, the tech sector’s reaction to government IT skills investment, and the Post Office scandal story Continue Reading
-
Opinion
02 Dec 2021
Security Think Tank: Think people, processes and systems
Security learning is a career-long process, so as 2021 draws to a close, participants in the Computer Weekly Security Think Tank sum up the most important cyber lessons they’ve taken away from the past 12 months Continue Reading
-
News
01 Dec 2021
Kaspersky introduces cyber policy for bionic devices
Cyber firm Kaspersky has become one of the first organisations in the world to develop and implement a security policy covering the use of bionic devices and other forms of human augmentation Continue Reading
-
Opinion
01 Dec 2021
A ‘whole of society’ approach to cyber may be on the horizon
Nominet Cyber managing director David Carroll reflects on the NCSC’s latest annual review amid 2021’s fast-evolving threat landscape Continue Reading
-
News
01 Dec 2021
Cloud-based Redwood becomes latest challenger bank to make a profit
Cloud-based business bank becomes the latest of the new wave of challengers to achieve profit Continue Reading
-
News
30 Nov 2021
Compliance, device management a challenge for NHS cyber teams
Information gleaned by asset visibility specialist Armis reveals that despite improvements, some daunting security challenges still dog the NHS Continue Reading
-
News
30 Nov 2021
HP patches bugs in over 150 printer models
More than 150 HP multifunction printers are at risk of compromise through a series of newly disclosed vulnerabilities, one of them wormable Continue Reading
-
News
30 Nov 2021
Recovering from ransomware: One organisation’s inside story
In February 2021, French office equipment supplier Manutan fell victim to a DoppelPaymer ransomware hit. IT ops director Jérôme Marchandiau tells the inside story of the incident Continue Reading
-
News
30 Nov 2021
Over 100 civil society groups call for changes to EU AI Act
Civil, human and digital rights organisations sign open letter calling on European policymakers to put fundamental rights at the heart of the proposed Artificial Intelligence Act Continue Reading
-
News
29 Nov 2021
Second Mizuho executive quits after IT problems
IT failures have forced the CEO of Japanese financial services group to step down Continue Reading
-
News
29 Nov 2021
British Army picks Immersive Labs for cyber training
The British Army will make Immersive Labs’ security training platform available to all serving personnel Continue Reading
-
News
29 Nov 2021
Three latest trends and developments around the Mitre ATT&CK framework
Framework is set to receive important updates to help organisations and businesses evolve their cyber security. Learn more about what it offers Continue Reading
-
Opinion
29 Nov 2021
Security Think Tank: Dissecting the true value of SASE is a challenge
As a relatively nascent technology that is getting a lot of publicity, dissecting the true value of SASE is still a difficult proposition, for now Continue Reading
-
Opinion
26 Nov 2021
Security Think Tank: SASE will become operational reality
While still considered very much a buzzword, the pace of change in corporate networks and operational technology means secure access service edge (SASE) is becoming reality for many Continue Reading
-
News
25 Nov 2021
Government must prove its plans to police encryption work, says ex-cyber security chief
Ciaran Martin, the former UK cyber security chief, says the government must explain how it can access encrypted communications without damaging cyber security and weakening privacy Continue Reading
-
News
24 Nov 2021
Regulation of AI needed to avoid the mistakes of social media
Government is urged to work with industry on a flexible regulatory framework to ensure the explainability, reliability and robustness of artificial intelligence Continue Reading
-
News
24 Nov 2021
Consumer cyber bill to protect mobiles, smart devices
Product Security and Telecommunications Infrastructure Bill will reinforce protections for consumer devices and mandate improvements to default security settings Continue Reading
-
News
24 Nov 2021
Apple sues under-fire malware firm NSO
Lawsuit alleges spyware firm NSO Group targeted Apple’s users, adding to the pressure on the under-fire company Continue Reading
-
News
24 Nov 2021
Police tech introduced with little scrutiny or training
A Lords inquiry into the adoption of advanced algorithmic technologies by police in England and Wales has been told that new tools are being introduced without proper training and with little scrutiny of their impacts Continue Reading
-
News
22 Nov 2021
Upcoming holidays prompt ransomware warning from authorities
Ransomware gangs know how calendars work, and may target their attacks around major holidays to take advantage of more people being off work, according to a new alert Continue Reading
-
News
22 Nov 2021
Black Friday cyber warning for 4,000 card-skimming victims
NCSC warns thousands of small retailers that their websites are being exploited to steal customer data Continue Reading
-
News
19 Nov 2021
Why is Emotet back, and should we be worried about it?
The sudden reappearance of Emotet this week has security teams on high alert, but do we need to be worried about its return, and what should we be doing about it? Continue Reading
-
News
19 Nov 2021
UK government announces safety tech challenge fund winners
The Safety Tech Challenge Fund winners will now develop technologies to limit the spread of child abuse material in encrypted environments, which the government has claimed will not be repurposed for other uses Continue Reading
-
Feature
19 Nov 2021
Cloud storage compliance pitfalls: Post-pandemic and post-Brexit
We look at the key areas of cloud storage compliance that can trip you up, with shared responsibility with cloud providers and data residency among the most important Continue Reading
-
News
19 Nov 2021
GCHQ, NSA chiefs recommit to counter cyber threats
UK and US intelligence services reaffirm a joint commitment to disrupt and deter new and emerging cyber threats Continue Reading