IT governance
IT governance provides the core workflows and processes that help IT managers to oversee the successful functioning of the IT department, and to prove the value of IT to the business. Regulations and compliance are just as important as technological and management skills, and we highlight the best practice in IT governance and the example of successful IT leaders.
-
News
25 Oct 2024
Dutch critical infrastructure at risk despite high leadership confidence
Stark paradox in Dutch cyber security landscape has business leaders expressing high confidence in their IT infrastructure as cyber attacks rise Continue Reading
-
News
11 Jul 2024
Dutch research firm TNO pictures the SOC of the future
In only a few years, security operations centres will have a different design and layout, and far fewer will remain Continue Reading
-
News
06 Mar 2020
MPs set sights on Huawei in 5G security probe
Weeks after UK government allowed access to radio access part of mobile networks, MPs announce inquiry into the use and security of equipment supplied by foreign companies for 5G networks Continue Reading
-
News
06 Mar 2020
MI5 slammed by watchdog for failing to delete intercepted phone and internet data
The Investigatory Powers Commissioner (IPCO) has criticised MI5 for failing to report serious errors in the way it handles intercepted phone and internet data Continue Reading
-
News
06 Mar 2020
CIO interview: Sarah Wilkinson, NHS Digital
NHS Digital has been racing to ensure the systems and protocols are in place to prepare the health service for the coronavirus. We speak to its CEO about the preparations Continue Reading
-
Podcast
06 Mar 2020
Podcast: ‘The human element’ in compliance at RSA 2020
We review RSA 2020 and discuss the human element in compliance, plus network and data management, trust, Covid-19 and its implications for organisations, and GDPR and CCPA Continue Reading
-
News
05 Mar 2020
Biometrics ethics group takes evidence on public-private use of facial recognition
Collaboration between police forces and private entities on facial recognition technology comes under scrutiny by the Home Office’s Biometrics and Forensics Ethics Group Continue Reading
-
News
05 Mar 2020
IR35 private sector reforms: Firms risk legal action by pushing employers’ NI onto contractors
Largest-ever study into the impact the IR35 private sector reforms are having on contractors suggests firms are leaving themselves open to litigation by misinterpreting the new rules Continue Reading
-
News
04 Mar 2020
F-Secure reports a steep rise in hacking attempts
An increase in distributed denial of service attacks pushes up the volume of identified rogue internet traffic to almost three billion Continue Reading
-
News
03 Mar 2020
MPs double down on criticism of HMRC's loan charge enforcement action report
The war of words between the Loan Charge All Party Parliamentary Group (APPG) and HMRC has deepened, as the cross-party group of MPs pens three-page letter outlining its issues with how tax agency is reporting on its enforcement activities Continue Reading
-
Opinion
02 Mar 2020
Why ‘no breach’ is bad news for your compliance
You might think it’s a good thing if your organisation has a clean record when it comes to data breaches, but this is not necessarily the case Continue Reading
-
News
02 Mar 2020
HMRC CEO denies it is ‘deliberately misleading’ public over loan scheme promoter arrests
HMRC CEO Jim Harra has “strongly rejected” claims made on social media by the Loan Charge All Party Parliamentary Group of cross-party MPs that it is “deliberately misleading” the public about its recent loan scheme-related enforcement activities Continue Reading
-
News
02 Mar 2020
The Security Interviews: Inside the world of bug bounties
You may not make a million as a bug bounty hunter, but you might help remove some of the stigma that persists around cyber security, says HackerOne’s Shlomie Liberow Continue Reading
-
News
27 Feb 2020
WikiLeaks founder Assange is well enough to participate in extradition proceedings, says judge
A judge dismissed claims that Julian Assange’s vulnerable psychological state would prevent him from taking part in his extradition hearing to face espionage and computer misuse charges in the US Continue Reading
-
News
27 Feb 2020
Clearview hack fuels debate over facial recognition
Customers of Clearview AI, a controversial startup that scrapes and sells billions of photos of people from social media to police forces, have found themselves at the centre of a major data breach Continue Reading
-
News
27 Feb 2020
Oxbotica on board with Cisco to drive autonomous vehicle data challenge
Connected car technology firm hits pedal with Cisco to solve data challenges of future autonomous vehicles Continue Reading
-
News
26 Feb 2020
FCA data breach could happen to anybody, but easy to avoid
Minor data breach at the Financial Conduct Authority was the result of simple human error, and highlights the need for organisations to consider a wide range of potential threats Continue Reading
-
Opinion
25 Feb 2020
Is the EU better equipped than the US to supervise the use of facial recognition?
