IT risk management
Risk management is an increasingly important discipline for IT leaders, with regulatory compliance an ever-present consideration and the amount of legislation and regulation concerning data security on the rise. We examine the issues around IT risk management and the best practices that IT managers need to know.
-
News
30 Sep 2025
Apple’s first iOS 26 security update fixes memory corruption flaw
Apple issues an update for its brand new iOS 26 mobile operating system, fixing a potentially dangerous vulnerability affecting iPhones, iPads and other Mac devices Continue Reading
-
News
30 Sep 2025
Cloud provider publishes ‘tech sovereignty’ plan for UK
In the face of mounting data sovereignty concerns across Europe, UK cloud provider Civo lays out high-level plan for how the government can retain control and access of its data should the geopolitical situation sour Continue Reading
-
E-Zine
19 Apr 2018
CW ANZ: OpenStack gains a foothold in Australia
In this issue of CW ANZ, we look at how OpenStack has changed the way Australian enterprises operate their IT infrastructure. Also read how Australia’s Citic Pacific Mining is digging into IoT technology to track vehicles, and how Telstra is investing in two submarine cables to bolster Asia-US connectivity. Continue Reading
-
E-Zine
19 Apr 2018
CW ASEAN: SD-WAN helps find best route to cloud
This year, more enterprises will adopt a “cloud-first” SD-WAN architecture to support their increasingly cloud-based application mix. In this issue of CW ASEAN, we take a closer look at how ASEAN enterprises are gearing up for this eventuality. Also, read how a new HPE facility in Singapore will help build collaborative partnerships across the internet of things, and how communications service providers should embrace microservices and DevOps to thrive in the digital economy. Continue Reading
-
News
18 Apr 2018
Australian supermarket chain hit by IT outage
Thirty-minute glitch knocked out checkout systems at half of Woolworths’ stores in Australia Continue Reading
-
News
18 Apr 2018
DDoS attacks cost up to £35,000
Despite the direct financial impact of DDoS attacks, this is not considered to be the most damaging effect on companies targeted this way, a survey shows Continue Reading
-
News
18 Apr 2018
Security budgets up, but talent scarce, says Isaca
Security budgets are increasing, but qualified cyber talent remains difficult to find with positions taking at least three months to fill, an industry association report on the state of cyber security reveals Continue Reading
-
News
17 Apr 2018
Business at risk from unidentified network traffic, report warns
A lack of network traffic visibility poses significant security challenges to businesses, a report on network firewalls warns Continue Reading
-
News
17 Apr 2018
China’s ZTE a national security risk, UK telcos warned
UK national cyber security authority has warned telecommunications companies against using equipment and services from Chinese network equipment supplier ZTE, citing national security risks Continue Reading
-
News
17 Apr 2018
Targeted cyber attacks doubled in past year, study shows
The number of targeted attacks has doubled in the past year compared with the previous 12 months, despite improvements in detecting and blocking them, a cyber resilience study shows Continue Reading
-
News
16 Apr 2018
Flashpoint researchers warn of new VBS Loader
Researchers have issued warnings about a new VBScript downloader that behaves like a remote access Trojan, is designed to run undetected and can update and delete itself Continue Reading
-
News
16 Apr 2018
UK and US accuse Russia of targeting network infrastructure
The UK and US have accused the Russian government of targeting network infrastructure, calling on network operators to take the necessary protective measures Continue Reading
-
News
16 Apr 2018
UK businesses urged to ensure they do cyber security basics
The cyber threat to business has never been greater, so the National Cyber Security Centre is urging UK companies to ensure they have implemented all the basic, best-practice cyber security controls and processes Continue Reading
-
News
15 Apr 2018
Australian healthcare services most hit by data breaches
Nearly a quarter of data breaches reported under Australia’s new mandatory data breach regime took place in the healthcare sector Continue Reading
-
News
13 Apr 2018
EU-US data sharing under threat as Irish court refers Facebook case to Europe
The Irish High Court is seeking answers from the European Court of Justice in a case that could have huge implications for EU-US data sharing and raises questions about US government surveillance of EU citizens. The move could bring a five-year legal battle between Austrian lawyer Max Schrems and Facebook to a close Continue Reading
-
News
13 Apr 2018
Cyber attackers can breach targets in hours, report reveals
The majority of hackers claim they can breach an organisation within hours, while most security professionals admit they do not know what to look for Continue Reading
