IT risk management
Risk management is an increasingly important discipline for IT leaders, with regulatory compliance an ever-present consideration and the amount of legislation and regulation concerning data security on the rise. We examine the issues around IT risk management and the best practices that IT managers need to know.
-
Opinion
01 May 2025
Explaining what’s happening in a cyber attack is hard but crucial
The recent attacks on Marks & Spencer, Harrods and the Co-op show why it is essential for organisations to have a strategy to communicate effectively with customers affected. Continue Reading
-
Opinion
01 May 2025
Signalgate: Learnings for CISOs securing enterprise data
A leak of information on American military operations caused a major political incident in March 2025. The Security Think Tank considers what can CISOs can learn from this potentially fatal error. Continue Reading
-
News
22 Mar 2018
Colt pioneers blockchain in telco voice wholesaling
Colt Technology Services and Hong Kong Telecom’s international unit PCCW Global teamed up to trial the use of blockchain in wholesale voice settlements Continue Reading
-
News
22 Mar 2018
Application layer DDoS attacks increasing, Imperva data shows
Distributed denial of service attacks targeting applications almost doubled in the last three months of 2017, according to Imperva Incapsula data Continue Reading
-
News
22 Mar 2018
Businesses lack cyber security confidence after majority were breached in past year
Most businesses were hit by a data breach in the past year, yet less than half are confident they would detect a breach, a survey shows Continue Reading
-
News
21 Mar 2018
MoD to focus on SMEs to raise supply chain cyber security
The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs Continue Reading
-
News
20 Mar 2018
Firms need to move from DevOps to DevSecOps, says expert
In the face of competition, organisations are turning to DevOps to improve efficiency and accelerate innovation, but this is creating new security risks, an industry expert warns Continue Reading
-
News
19 Mar 2018
C-suite a cyber attack risk, say security chiefs
Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows Continue Reading
-
News
19 Mar 2018
Wigan data breaches underline need to share threat intelligence
Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts Continue Reading
-
News
19 Mar 2018
Russia compromised core router in US energy attacks
Russian cyber attackers used a compromised core router in a series of attacks on the US energy sector, security researchers have revealed as the UK energy sector is placed on alert Continue Reading
-
News
16 Mar 2018
IT contractors not a risk despite Snowden leaks, GCHQ tells court
The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees Continue Reading
-
Opinion
16 Mar 2018
SD-WAN needs software-defined security
Digital transformation is driving organisations to move to the cloud, which requires a new architecture that embraces cloud technology, but that in turn requires a new way of thinking about network security to ensure data is protected Continue Reading
-
News
16 Mar 2018
US blames Russia for cyber attacks on energy firms
The US has blamed Russia for a series of attacks on energy sector firms, underlining the need to ensure critical infrastructure IT systems are up to date and secure Continue Reading
-
Opinion
16 Mar 2018
Australian firms need to move faster in the digital age
Just over a tenth of IT professionals in Australia say their companies can roll out a new product in less than three months, despite operating in fast-moving markets with digitally savvy customers Continue Reading
-
15 Mar 2018
Taking complexity out of cyber security
The key to improving the cyber security posture of organisations is to keep complexity at bay, according to a senior Microsoft executive. Continue Reading
-
E-Zine
15 Mar 2018
CW ASEAN: Time to boost cyber defences
With a relatively young and tech-savvy population, ASEAN has been at the forefront of technology adoption. Yet, this has exposed its people and businesses to more cyber threats, including the massive data leak in Malaysia in 2017. In this month’s issue of CW ASEAN, we take a closer look at ASEAN’s patchy cyber security landscape, including varying levels of cyber resilience across the region, cyber security strategies adopted by different countries, as well as efforts to improve cyber capabilities and foster greater collaboration in the common fight against cyber threats. Download the issue now. Continue Reading
-
E-Zine
15 Mar 2018
CW ANZ: Report data break-ins – it’s the law
Cyber security is an increasingly global endeavour, with threat actors who know no boundaries unleashing attacks from nearly anywhere in the world. In this month’s issue of CW ANZ, we look at how Australia’s mandatory data breach notification law underscores recent efforts to lift its cyber security game, both locally and internationally. Download the issue now. Continue Reading
-
Opinion
15 Mar 2018
Security Think Tank: Fileless malware not totally undetectable
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
15 Mar 2018
