IT risk management
Risk management is an increasingly important discipline for IT leaders, with regulatory compliance an ever-present consideration and the amount of legislation and regulation concerning data security on the rise. We examine the issues around IT risk management and the best practices that IT managers need to know.
-
News
20 Jun 2025
Cyber Essentials certifications rising slowly but steadily
The number of businesses attaining the NCSC Cyber Essentials certification continues to increase, but much more can be done to raise awareness of the scheme. Continue Reading
-
News
20 Jun 2025
M&S, Co-op attacks a ‘Category 2 cyber hurricane’, say UK experts
The UK’s Cyber Monitoring Centre has published its first in-depth assessment of a major incident, reflecting on the impact of and lessons learned from Scattered Spider attacks on M&S and Co-op Continue Reading
-
News
25 Apr 2019
NCSC looks to industry to scale Active Cyber Defence
The national cyber security agency is calling on wider government organisations as well as industry to help scale automated cyber attack blocking systems country-wide Continue Reading
-
News
24 Apr 2019
NCSC to scale up intelligence sharing, says GCHQ director
The GCHQ director has outlined the agency’s cyber security mission in the third decade of the internet age at CyberUK, promising to scale up the sharing of declassified cyber intelligence with industry Continue Reading
-
News
24 Apr 2019
PM May approves Huawei for use in 5G networks despite opposition
The UK’s National Security Council has approved the use of Huawei’s networking equipment in parts of the country’s 5G mobile networks in spite of widespread opposition Continue Reading
-
News
23 Apr 2019
Casual collaboration comms pose security risk, survey shows
UK employees have a worryingly casual attitude to workplace communications, underling the need for employers to take steps to counter related cyber attack vulnerabilities Continue Reading
-
News
23 Apr 2019
APAC set for blockchain boom
Led by China, spending on blockchain technology in Asia-Pacific excluding Japan will surpass $2bn by 2022 Continue Reading
-
News
18 Apr 2019
State-sponsored hackers are hijacking DNS, researchers warn
A DNS-hijacking campaign targeting the Middle East and Africa may lead to actors more broadly attacking the global DNS system Continue Reading
-
News
17 Apr 2019
Nearly a quarter of tech firms do not security check products
Nearly a quarter of organisations polled do not run security checks on products, and nearly a third admitted to shipping products with known security vulnerabilities, a survey shows Continue Reading
-
News
17 Apr 2019
Wipro admits to potential breach to employee accounts by phishing attack
Indian IT services company Wipro is investigating a phishing attack, which hit some staff email accounts and launched attacks on customer environments Continue Reading
-
News
16 Apr 2019
Singtel and NUS claim quantum breakthrough
Researchers from Singtel and the National University of Singapore have succeeded in coordinating the paths of photons across a fibre network to drive wider adoption of quantum key distribution Continue Reading
-
Opinion
16 Apr 2019
Security Think Tank: Surviving the existential cyber punch
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
16 Apr 2019
Huawei cyber security chief John Suffolk: It’s not our culture to be aggressive
John Suffolk, global cyber security and privacy officer at China-based telecoms equipment supplier Huawei, tells Huawei Analyst Summit growth is the best answer to US criticism Continue Reading
-
News
16 Apr 2019
Energy industry needs to up cyber defences, warns report
Cyber threat actors are advanced and persistent, but firms in the energy industry are using outdated systems and technology to save money, putting them at risk of cyber attacks, warns F-Secure report Continue Reading
-
News
15 Apr 2019
How Palo Alto Networks fends off its cyber adversaries
Palo Alto Networks CIO Naveen Zutshi talks up the company’s approach in keeping threat actors at bay Continue Reading
-
News
15 Apr 2019
Facebook takes extraordinary legal steps to contain document leak
Facebook targets journalists and news organisations for computer searches Continue Reading
-
News
15 Apr 2019
Zero trust is about more than products
The zero trust security model is more than just products and network segmentation, it’s an architectural design principle with identity at its core that needs to be applied enterprise-wide, says KuppingerCole Continue Reading
-
Opinion
15 Apr 2019
Security Think Tank: Seven steps to manage risk of catastrophic cyber attack
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
15 Apr 2019
Automation will bring job security, say most IT security pros
Most security professionals believe that although automation can support humans, it will not result in a reduction in job opportunities, a study shows Continue Reading
-
Feature
12 Apr 2019
How botnets pose a threat to the IoT ecosystem