-
News
13 Apr 2018
UK playing central role in Facebook data misuse probe
Data protection is a hot issue and all about increasing confidence in the way data is handled, says UK privacy watchdog Continue Reading
-
News
12 Apr 2018
Cyber security a shared responsibility, says Amber Rudd
The UK home secretary has emphasised that cyber security is a shared responsibility and committed to promote EU cyber cooperation post-Brexit at the National Cyber Security Centre’s conference in Manchester Continue Reading
-
News
11 Apr 2018
New cyber incident classification to boost UK response
A new cyber attack categorisation system has been unveiled to improve UK response to incidents Continue Reading
-
News
11 Apr 2018
Government to set up £13.5m cyber security centre
Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading
-
News
11 Apr 2018
NSA calls for cyber security community collaboration
A US National Security Agency (NSA) representative has called for cyber security community collaboration at the National Cyber Security Centre’s conference in Manchester Continue Reading
-
News
10 Apr 2018
Mobile phishing a growing threat, warns report
Phishing on mobile devices is a growing threat to business as attacks move beyond email to text messages and apps Continue Reading
-
Blog Post
10 Apr 2018
ThreatQuotient ups the ante for dealing with security incidents
As cybercrime becomes ever more widespread and the actors involved diversify, targeted organisations must become more sophisticated and timely in their ability to detect and respond. Continue Reading
-
Podcast
10 Apr 2018
Podcast: Storage compliance for GDPR data subject requests
The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading
-
News
10 Apr 2018
Ransomware top cyber threat, DBIR shows
Ransomware remains the top cyber security threat to organisations, humans continue to be significant weakness and HR departments are a top target, according to the latest Verizon Data breach investigations report Continue Reading
-
News
09 Apr 2018
Cyber threat to UK business greater than ever, report reveals
The cyber threat to UK business is “bigger than ever” and the best way to defend against it is collaboration between government, law enforcement and business, a report shows Continue Reading
-
News
09 Apr 2018
Security professionals admit patching is getting harder
Vulnerable systems need patching to avoid being attacked by security exploits, yet many businesses find it hard to apply patches quick enough Continue Reading
-
Opinion
09 Apr 2018
Security Think Tank: Cryptojacking can be costly
How can organisations best defend against cryptojacking? Continue Reading
-
News
09 Apr 2018
More than one in 10 employees fall for social engineering attacks
Employees download malicious files, click phishing links, correspond with hackers, and even share contact information for their colleagues, a report reveals Continue Reading
-
Opinion
06 Apr 2018
Security Think Tank: Six tips for securing your organisation against cryptojacking
How can organisations best defend against cryptojacking? Continue Reading
-
News
06 Apr 2018
Business increases use of encryption in the cloud
The use of encryption has seen double-digit growth in the past year due to a number of security-related drivers, a study has revealed Continue Reading
-
Opinion
06 Apr 2018
Why businesses must think like criminals to protect their data
Cyber criminals use three main methods of operation to steal commercial data. Understanding their mindset can help organisations put the right defences in place Continue Reading
-
News
06 Apr 2018
HSBC IT whistleblower faces extradition to Switzerland
Hervé Falciani, who stole data from thousands of private banking customers, is apprehended in Spain following the issuing of an international arrest warrant Continue Reading
-
News
05 Apr 2018
Retail sector top cyber attack target
The retail sector was the top cyber attack target in 2017, as cyber attacks evolved to become more organised and structured, a report reveals Continue Reading
-
News
05 Apr 2018
Business should note Facebook data sharing, say security advisers
Businesses that use Facebook and have employees that use it should take note that data is shared with potential cyber attackers, security advisers warn, as Facebook reveals the Cambridge Analytica data exploitation scandal may affect 87 million users Continue Reading
-
Opinion
05 Apr 2018
Security Think Tank: Deal with cryptojacking to avoid security vulnerability
How can organisations best defend against cryptojacking? Continue Reading
-
News
05 Apr 2018
More than 1.5 billion business and consumer files exposed online
With just over a month to go before the GDPR compliance deadline, more than 1.5 billion data files are exposed online without adequate protections, a report reveals Continue Reading
-
News
05 Apr 2018
Interview: GDPR will give Dutch privacy watchdog its teeth
The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading
-
Opinion
04 Apr 2018
Security Think Tank: User vigilance key to cryptojacking defence