DocuTrac medical software is a breach risk, warns Rapid7
Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach Continue Reading
-
Opinion
14 Mar 2018
Security Think Tank: Awareness is a good starting point to counter fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
14 Mar 2018
Researchers accused of irresponsible disclosure of AMD chip flaws
Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors Continue Reading
-
News
13 Mar 2018
Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears
Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017 Continue Reading
-
Opinion
13 Mar 2018
Security Think Tank: Patch, scan and lock down to counter fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
Feature
13 Mar 2018
Businesses need to take cryptojacking seriously
Organisations must pay attention to cyber criminals hijacking computing resources to mine cryptocurrencies, because nearly half are affected and the impact is greater than many realise Continue Reading
-
News
13 Mar 2018
Public sector organisations ill-prepared for GDPR
Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them Continue Reading
-
News
13 Mar 2018
Slingshot router malware: a warning for businesses
A stealthy malware that has been used to carry out cyber espionage undetected for six years should raise a red flag to businesses, say security commentators Continue Reading
-
Opinion
12 Mar 2018
Security Think Tank: Human, procedural and technical response to fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
12 Mar 2018
Eight new cyber threats a second in Q4 2017, McAfee report reveals
There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second Continue Reading
-
News
12 Mar 2018
Regulator takes tougher line than expected on surveillance warrants
The Investigatory Powers Commissioner’s Office has signalled to government that it will take a tough line when scrutinising surveillance warrants under the controversial Investigatory Powers Act Continue Reading
-
News
12 Mar 2018
UK leads global upward trend in SOC maturity
The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals Continue Reading
-
News
09 Mar 2018
Security researchers demonstrate ransomware attack on robots
Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against Continue Reading
-
Opinion
09 Mar 2018
Security Think Tank: Use layered security and patch management to defeat fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
09 Mar 2018
Cryptojacking cyber criminals up their game
Cyber criminals hijacking computing resources to mine for cryptocurrencies are raising their efforts to bypass enterprise security controls, researchers have found Continue Reading
-
Opinion
08 Mar 2018
Security Think Tank: Multi-layered security key to fileless malware defence
What should organisations do, at the very least, to ensure business computers are protected from fileless malware? Continue Reading
-
News
08 Mar 2018
Mac malware more than doubled in 2017
Malware targeting Apple Mac computers more than doubled from 2016 to 2017, according to security firm Malwarebytes Continue Reading
-
E-Zine
08 Mar 2018
CW Europe: Germany’s Lemoncat takes catering to the cloud
Business catering startup Lemoncat has taken advantage of the affordable cost of living in Berlin and is shaking up the catering sector by harnessing the Amazon and Salesforce clouds. Also in this issue, read how Moscow’s government is taking advantage of high penetration of broadband and mobile internet to expand innovative services under the Russian capital’s smart city programme, and how organisations in the Netherlands still have much to do to comply with the General Data Protection Regulation. Continue Reading
-
News
08 Mar 2018
Businesses warned not to ignore cryptojacking threat
Businesses should not ignore the threat of malware designed to carry out illicit cryptocurrency mining, warns NTT Security Continue Reading
-
News
07 Mar 2018
Only half of ransomware payments honoured
Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks Continue Reading
-
News
07 Mar 2018
Businesses under pressure to allow easier access to cloud
Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto Continue Reading
-
Opinion
07 Mar 2018
Security Think Tank: Aim to detect and contain fileless malware attacks quickly
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
07 Mar 2018
Cyber security is a team sport, says NCSC
The UK’s national cyber security agency aims to help organisations understand the need to act collaboratively and collectively against the cyber threat, urging them to raise the bar Continue Reading
-
News
07 Mar 2018
World Economic Forum creates fintech focus group for cyber security
WEF consortium of companies will focus on protecting financial technology firms from cyber threats Continue Reading
-
Opinion
06 Mar 2018
Security Think Tank: Social engineering at the heart of fileless malware attacks
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
06 Mar 2018
EC to boost cyber security support and collaboration
The European Commission is focused on boosting cyber security support and collaboration throughout the European Union Continue Reading
-
News