Clearview AI can be an indispensable tool to reinforce national security, but there are many risks associated with the use of facial recognition technology that the EU might be better equipped to deal with than the US Continue Reading
-
News
25 Feb 2020
Putting AI to use in business needs strong data governance
A study from PwC shows that executives are keen to operationalise artificial intelligence, but few are ensuring that their data and data models are up to scratch Continue Reading
-
News
25 Feb 2020
Government admits it was too passive managing Post Office as parliamentary pressure builds
The UK government faces accusations of neglecting its duties handling the Post Office as pressure mounts in Parliament for justice for the subpostmasters who suffered due to faults in the Horizon IT system Continue Reading
-
News
24 Feb 2020
Police algorithms need national guidance ‘as a matter of urgency’
A study by the Royal United Services Institute makes a number of recommendations for how police algorithms can be kept in check Continue Reading
-
News
24 Feb 2020
Estonia to give citizens Alexa-like access to public services
The Estonian government is working on a project that will ultimately allow citizens to ask Siri, Alexa or almost any other virtual digital assistant to interact with government departments on their behalf Continue Reading
-
News
21 Feb 2020
Labour condemns Google data plans
Shadow digital minister Chi Onwurah challenges the government to stop Google’s plans to move UK user data out of the EU Continue Reading
-
News
21 Feb 2020
F-Secure’s AI reads mean tweets to fight abuse and trolls
Researchers working on F-Secure’s Project Blackfin have developed a model for clustering tweets to help pinpoint abuse and harassment Continue Reading
-
Opinion
21 Feb 2020
The greatest contest ever – privacy versus security
Examining the technical, legal and ethical challenges around the privacy versus security debate Continue Reading
-
News
20 Feb 2020
Google plans to send Brits’ data to US after Brexit
Move puts British user data beyond the reach of the EU’s GDPR, makes it more accessible to UK and US law enforcement agencies, and has prompted anger Continue Reading
-
News
19 Feb 2020
Cost of cloud misconfigurations set at $5tn
Cloud security outfit DivvyCloud says more than 33 billion records have been exposed in cloud misconfiguration incidents in the past 24 months Continue Reading
-
News
19 Feb 2020
Swedish consumer-protection legislation will hit fintechs
New financial regulation to protect consumers from agreeing to unnecessary credit will force financial technology companies to make changes to their products Continue Reading
-
News
19 Feb 2020
Blasé directors put business data at risk
The higher up within a business you go, the more likely you are to find people intentionally leaking confidential data, says Egress Continue Reading
-
News
19 Feb 2020
Questions raised over Office 365 shared content policy
Buried 300 words into Microsoft’s standard service level agreement is a clause that affects intellectual property and privacy Continue Reading
-
Feature
18 Feb 2020
Is this Netflix-style thriller the future of security training?