How can organisations best defend against cryptojacking? Continue Reading
-
News
04 Apr 2018
Ransomware puts pressure on incident response
Cyber attackers switched focus to ransomware attacks in 2017 putting pressure on incident response, while human error was responsible for two-thirds of compromised records, a study shows Continue Reading
-
News
04 Apr 2018
Average attacker dwell time nearly six months for EMEA, study shows
Firms in Europe, the Middle East and Africa take nearly six months to detect cyber attacks on average, a report reveals Continue Reading
-
News
03 Apr 2018
UK firms failing to make financial plans for cyber attacks
Most UK firms are failing to plan for the financial impact of cyber attacks, a survey by Lloyds Bank has revealed Continue Reading
-
Opinion
03 Apr 2018
Security Think Tank: Use awareness, education and controls to halt cryptojacking
How can organisations best defend against cryptojacking? Continue Reading
-
News
03 Apr 2018
Automation and gamification key to cyber security
The use of automation and gamification are key to winning the fight against cyber criminals in the face of the skills’ shortage, a study investigating challenges facing IT security teams reveals Continue Reading
-
News
02 Apr 2018
Lawyers more influential than IT staff in cloud deployments
Traditionally considered risk-adverse, lawyers are twice as more influential than in-house technology staff about cloud, research finds Continue Reading
-
News
29 Mar 2018
Europol operation nabs another 20 cyber criminals
Police have arrested 20 cyber criminals in connection with a €1m fraud operation across Italy and Romania Continue Reading
-
News
29 Mar 2018
Business unaware of scale of cyber threat
Many businesses, especially board members, do not understand the scale of the cyber threat, but international efforts to combat cyber crime are being hampered by political barriers Continue Reading
-
News
29 Mar 2018
Cryptocurrency mining rampant in higher education
Higher education institutions are the biggest target for illicit cryptocurrency mining, data shows Continue Reading
-
News
29 Mar 2018
Most airports not protected from cyber threats
The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster Continue Reading
-
News
28 Mar 2018
Majority of European firms unprepared for phishing attacks
Most cyber attacks can be traced back to a phishing email, but more than half of European firms are unprepared to deal with email-based attacks, research has revealed Continue Reading
-
News
28 Mar 2018
Facebook announces more privacy control updates
Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading
-
News
28 Mar 2018
AWS ups ante on cloud services for Australian government
Cloud supplier AWS says government agencies can now assess the prospect of running protected workloads, following an independent cloud security assessment Continue Reading
-
News
28 Mar 2018
Majority of firms fear mobile workers have been hacked
More than half of organisations fear that their mobile workers have been hacked and most are concerned that a growing mobile workforce means increased cyber security risk, a survey reveals Continue Reading
-
News
27 Mar 2018
UK organisations urged to develop cyber security skills
Managed cloud computing firm Rackspace is calling on UK organisations to do more to develop cyber security skills in the light of research into expertise in cloud security Continue Reading
-
News
27 Mar 2018
Most top UK firms fail to disclose cyber risk testing details
Most of the largest UK companies do not reveal their testing of cyber protection plans and do not share security updates with the board regularly, a Deloitte report reveals Continue Reading
-
News
26 Mar 2018
ShopDirect set to use AI to detect fraud on phone calls
The online retailer has signed a contract to use voice authentication technology from Pindrop to tackle fraud and improve customer experience Continue Reading
-
News
26 Mar 2018
Blockchain not ready for cross-border bank payments
The use of blockchain in certain parts of the financial services industry is limited at present due to the additional IT work required around its use Continue Reading
-
News
26 Mar 2018
Dutch SMEs’ cyber security is insufficient
Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading
-
News
22 Mar 2018
Colt pioneers blockchain in telco voice wholesaling
Colt Technology Services and Hong Kong Telecom’s international unit PCCW Global teamed up to trial the use of blockchain in wholesale voice settlements Continue Reading
-
News
22 Mar 2018
Application layer DDoS attacks increasing, Imperva data shows
Distributed denial of service attacks targeting applications almost doubled in the last three months of 2017, according to Imperva Incapsula data Continue Reading
-
News
22 Mar 2018
Businesses lack cyber security confidence after majority were breached in past year
Most businesses were hit by a data breach in the past year, yet less than half are confident they would detect a breach, a survey shows Continue Reading