05 Mar 2018
Most healthcare organisations have been breached, report shows
Less than a third of global healthcare organisations remain untouched, as data breaches rise across the industry, a report reveals Continue Reading
-
News
02 Mar 2018
Cyber crime is a top threat to UK charities, says NCSC
Cyber crime poses the most serious threats to UK charities, the National Cyber Security Centre has warned Continue Reading
-
News
02 Mar 2018
Cyber threat to industrial control systems highest yet
The cyber threat to industrial control systems has never been greater, according to a report analysing malicious activity aimed at such systems Continue Reading
-
News
02 Mar 2018
Memcached servers irresistible to DDoS attackers, expert warns
In the light of the biggest distributed denial of service attack to date against GitHub, organisations should ditch memcached servers or risk a blizzard of blistering attacks, says security researcher Continue Reading
-
News
02 Mar 2018
New privacy fears as IT challenges delay surveillance oversight body by a year
IT challenges have delayed government plans for an independent body to authorise requests to access the public’s internet and phone records by nearly a year, raising new legal and privacy concerns Continue Reading
-
News
01 Mar 2018
Imaging systems biggest security risk in healthcare
Imaging systems have been identified as the biggest cyber security risk in the healthcare sector, a report on internet of things security has revealed Continue Reading
-
News
01 Mar 2018
Security fears delay roll-out of national e-voting system in Finland
Project enters problem-solving phase to identify advanced, effective and best practice solutions to develop a secure internet-based voting system Continue Reading
-
News
01 Mar 2018
ANZ organisations grappling with cloud outages
A majority of organisations from Australia and New Zealand admitted in a survey that they had not fully evaluated the impact of cloud outages which were longer than they had expected Continue Reading
-
News
28 Feb 2018
Government must rewrite illegal sections of Snoopers’ Charter, court told
A court has been asked to give ministers until July 2018 to rewrite powers to require phone and internet companies to retain data on the population. The government acknowledges parts of surveillance regime are unlawful Continue Reading
-
News
28 Feb 2018
Businesses urged to patch Oracle WebLogic flaw
Security researchers are again urging businesses to patch an Oracle WebLogic flaw that continues to be exploited by cyber criminals to mine cryptocurrencies Continue Reading
-
News
27 Feb 2018
Understanding the cyber threat key to UK defence, says NCSC
Understanding cyber threats is key to defending the UK and ensuring it is a safe place to do business, says the National Cyber Security Centre Continue Reading
-
E-Zine
27 Feb 2018
How IT is taking UPS to new heights
In this week's Computer Weekly, we talk to UPS CIO Juan Perez to find out how making his IT department “business intimate” is driving innovation at the parcel shipping giant. We look at how cloud management platforms can help ease the adoption of multiple public cloud services. And we examine how UK local councils are struggling to deal with cyber attacks and data breaches. Read the issue now. Continue Reading
-
Opinion
26 Feb 2018
GDPR gotchas and how to handle them
We look at common problems organisations encounter when dealing with the EU’s General Data Protection Regulation (GDPR), which comes into force on 25 May 2018 Continue Reading
-
News
26 Feb 2018
Cryptomining is top attack type, says Malwarebytes
Malicious cryptomining has been the top cyber criminal activity detected since September 2017, a report reveals Continue Reading
-
News
26 Feb 2018
Cyber criminals catching up with nation state attacks
The trickle-down effect of advanced “military-grade” tools is seeing the gap between cyber criminal and nation state attack capabilities closing, outpacing many organisations’ defence capabilities Continue Reading
-
News
23 Feb 2018
Avast discovers Tempting Cedar Android spyware campaign
Security researchers have uncovered a three-year-old Android spyware campaign spread through social media and targeting people in the Middle East Continue Reading
-
News
22 Feb 2018
Unprotected Kubernetes consoles expose firms to cryptojacking
A number of big companies have been targeted by crytojacking attacks, where cyber criminals hijack computing power to mine cryptocurrencies, but some have unprotected Kubernetes consoles in common Continue Reading
-
News
22 Feb 2018
Hitachi Vantara ups ante on industrial IoT
Potential internet of things powerhouse believes its deep expertise in operational technology will give it a leg up over traditional IT rivals Continue Reading
-
News
22 Feb 2018
UK plans laws to protect company directors from ID theft
Legislation will make it easier for directors to remove their personal addresses from the company register Continue Reading
-
E-Zine
22 Feb 2018
CW Nordics: Nordics CIOs’ priorities in 2018