Cyber awareness specialists at KnowBe4 reckon that bringing Netflix-style production values to corporate videos heralds a new approach to security training Continue Reading
-
Opinion
18 Feb 2020
Security Think Tank: Zero trust strategies must start small, then grow
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs approach moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
News
17 Feb 2020
Mastercard opens European security resilience unit
Mastercard’s European Cyber Resilience Centre will bring together its partners and other industry bodies to support enterprise resilience Continue Reading
-
Feature
17 Feb 2020
Zero trust: Taking back control of IT security
Trust on the network is a crucial factor in security risk, and zero trust changes the traditional model of ‘trust but verify’ Continue Reading
-
Opinion
17 Feb 2020
Security Think Tank: Ask yourself if zero trust is right for you
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
News
14 Feb 2020
AWS secures temporary halt to Microsoft’s work on $10bn US JEDI cloud contract
Restraining order prevents Microsoft doing any “substantial” work on the JEDI cloud contract as Amazon’s legal action against the US government gathers pace Continue Reading
-
News
14 Feb 2020
CIO Interview: Siim Sikkut, Estonian government CIO
Siim Sikkut is one of a generation of tech native Estonians, who is turning his knowledge and experience to transforming government services Continue Reading
-
Opinion
14 Feb 2020
Security Think Tank: How zero trust lets you take back control
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero trust architecture? Continue Reading
-
Feature
13 Feb 2020
How IT can back up ESG efforts to do environmental and social good
Organisations’ environmental, social and governance programmes depend on IT leaders for technological backup Continue Reading
-
Opinion
13 Feb 2020
Security Think Tank: Practical steps to achieve zero trust
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
News
12 Feb 2020
Communications watchdog Ofcom to gain extra powers as online harms regulator
The government has released its initial response to 2019’s Online Harms White Paper, setting out a number of decisions about how it will regulate harmful content on the internet Continue Reading
-
News
12 Feb 2020
IR35 private sector reforms: Protesters demand government halts April 2020 roll-out date
With contractors due to stage an anti-IR35 reform protest march at the Houses of Parliament today, stakeholders pen open letter to the Chancellor outlining their concerns about how the changes are affecting the self-employed sector Continue Reading
-
News
11 Feb 2020
MI5 failed to disclose failings in handling intercepted data, court hears
MI5 failed to disclose serious failures in the way it handled intelligence data to the Investigatory Powers Tribunal, the surveillance regulator and ministers. Continue Reading
-
News
11 Feb 2020
IR35 private sector reforms: Research suggests 75% of contractors will leave posts by April 2020
Just eight weeks before the IR35 reforms are due to be extended to the private sector, new research suggests contractors are planning to vote with their feet and leave their positions as blanket bans take hold Continue Reading
-
News
11 Feb 2020
Chinese military personnel accused of Equifax hack
A US federal grand jury has indicted four Chinese army personnel over the 2017 Equifax breach Continue Reading
-
News
10 Feb 2020
What should be in Australia’s next cyber security strategy
The Australian government is reviewing the nation’s cyber security strategy, but is it looking at the right issues? Continue Reading
-
News
10 Feb 2020
AI in public service must be accountable
Committee on Standards in Public Life recommends that government departments make ethics a top priority when tendering artificial intelligence systems Continue Reading
-
Opinion
10 Feb 2020
Security Think Tank: Zero trust is complex, but has rich rewards
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
News
05 Feb 2020
Loan charge MPs quiz contractors on ‘unreasonable behaviour’ claims made about HMRC’s case handling
The Loan Charge All Party Parliamentary Group’s first meeting results in cross-party group of MPs quizzing contractors on their dealings with HM Revenue and Customs Continue Reading
-
Opinion
05 Feb 2020
Security Think Tank: Zero trust is not the answer to all your problems
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
Feature
04 Feb 2020
Caribbean island hospital rebuilds after hurricane with DataCore
Hurricane Irma tore the roof off a server room and flooded IT hardware, but that was an opportunity to rebuild redundant IT using DataCore’s SANsymphony software-defined storage Continue Reading
-
News
04 Feb 2020
Acronis CEO bullish as specialist goes beyond backup
Acronis is set to launch Cyber Protect as it rides a wave of confidence based on increasing revenues and investor funding. Will the backup-plus-cyber protection calculation pay off? Continue Reading
-
Opinion
04 Feb 2020
The fight against cyber crime: Why cooperation matters
With the WEF’s Global Risk Report 2019 ranking cyber attack in the top five global risks, we now see rising consensus at institutional level that no individual stakeholder can address the breadth of security challenges we face today Continue Reading
-
News
04 Feb 2020
MI5 faces court ruling over unlawful surveillance warrants
Privacy groups Liberty and Privacy International ask the Investigatory Powers Tribunal to order MI5 to disclose full details of ‘unlawful’ conduct, after classified documents reveal the spy agency failed to comply with surveillance laws Continue Reading
-
Opinion
04 Feb 2020
Security Think Tank: Facing the challenge of zero trust
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
News
03 Feb 2020
Cost-cutting and digital transformation spur increased European IT outsourcing in 2019
The need to rein in costs while digitally transforming has led to growth in traditional and as-a-service base outsourcing Continue Reading
-
News
03 Feb 2020
Government refuses request to pay legal costs for subpostmasters in Post Office case
The government has refused to pay the huge legal costs subpostmasters incurred in their battle with the government-owned Post Office, which they won Continue Reading
-
Opinion
03 Feb 2020
Security Think Tank: Zero trust – just another name for the basics?