While connected devices are transforming our personal and working lives in a multitude of ways, they are also a growing security risk – attackers are hijacking these devices and turning them into internet of things botnets Continue Reading
-
Opinion
12 Apr 2019
Security Think Tank: Cyber attack survival not a matter of luck
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
11 Apr 2019
Government breach data highlights cyber skills misconception
Results of a government-sponsored survey highlight a dangerous misconception around cyber skills, according to a former GCHQ trainer Continue Reading
-
Opinion
11 Apr 2019
Security Think Tank: Aim for integrated resilience, continuity and recovery
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
11 Apr 2019
Triton industrial malware group still active, researchers warn
Security researchers have found traces of a Russian-linked cyber attack group in another critical infrastructure facility, prompting calls for increased diligence around industrial cyber security Continue Reading
-
E-Zine
11 Apr 2019
CW Middle East: Visibility and security of networks are top IT priorities
The 2019 Computer Weekly/TechTarget IT Priorities survey shows that enterprise buyers in the Middle East, like those in the UK and Europe, are looking to lock down their networks in the face of an almost constant barrage of threats and malicious actors. Also read how Facebook planned to use its Android app to track the location of its customers and to allow advertisers to send political advertising, and what further details operator O2 has revealed about how it is planning for the advent of 5G. Continue Reading
-
Opinion
10 Apr 2019
Security Think Tank: Incident response vital to guard against catastrophic cyber attack
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
10 Apr 2019
A quarter of phishing emails bypass Office 365 security
Cloud-based email is leaving enterprises vulnerable to phishing attacks capable of giving cyber criminals access to a wide range of critical data, warn security researchers Continue Reading
-
Opinion
10 Apr 2019
Why cyber security needs to be prioritised at board level
Despite the rising number of headline-grabbing security breaches, many company executives are still not prioritising cyber security in the boardroom Continue Reading
-
News
09 Apr 2019
Digital doppelgangers for sale to defeat anti-fraud tech
Security researchers have uncovered an online market selling digital identities to help cyber criminals to defeat anti-fraud technologies, as financial cyber crime becomes a bigger threat than ever before Continue Reading
-
News
09 Apr 2019
UK councils team up to boost cyber security
Three UK councils and data analysis firm Splunk have teamed up to improve cyber defence capabilities and maintain their security systems Continue Reading
-
Opinion
09 Apr 2019
Security Think Tank: BC/DR plan key to cyber attack survival
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
08 Apr 2019
Ransomware getting more targeted, warns Flashpoint
Ransomware attacks are becoming more targeted and designed to infect different sized organisations in specific industries and regions, say security researchers Continue Reading
-
News
08 Apr 2019
How APAC firms can tame the data beast
Companies and data management experts across Asia-Pacific reveal how they are tackling data management challenges that have been compounded by growing cloud usage and compliance requirements Continue Reading
-
Opinion
08 Apr 2019
Security Think Tank: How to reduce the impact of a potential cyber extinction event
How should businesses plan to survive a potential cyber attack extinction event? Continue Reading
-
News
05 Apr 2019
Critical infrastructure under relentless cyber attack
A lack of visibility into the attack surface, inadequate security staffing and reliance on manual processes undermine operational technology security capabilities, a study reveals Continue Reading
-
News
05 Apr 2019
European firms see value in ‘known good’ approach to security
European data protection regulations are driving enterprise interest in an approach to security being championed by virtualisation software maker VMware, says the company’s security lead Continue Reading
-
News
04 Apr 2019
The rise of digital workers and the bot economy
Automation Anywhere’s booming business, particularly in the Asia-Pacific region, is a sign of things to come in the new world of work where digital workers can be hired from a bot store Continue Reading
-
News
04 Apr 2019
Researchers uncover US-based malware distribution centre
More than a dozen US-based web servers are operating as the malware equivalent of an Amazon fulfilment centre to target businesses, security researchers have found Continue Reading
-
News
04 Apr 2019
Document-based malware on the rise, businesses warned
Document-based malware spiked in the first quarter of the year, building on a gradual rise in the past year, warn researchers Continue Reading
-
News
03 Apr 2019
Government urges businesses and charities to up cyber security
The UK government is urging businesses and charities to take action to prevent cyber attacks as the costs go up, despite an overall reduction in breaches, partly driven by new data protection laws Continue Reading