A select group of CIOs and analysts in Denmark, Finland, Norway and Sweden give their views on the top IT priorities in 2018. As in 2017, digital transformation will continue to be a buzzword. Also read how Sweden is tightening up its cyber security defences as part of a wider national security strategy, and how Nordic banks cannot afford to slow their digital transformations as PSD2 comes into force. Continue Reading
-
News
22 Feb 2018
Email attacks and incident detection top security challenges
Email inboxes are the weakest link in security perimeters, and companies struggle with detecting security incidents quickly and accurately, a report finds Continue Reading
-
News
21 Feb 2018
UK organisations failing to take action against fraud
UK organisations are facing increasingly complex and costly incidents of fraud partly due to increasing cyber fraud, yet few are making use of the anti-fraud technologies available, a survey has revealed Continue Reading
-
News
21 Feb 2018
Security leaders investing in automation and AI, study shows
Automation and artificial Intelligence are being used to defend against cyber threats, says report, but experts warn that these tools and technologies can be exploited by attackers Continue Reading
-
News
21 Feb 2018
Economic impact of cyber crime is significant and rising
Cyber attacks are becoming easier to carry out while defences remain inadequate, study shows Continue Reading
-
News
21 Feb 2018
AI a threat to cyber security, warns report
Artificial intelligence is being incorporated into a range of cyber security products, but the technology may also introduce new threats, a report warns Continue Reading
-
News
20 Feb 2018
Businesses face unprecedented volume of cyber attacks
Organisations are facing the highest levels of cyber attacks in both number and sophistication as automated swarm attacks increase, a cyber threat report reveals Continue Reading
-
News
20 Feb 2018
Strategic cyber criminals likely to capitalise on GDPR
As cyber criminals concentrate on targeted, strategic, money-making attacks, they are likely to use GDPR fines as leverage to extort money from organisations, a report warns Continue Reading
-
News
20 Feb 2018
UK local councils under huge cyber attack pressure
Investigation underlines importance of security automation and employee awareness training Continue Reading
-
News
19 Feb 2018
Botnets shift focus to credential abuse
Cyber criminals are increasingly using automated attacks that make use of stolen credentials, a security threat report warns Continue Reading
-
Feature
19 Feb 2018
Getting a handle on mobile security in your enterprise
Everyone now has a mobile device at work, so how can enterprises ensure they are secure? Continue Reading
-
News
19 Feb 2018
Lauri Love can stay in UK: prosecutors will not appeal extradition ruling
Crown Prosecution Service gives undertaking to Lauri Love that it will not appeal against a court decision not to extradite him to the US – but prosecutors are seeking leave to appeal over part of the court ruling on extradition procedure Continue Reading
-
News
19 Feb 2018
Google reveals Edge flaw after Microsoft fails to meet deadline
Google’s Project Zero has gone public with another Microsoft security vulnerability after the software giant failed to issue a fix within allotted time Continue Reading
-
News
16 Feb 2018
Tech industry signs cyber security charter
Nine technology organisations have signed a cyber security charter aimed at raising the level of cyber security internationally Continue Reading
-
News
16 Feb 2018
A third of Brits plan to exercise right to be forgotten
After the General Data Protection Regulation compliance deadline, a third of Britons polled say they plan to exercise their right to be forgotten, but few fully understand the GDPR and how it will affect them Continue Reading
-
News
16 Feb 2018
Few organisations managing cyber risk, survey shows
Cyber risk management practices are not keeping up with rising cyber security concerns among senior executives around the world, a study shows Continue Reading
-
News
15 Feb 2018
F-Secure warns against ‘evil maid’ attacks
Business people are being urged not to underestimate the importance of physical security for their laptops, which can be used as entry points by attackers if not adequately protected Continue Reading
-
News
15 Feb 2018
Atos investigates breach linked to Winter Olympics cyber attack
IT services firm Atos is investigating a potential security breach in response to reports that employee credentials were found in malware used to target the Winter Olympics Continue Reading
-
Feature
14 Feb 2018
How AI will underpin cyber security in the next few years
Cyber security risks are growing in complexity and volume, but artificial intelligence techniques can help businesses track and fight them in real time Continue Reading
-
News
14 Feb 2018
Telegram zero-day exploit is a warning
The discovery of an exploit of a zero-day vulnerability in the Telegram messaging app demonstrates that not all “secure” apps are automatically safe, security experts have warned Continue Reading
-
Opinion
13 Feb 2018
Why police forces need to be honest about mass mobile phone surveillance