In theory, the elimination of trust on the network simplifies IT security, but zero trust also brings new complications and new challenges. How should CISOs go about moving their organisations from traditional network security to a zero-trust architecture? Continue Reading
-
News
31 Jan 2020
Davos: The clock is ticking on climate change but cyber crime and emerging technologies add to risks
Climate change, natural disasters, extreme weather and loss of biodiversity are the greatest risks we face. With cyber conflicts, state-sponsored hacking and internet fragmentation, doing nothing is not an option, says the World Economic Forum Continue Reading
-
News
30 Jan 2020
Avast cans data harvesting subsidiary after outcry
Avast will close its Jumpshot big data unit following repeated allegations of inappropriate handling of customer data Continue Reading
-
News
30 Jan 2020
Sorting out the Dutch government’s IT mess
Tech experts discuss the challenges and potential solutions to the Netherlands government’s IT problems Continue Reading
-
News
29 Jan 2020
NHS suffers fewer ransomware attacks, but threat persists
Ransomware attacks against the NHS have tapered off dramatically, according to statistics obtained under FoI legislation, but this does not mean the threat has diminished Continue Reading
-
Podcast
29 Jan 2020
Podcast: How to boost staff awareness of compliance
Employee awareness of compliance, of the laws and regulations that affect your business, is vital, in some cases even mandatory. We look at the key ways to achieve it Continue Reading
-
Feature
28 Jan 2020
Top four compliance considerations for SMEs
We look at the key data compliance regulations that affect smaller companies – such as GDPR, the Data Protection Act, PCI-DSS and PECR – and some key industry-specific frameworks Continue Reading
-
News
28 Jan 2020
Data privacy benefits outweigh spend, says Cisco
Cisco’s 2020 data privacy study shows organisations can generate substantial returns on their data privacy and protection spending Continue Reading
-
News
24 Jan 2020
Cyber gangsters publish staff passwords following ‘Sodinokibi’ attack on car parts group Gedia
Sodinokibi hacking group steps up pressure on German automotive manufacturer by publishing information, including the CEO’s computer password and sensitive details of its IT systems, on the internet Continue Reading
-
News
23 Jan 2020
Travelex hackers shut down German car parts company Gedia in massive ‘cyber attack’
Car parts manufacturer says cyber attack will have far-reaching consequences for its business, and it has put emergency plans in place to continue deliveries Continue Reading
-
News
23 Jan 2020
Seven projects funded to explore CAV security
The winners of the Cyber Securities Feasibility Studies contest, exploring cyber security for self-driving cars, have been revealed Continue Reading
-
News
23 Jan 2020
End-user security ignorance laid bare in new report
Proofpoint’s 2020 State of the Phish report highlights an urgent need for better user training and reporting Continue Reading
-
News
22 Jan 2020
Computer Misuse Act ‘crying out for reform’
Group of campaigners says the Computer Misuse Act of 1990 risks criminalising cyber security professionals and needs reforming Continue Reading
-
News
22 Jan 2020
ICO code sets out digital privacy standards for children
The Information Commissioner’s Office has published its Age Appropriate Design Code, a set of 15 standards that online platforms must meet to protect the privacy of younger users Continue Reading
-
News
21 Jan 2020
Singapore updates model AI governance framework
Second edition of Singapore’s artificial intelligence governance framework includes new guidance, use cases and a self-assessment guide Continue Reading
-
Podcast
21 Jan 2020
Podcast: The Computer Weekly Downtime Upload – Episode 43