-
News
21 Mar 2018
MoD to focus on SMEs to raise supply chain cyber security
The Ministry of Defence continues to develop a joint initiative with industry aimed at raising the security posture throughout the UK’s defence supply chain, with increasing focus on SMEs Continue Reading
-
News
20 Mar 2018
Firms need to move from DevOps to DevSecOps, says expert
In the face of competition, organisations are turning to DevOps to improve efficiency and accelerate innovation, but this is creating new security risks, an industry expert warns Continue Reading
-
News
19 Mar 2018
C-suite a cyber attack risk, say security chiefs
Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows Continue Reading
-
News
19 Mar 2018
Wigan data breaches underline need to share threat intelligence
Ongoing data breaches experienced by local authorities underline the need for greater sharing of threat intelligence, say security experts Continue Reading
-
News
19 Mar 2018
Russia compromised core router in US energy attacks
Russian cyber attackers used a compromised core router in a series of attacks on the US energy sector, security researchers have revealed as the UK energy sector is placed on alert Continue Reading
-
News
16 Mar 2018
IT contractors not a risk despite Snowden leaks, GCHQ tells court
The government argues in the Investigatory Powers Tribunal that contractors with systems administration rights to computers holding GCHQ’s most sensitive intelligence pose no more of a security risk than the agency’s employees Continue Reading
-
Opinion
16 Mar 2018
SD-WAN needs software-defined security
Digital transformation is driving organisations to move to the cloud, which requires a new architecture that embraces cloud technology, but that in turn requires a new way of thinking about network security to ensure data is protected Continue Reading
-
News
16 Mar 2018
US blames Russia for cyber attacks on energy firms
The US has blamed Russia for a series of attacks on energy sector firms, underlining the need to ensure critical infrastructure IT systems are up to date and secure Continue Reading
-
Opinion
16 Mar 2018
Australian firms need to move faster in the digital age
Just over a tenth of IT professionals in Australia say their companies can roll out a new product in less than three months, despite operating in fast-moving markets with digitally savvy customers Continue Reading
-
15 Mar 2018
Taking complexity out of cyber security
The key to improving the cyber security posture of organisations is to keep complexity at bay, according to a senior Microsoft executive. Continue Reading
-
E-Zine
15 Mar 2018
CW ASEAN: Time to boost cyber defences
With a relatively young and tech-savvy population, ASEAN has been at the forefront of technology adoption. Yet, this has exposed its people and businesses to more cyber threats, including the massive data leak in Malaysia in 2017. In this month’s issue of CW ASEAN, we take a closer look at ASEAN’s patchy cyber security landscape, including varying levels of cyber resilience across the region, cyber security strategies adopted by different countries, as well as efforts to improve cyber capabilities and foster greater collaboration in the common fight against cyber threats. Download the issue now. Continue Reading
-
E-Zine
15 Mar 2018
CW ANZ: Report data break-ins – it’s the law
Cyber security is an increasingly global endeavour, with threat actors who know no boundaries unleashing attacks from nearly anywhere in the world. In this month’s issue of CW ANZ, we look at how Australia’s mandatory data breach notification law underscores recent efforts to lift its cyber security game, both locally and internationally. Download the issue now. Continue Reading
-
Opinion
15 Mar 2018
Security Think Tank: Fileless malware not totally undetectable
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
15 Mar 2018
DocuTrac medical software is a breach risk, warns Rapid7
Security researchers have issued a security warning about medical billing and documentation software they say puts patients at risk of data breach Continue Reading
-
Opinion
14 Mar 2018
Security Think Tank: Awareness is a good starting point to counter fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
14 Mar 2018
Researchers accused of irresponsible disclosure of AMD chip flaws
Israel-based researchers have been accused of irresponsible disclosure for going public with more than a dozen security flaws discovered in AMD processors Continue Reading
-
News
13 Mar 2018
Government ‘unlawfully delegated’ bulk data powers to GCHQ, court hears
Privacy International urges Britain’s most secret court, the Investigatory Powers Tribunal, to rule that the government illegally collected surveillance data from internet and phone companies until at least September 2017 Continue Reading
-
Opinion
13 Mar 2018
Security Think Tank: Patch, scan and lock down to counter fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
Feature
13 Mar 2018
Businesses need to take cryptojacking seriously