-
News
03 Apr 2019
Employees lack awareness of corporate data-sharing policies
IT leaders believe their organisations are highly likely to lose data in the next 12 months due to accidental data breaches Continue Reading
-
News
02 Apr 2019
Akamai to open second traffic scrubbing centre in Australia
New centre in Melbourne will meet growing demand for scrubbing services to mitigate the impact of distributed denial of service attacks in Australia Continue Reading
-
News
02 Apr 2019
Four in 10 leading banks failing on email fraud protection
Top UK traditional and challenger banks risk exposing customers to email fraud, a study reveals Continue Reading
-
News
02 Apr 2019
Cyber attacks increasingly exploiting supply chain weaknesses
Cyber attacks are increasingly characterised by supply chain attacks, counter incident response and lateral movement, research reveals Continue Reading
-
News
02 Apr 2019
Huawei reports record numbers despite tumultuous year
Huawei has become one of the world’s largest technology companies by revenue, suggesting the accusations over its ties to the Chinese government are failing to have much impact Continue Reading
-
News
01 Apr 2019
Black Hat Asia 2019: Get ready for the cyber arms race
The arms race is now squarely in the cyber realm as defence teams and threat actors arm themselves with AI tools Continue Reading
-
News
01 Apr 2019
Rapidly multiplying IoT cyber attacks use well-known weaknesses
Internet of things threats and attacks are increasing rapidly, but rely on well-known security weaknesses, security researchers discover Continue Reading
-
News
01 Apr 2019
Singapore government to review data security in public sector
A high-level committee comprising ministers and private sector security experts will review data security practices and recommend measures to better protect citizens’ data Continue Reading
-
News
29 Mar 2019
Magento e-commerce sites urged to apply security update
Security experts are urging companies using the Magento e-commerce site to apply security updates without delay to avoid a disastrous hacking campaign Continue Reading
-
News
28 Mar 2019
Infosec pros slam government-mandated backdoors
Government-mandated encryption backdoors increase vulnerability to nation-state attacks, according to the majority of cyber security professionals Continue Reading
-
News
28 Mar 2019
Encryption adoption driven by new tech and compliance
The adoption of encryption is at its highest level yet, driven by the need to protect data generated by new digital initiatives, but still less than half of organisations are applying it consistently across the enterprise Continue Reading
-
News
27 Mar 2019
UK IoT research centre to tackle cyber risk
A government-backed national IoT research centre has been launched as part of UK efforts to become a world leader in tackling cyber threats Continue Reading
-
News
27 Mar 2019
Cyber attacks targeting industrial control systems on the rise
Malicious cyber activity increased to almost half of the industrial infrastructure protected by Kaspersky Lab in 2018, but the UK is among the most secure countries, the security firm reports Continue Reading
-
News
27 Mar 2019
Norsk Hydro cyber attack cost estimates up to $41m
Initial estimates have put the financial impact of last week’s ransomware attack on the Norwegian aluminium producer of up to nearly $41m, raising questions about cyber insurance coverage Continue Reading
-
News
26 Mar 2019
IT complexity raises concerns of certificate-related outages
Company executives are concerned that increased IT complexity will result in more security certificate-related outages, with nearly two-thirds of organisations affected in the past year Continue Reading
-
News
26 Mar 2019
Asus releases fix for supply chain cyber attack
Asus has released a fix for a supply chain attack and downplayed the impact on customers while promising to contact all those affected as incident highlights code signing vulnerabilities Continue Reading
-
News
26 Mar 2019
Nominet urges SMEs to register .uk domains to thwart squatters
The automatic right of .co.uk domain name holders to register the shorter .uk domains ends in June Continue Reading
-
News
26 Mar 2019
Firms urged to gear up for new malware and tactics as threats proliferate
The volume of malware attacks reached a record level in 2018, with UK and India bucking global trend of increased ransomware attacks, a study shows Continue Reading
-
News
25 Mar 2019
Security challenge is to move as fast as the business
Adapting security to the pace at which the business is moving is one of the biggest challenges facing infosec professionals in the cloud era, says Palo Alto Networks Continue Reading
-
News
22 Mar 2019
Digital Darwinism unkind to those who wait, says Palo Alto
As business-driven digital transformation, including the move to cloud, continues apace, companies need to rethink their approach to how they deploy and consume security, or risk being left behind Continue Reading
-
News
22 Mar 2019
Government cyber security strategy is ‘chaotic’