In this week’s episode of the Computer Weekly Downtime Upload podcast, Caroline Donnelly, Clare McDonald and Brian McKenna talk about the loan charge review that is bearing down on IT contractors, the Tech Talent Charter, Windows 7, and combating loneliness among remote workers Continue Reading
-
News
21 Jan 2020
Loan charge under review: HMRC to invest £200,000 in readying IT systems for planned policy changes
Tax collection agency counts costs of having to upgrade IT systems to prepare for incoming changes to its controversial loan charge disguised remuneration policy, which has left thousands of IT contractors facing financial ruin Continue Reading
-
News
20 Jan 2020
GDPR nets more than €100m in fines, with more to come
Fines totalling €114m have already been collected under GDPR, and this figure will spike in 2020 if the UK regulator succeeds in imposing record fines on BA and Marriott Continue Reading
-
News
17 Jan 2020
App developers sue Facebook over ‘anti-competitive conduct’
Lawsuit is based on leaked internal Facebook documents obtained and published by Computer Weekly and NBC last year Continue Reading
-
News
17 Jan 2020
CAA debuts aviation cyber security assurance scheme
Civil Aviation Authority and Crest announce the first companies to be accredited under the CAA’s new cyber security oversight scheme, Assure Continue Reading
-
News
16 Jan 2020
UK’s phone and internet bulk data surveillance unlawful, says EU court opinion
The Advocate General of the European Court of Justice issues legal opinions finding that the UK, French and Belgian bulk surveillance regimes are unlawful Continue Reading
-
News
15 Jan 2020
TSB signs up IBM Services and announces Edinburgh tech hub
TSB has contracted IBM to provide hybrid cloud services as part of its £120m digital transformation plans, which will see more tech jobs in Scotland Continue Reading
-
News
15 Jan 2020
Last Windows 7 patch updates critical remote desktop flaw
It is no longer being supported with free updates, but Microsoft's final Patch Tuesday for Windows 7 fixes a major flaw in the 10-year-old operating system Continue Reading
-
News
15 Jan 2020
LGBTQ+ social app Grindr accused of breaching GDPR
Norwegian Consumer Council files complaints about LGBTQ+ social networking app, alleging it is in breach of the General Data Protection Regulation Continue Reading
-
News
13 Jan 2020
Travelex to begin restoring foreign exchange services two weeks after ‘Sodinokibi’ attack
Travelex says it is making “good progress” in its recovery and is to begin restoring electronic foreign exchange services, but is silent about whether it has agreed to pay hackers a $6m ransom to decrypt computer files Continue Reading
-
Opinion
10 Jan 2020
Learning from the Travelex cyber attack: Failing to prepare is preparing to fail
The key lesson to take from the Travelex breach is that an effective response to a breach is a critical business function and no longer the sole province of the IT department Continue Reading
-
News
09 Jan 2020
Travelex hackers threaten to sell credit card data on dark web
Sodinokibi cyber gangsters have threatened to sell Travelex customers’ private data on a Russian underground cyber crime forum if it fails to pay a $6m ransom Continue Reading
-
Feature
09 Jan 2020
DRaaS decisions: Key choices in disaster recovery as a service
We examine the key decisions when considering DRaaS. Whether to go full self-service, assisted or managed will depend on what you need to protect and your in-house resources Continue Reading
-
News
09 Jan 2020
New GDPR service aims to ease compliance challenges
Security consultants claim their software platform will address a pressing need for an effective and efficient means of complying with data protection rules Continue Reading
-
News
08 Jan 2020
Half of UK citizens want tighter data regulations
Over 50% of UK citizens believe the gathering and use of personal data should be subject to more stringent government oversight, according to Fujitsu Continue Reading