Organisations must pay attention to cyber criminals hijacking computing resources to mine cryptocurrencies, because nearly half are affected and the impact is greater than many realise Continue Reading
-
News
13 Mar 2018
Public sector organisations ill-prepared for GDPR
Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them Continue Reading
-
News
13 Mar 2018
Slingshot router malware: a warning for businesses
A stealthy malware that has been used to carry out cyber espionage undetected for six years should raise a red flag to businesses, say security commentators Continue Reading
-
Opinion
12 Mar 2018
Security Think Tank: Human, procedural and technical response to fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
12 Mar 2018
Eight new cyber threats a second in Q4 2017, McAfee report reveals
There was an increase in cyber attacks on healthcare organisations, the use of fileless malware and cryptocurrency mining in the last three months of 2017, with eight new threats a second Continue Reading
-
News
12 Mar 2018
Regulator takes tougher line than expected on surveillance warrants
The Investigatory Powers Commissioner’s Office has signalled to government that it will take a tough line when scrutinising surveillance warrants under the controversial Investigatory Powers Act Continue Reading
-
News
12 Mar 2018
UK leads global upward trend in SOC maturity
The UK is leading the way towards more efficient security operations centres, but many still continue to operate with serious gaps in security, a report reveals Continue Reading
-
News
09 Mar 2018
Security researchers demonstrate ransomware attack on robots
Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against Continue Reading
-
Opinion
09 Mar 2018
Security Think Tank: Use layered security and patch management to defeat fileless malware
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
09 Mar 2018
Cryptojacking cyber criminals up their game
Cyber criminals hijacking computing resources to mine for cryptocurrencies are raising their efforts to bypass enterprise security controls, researchers have found Continue Reading
-
Opinion
08 Mar 2018
Security Think Tank: Multi-layered security key to fileless malware defence
What should organisations do, at the very least, to ensure business computers are protected from fileless malware? Continue Reading
-
News
08 Mar 2018
Mac malware more than doubled in 2017
Malware targeting Apple Mac computers more than doubled from 2016 to 2017, according to security firm Malwarebytes Continue Reading
-
E-Zine
08 Mar 2018
CW Europe: Germany’s Lemoncat takes catering to the cloud
Business catering startup Lemoncat has taken advantage of the affordable cost of living in Berlin and is shaking up the catering sector by harnessing the Amazon and Salesforce clouds. Also in this issue, read how Moscow’s government is taking advantage of high penetration of broadband and mobile internet to expand innovative services under the Russian capital’s smart city programme, and how organisations in the Netherlands still have much to do to comply with the General Data Protection Regulation. Continue Reading
-
News
08 Mar 2018
Businesses warned not to ignore cryptojacking threat
Businesses should not ignore the threat of malware designed to carry out illicit cryptocurrency mining, warns NTT Security Continue Reading
-
News
07 Mar 2018
Only half of ransomware payments honoured
Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks Continue Reading
-
News
07 Mar 2018
Businesses under pressure to allow easier access to cloud
Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto Continue Reading
-
Opinion
07 Mar 2018
Security Think Tank: Aim to detect and contain fileless malware attacks quickly
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
07 Mar 2018
Cyber security is a team sport, says NCSC
The UK’s national cyber security agency aims to help organisations understand the need to act collaboratively and collectively against the cyber threat, urging them to raise the bar Continue Reading
-
News
07 Mar 2018
World Economic Forum creates fintech focus group for cyber security
WEF consortium of companies will focus on protecting financial technology firms from cyber threats Continue Reading
-
Opinion
06 Mar 2018
Security Think Tank: Social engineering at the heart of fileless malware attacks
What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading
-
News
06 Mar 2018
EC to boost cyber security support and collaboration
The European Commission is focused on boosting cyber security support and collaboration throughout the European Union Continue Reading
-
News
05 Mar 2018
Most healthcare organisations have been breached, report shows
Less than a third of global healthcare organisations remain untouched, as data breaches rise across the industry, a report reveals Continue Reading
-
News
02 Mar 2018
Cyber crime is a top threat to UK charities, says NCSC
Cyber crime poses the most serious threats to UK charities, the National Cyber Security Centre has warned Continue Reading