Responding to potential threats at a national level is unfeasible given the time ministers are currently dedicating to Brexit negotiations, says shadow Cabinet Office minister Continue Reading
-
News
20 Mar 2019
Spike in cyber attacks targeting Cisco Webex
Cyber attacks targeting a leading web conference tool have increased dramatically and sextortion is becoming more popular with attackers, according to WatchGuard Technologies Continue Reading
-
News
20 Mar 2019
Police investigate Norsk Hydro ransomware attack
Ransomware attack on one of the world’s largest aluminium producers is under police investigation Continue Reading
-
News
20 Mar 2019
UK cyber experts to support global company boards
A consortium of UK cyber security experts and academics is to support multinational company boards to tackle online threats and protect against cyber crime Continue Reading
-
News
20 Mar 2019
UK government organisations’ email security lagging
Email security in UK government organisations is lagging far behind that of central government, analysis reveals, with less than a third implementing standard protection Continue Reading
-
Opinion
19 Mar 2019
Growing board focus on cyber risk challenges current thinking
As digital transformation continues to drive change in the business and risk landscape, business and cyber security leaders need to improve discussions around this topic Continue Reading
-
News
19 Mar 2019
Norsk Hydro confirms ransomware attack
A Norwegian aluminium producer has confirmed a ransomware attack is affecting several areas of its business, forcing it to switch to manual operations Continue Reading
-
News
19 Mar 2019
Firms urged to protect against spear phishing
Spear phishing attacks are sophisticated, targeted, costly and increasing in popularity among cyber attackers, a report warns Continue Reading
-
E-Zine
19 Mar 2019
How IT leaders should work with marketing
In this week’s Computer Weekly, we hear expert advice on how IT and marketing chiefs can work together to deliver a high-quality customer experience. We examine how supercomputers are transforming science by processing large-scale data analytics. And we look at one of the key ethical aspects of artificial intelligence (AI) – how to explain the decisions an AI makes. Read the issue now. Continue Reading
-
News
19 Mar 2019
Norwegian aluminium producer hit by ‘extensive’ cyber attack
A Norwegian aluminium producer has disclosed that it has come under cyber attack affecting several areas of its business as the firm faces claims of environmental damage Continue Reading
-
News
15 Mar 2019
Businesses failing to grasp DevSecOps
UK and US businesses are being exposed to security risks by a failure to integrate security into DevOps programmes, research shows Continue Reading
-
News
14 Mar 2019
National Cyber Security Programme at risk of missing targets
The National Audit Office has sharply criticised the Cabinet Office over failings in how it set up the National Cyber Security Programme that mean it may struggle to meet its goals Continue Reading
-
News
14 Mar 2019
Avoid infosec mistakes of the past, urges Robert Hannigan
Technology innovators need to avoid security mistakes of the past by building in integrity so that products and services can be used with trust and confidence, says former GCHQ director Continue Reading
-
Opinion
14 Mar 2019
Security Think Tank: Map your own important risk metrics
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
13 Mar 2019
IT Priorities 2019: ASEAN organisations lay digital foundations
Organisations in Southeast Asia are planning to shore up their IT infrastructure to speed up application development and become more customer focused Continue Reading
-
Opinion
13 Mar 2019
Security Think Tank: Financial loss as a key security risk indicator
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
13 Mar 2019
Almost half UK firms hit by phishing attacks
Almost half of UK organisations have been compromised in the past two years using phishing attacks, despite high levels of cyber awareness and training, research shows Continue Reading
-
News
12 Mar 2019
Cyber attackers favouring stealthier attacks, says Darktrace
Cyber attackers are moving away from ransomware to stealthier tactics, including banking Trojans and cryptojacking, an analysis of attack data reveals Continue Reading
-
Opinion
12 Mar 2019
Security Think Tank: No one key risk indicator is generic across all businesses
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
12 Mar 2019
Many firms unaware of data exfiltration threat
Many firms are unaware that they are being targeted by cyber espionage and that data is being exfiltrated from their networks by overseas adversaries, a security firm warns Continue Reading
-
News
12 Mar 2019
Despite failings, exec appetite for secure collaboration growing
Top business decision makers are more reckless than ever with company data, but the appetite for secure collaboration tools is growing, survey reveals Continue Reading
-
Opinion
11 Mar 2019
Security Think Tank: Is it true you can't manage what you don't measure?