-
News
07 Jan 2020
Government confirms IR35 private sector reforms under review ahead of April 2020 start date
Government honours pledge to embark on a review of its plans to extend the IR35 off-payroll rules to the private sector that will focus on ensuring the changes are introduced in a “smooth” way in April 2020 Continue Reading
-
News
07 Jan 2020
Broadcom flogs Symantec enterprise security unit to Accenture
Acquisition is set to make Accenture a global leader in managed cyber security services Continue Reading
-
News
06 Jan 2020
Cyber gangsters demand payment from Travelex after ‘Sodinokibi’ attack
Cyber criminals are demanding payment to decrypt Travelex’s computer files after a devastating malware attack. New questions have been raised about the security of Travelex’s computer network after it emerged the company waited eight months to patch vulnerable VPN servers Continue Reading
-
News
03 Jan 2020
Suspected ransomware attack causes worldwide disruption for Travelex
Travelex switches off computer systems and resorts to cash-only currency sales after malware attack. Insiders claim the currency exchange chain has been hit by ransomware which has left critical files containing customer data encrypted Continue Reading
-
News
02 Jan 2020
Google Health pioneers breast cancer AI scanning
An algorithm developed by Google Health promises to reduce the likelihood of patients being wrongly diagnosed, and improve abnormal mammogram scan identification Continue Reading
-
News
02 Jan 2020
California’s CCPA an opportunity for security industry to do better
California’s consumer protection and data privacy laws came into effect on 1 January 2020, and present a golden opportunity for the cyber security practitioners Continue Reading
-
News
02 Jan 2020
Interview: Why we need a GDPR for dead people
Back in 2000, there was no Facebook or Twitter and the smartphone revolution had not begun. Today, digital identities outlive the people they represent Continue Reading
-
News
31 Dec 2019
Top 10 investigative stories of 2019
Here are Computer Weekly’s top 10 investigative stories of 2019 Continue Reading
-
News
24 Dec 2019
Top 10 software development stories of 2019
Here are Computer Weekly’s top 10 software development stories of 2019 Continue Reading
-
News
20 Dec 2019
Loan charge review results: Government agrees to policy amendments to cut tax bills of 30,000 people
The government has announced a package of amendments to the loan charge policy that will remove 11,000 people from its scope, and cut the tax bills of 30,000 others Continue Reading
-
News
19 Dec 2019
EU court opinion finds EU-US data transfers lawful but raises questions over Privacy Shield
The Advocate General of the European Court says standard contractual clauses are lawful, but raises questions over the impact of US surveillance on the legality of Privacy Shield Continue Reading
-
News
19 Dec 2019
New UK government pledges to accelerate gigabit broadband delivery
New Conservative government’s Queen’s Speech reaffirms commitment to providing gigabit broadband access across the UK, but provides no specific timetable to meet commitments and targets Continue Reading
-
News
19 Dec 2019
Top 10 artificial intelligence stories of 2019
Here are Computer Weekly’s top 10 artificial intelligence stories of 2019 Continue Reading
-
Feature
19 Dec 2019
Human factors are critical to securing digital transformation
Sourcing the latest cyber security technology to support digital transformation projects is all well and good, but it’s meaningless if you fail to address your organisational culture and the people within it Continue Reading
-
News
18 Dec 2019
European Court of Justice rules that under-licensing is IP theft
Ruling from the European Court of Justice says that French mobile operator, Free Mobile, infringed the copyright of software company IT development Continue Reading