Police forces across the UK are covering up their use of sophisticated mass surveillance devices, known as IMSI-catchers - the Bristol Cable and Liberty are campaigning for proper transparency Continue Reading
-
News
13 Feb 2018
Industrial cyber security improving, but needs work
Cyber attacks on industrial and critical infrastructure systems are increasing in number and sophistication, but more attention is being paid to security, says Honeywell at it opens new Dubai facility Continue Reading
-
News
13 Feb 2018
Cyber security awareness top priority in financial sector
Information security chiefs in the financial sector say cyber security awareness needs to be a top priority Continue Reading
-
News
12 Feb 2018
FS-ISAC enables safer financial data sharing with API
The global financial industry's body for cyber and physical threat intelligence analysis and sharing has published an API to facilitate safer sharing of consumer financial information Continue Reading
-
News
12 Feb 2018
Criminals hijack government sites to mine cryptocurrency used to hide wealth
Europol says criminals are hiding billions in cryptocurrencies, as thousands of government and other websites have reportedly been used to hijack computers to mine more Continue Reading
-
News
12 Feb 2018
PyeongChang Winter Games hit by cyber attack
Although critical operations were not affected by the incident, event organisers at the PyeongChang Winter Olympics had to shut down servers and the official games website to prevent further damage Continue Reading
-
News
09 Feb 2018
Europe in the firing line of evolving DDoS attacks
The Europe, Middle East and Africa region accounts for more than half the world’s distributed denial of service attacks, a report from F5 Labs reveals Continue Reading
-
News
08 Feb 2018
Norway’s government backs cyber defence mobilisation
Norway has accelerated plans to scale up its national security infrastructure against threats emanating from the cyber domain Continue Reading
-
News
08 Feb 2018
More POS malware detected in the wild
The first new point of sale malware in many months is stealing data from the magnetic strips on payment cards, security researchers warn Continue Reading
-
News
08 Feb 2018
Swisscom downplays data breach
Telecommunication provider Swisscom has downplayed a data breach affecting around 800,000 customers, but security experts warn of potential long-term risks Continue Reading
-
E-Zine
08 Feb 2018
CW Benelux: Dutch IT expert on a mission to expose vulnerabilities
Dutch ethical hacker Victor Gevers took full-time leave from his IT job last year and used the time to hunt for vulnerabilities. Read about his mission to find vulnerabilities, report them responsibly and then, hopefully, get them fixed by the vulnerable parties involved. Also in this issue, read how Proximus, Belgium’s largest telecommunications operator, is leaning on Cloudify to support its adoption of network functions virtualisation, and how journalists showed that the email addresses of Dutch politicians are easy to spoof. Continue Reading
-
News
08 Feb 2018
Teenager suspected of crippling Dutch banks with DDoS attacks
A large distributed denial of service attack on banks and other organisations in the Netherlands, first thought to emanate from Russia, is now thought to have been launched by a local teenager Continue Reading
-
Opinion
08 Feb 2018
Mobile biometrics set to be game-changer in APAC
Telcos, financial institutions and other industry players risk losing market share if they do not keep up with the demand for security, convenience and mobility Continue Reading
-
News
07 Feb 2018
Third party cyber breach risk set to rise
Third party cyber security risk should always have been a priority, but this has never been more important than it is now in light of new technology risks and data protection regulations Continue Reading
-
Opinion
07 Feb 2018
Security Think Tank: How to evolve SecOps capacity
How can organisations evolve their security operations teams to do more automation of basic tasks and cope with dynamic IT environments? Continue Reading
-
Opinion
06 Feb 2018
Security Think Tank: Take care of security basics before automating
How can organisations evolve their security operations teams to do more automation of basic tasks and cope with dynamic IT environments? Continue Reading
-
News
06 Feb 2018
Many UK firms ill-equipped to deal the cloud security risks
Many UK firms do not have the security tools, processes and skills required to ensure their cloud implementations are secure, a security researcher and advocate warns Continue Reading
-
News
05 Feb 2018
Lauri Love plans to use ‘internet as a force for good’
Engineering student Lauri Love says he plans to help businesses fight cyber crime, after the court of appeal ruled that he can be tried in the UK for allegedly hacking US computer systems, rather than face extradition to the US Continue Reading
-
Opinion
05 Feb 2018
Security Think Tank: How automation can reduce the load on the security operations team
How can organisations evolve their security operations teams to do more automation of basic tasks and cope with dynamic IT environments? Continue Reading