What should be the key cyber security risk indicator for any business? Continue Reading
-
Opinion
11 Mar 2019
Security Think Tank: Key considerations for determining cyber risk
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
11 Mar 2019
Citrix breach once again highlights password weaknesses
A reported breach of Citrix, which has potentially exposed data at hundreds of thousands of customer organisations, has once again highlighted the need for an alternative to passwords and the importance of supply chain security Continue Reading
-
News
08 Mar 2019
Growing awareness of mobile security risk
There is a growing awareness of mobile security risk among members of the information security community, but most admit accessing corporate data from personal devices or public Wi-Fi Continue Reading
-
News
08 Mar 2019
Equifax defends against scathing Senate report
Equifax chief says firm did take cyber security seriously in a response to a scathing Senate report on the credit rating agency’s 2017 data breach, which experts say highlights failings around open source software Continue Reading
-
Opinion
08 Mar 2019
Security Think Tank: Five elements of a key cyber risk indicator
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
07 Mar 2019
Machine identities for sale on dark web, business warned
Academics and security professionals are warning businesses that certificates used to establish trust and privacy on the internet are being weaponised and sold to cyber criminals bundled with other services Continue Reading
-
News
06 Mar 2019
Cyber espionage group behind SingHealth attack
A cyber espionage group dubbed Whitefly has been identified as the perpetrators behind Singapore’s largest data breach to date Continue Reading
-
News
06 Mar 2019
5G one of several security challenges to CNI
5G technology is among the key security challenges facing critical national infrastructure and all other business organisations, according to the Information Security Forum Continue Reading
-
Opinion
06 Mar 2019
Security Think Tank: Aim for business intelligence-driven system of risk indicators
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
05 Mar 2019
US doubles down on Huawei fears as Chinese prepare to sue
US secretary of state Mike Pompeo has reinforced his attacks on Huawei as the firm apparently prepares to sue the US government over its federal-level ban Continue Reading
-
News
05 Mar 2019
IT Priorities 2019: What projects are IT professionals spending their budgets on?
The Computer Weekly/TechTarget IT Priorities 2019 survey finds that cloud maturity, security and automation are among the hot areas for spending Continue Reading
-
Opinion
05 Mar 2019
Security Think Tank: Invest in proactive approach to security and digital risk
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
05 Mar 2019
Singapore can now certify security products based on Common Criteria
The city-state is has attained the status of a Certificate Authorising Nation, enabling it to evaluate and certify security products under the Common Criteria standard Continue Reading
-
News
04 Mar 2019
Cyber awareness of UK boards found wanting
Boards of many of the UK’s biggest firms must do more to be cyber aware, according to a government report. Continue Reading
-
News
04 Mar 2019
RSA Security bets on digital risk management
RSA Security chief predicts that managing digital risk is set to become increasingly important to organisations as they complete their journeys to digital transformation Continue Reading
-
Opinion
04 Mar 2019
Security Think Tank: Cyber metrics need to be meaningful
What should be the key cyber security risk indicator for any business? Continue Reading
-
News
04 Mar 2019
IT Priorities 2019: APAC keeping pace with digital transformation
Digital transformation is well underway among APAC enterprises which are looking to spend more on refreshing their IT infrastructure and technologies that improve employee productivity Continue Reading
-
Feature
01 Mar 2019
What are the CDN options for enterprises?
We look at how content delivery networks can give your organisation’s web presence a literal edge Continue Reading
-
News
01 Mar 2019
Teen becomes first millionaire through HackerOne bug bounties
A self-taught teen hacker from Argentina has become the first bug bounty hacker to become a millionaire by hacking to create a safer internet Continue Reading
-
News
28 Feb 2019
Supplier consolidation tops infosec goals for 2019
Supplier consolidation, collaboration between networking and security teams, and security awareness are the top priorities for information security professionals trying to prepare for the unknown, annual benchmark study shows Continue Reading