- Published
- Source
- Help Net Security
- Filed under
- Regulation
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody for flight logs and video, how to publish drone activity without exposing sensitive operations, and common mistakes in open records handling. Drawing on his cybersecurity background, he points to risks in ground control software and spreadsheet logs. … More →…
What it means for organisations
- Check whether it applies to you – by sector, size and the services you provide.
- Map it to the controls you already have: most new rules ask for evidence of things you should already do.
- Keep records of decisions, risks and incidents – regulators ask for evidence, not intentions.
More helpICO: guidance for organisations (opens in a new tab)
MyCyberWay training
Compliance · part of our training
Regulation lands on the security team. We teach how it works day to day.
Compliance runs through our programmes: how ISO 27001 and NIST requirements land on daily SOC tasks and audit evidence in Blue Team Analyst, and designing controls to ISO 27001 Annex A, NIST CSF 2.0, CIS v8 and Cyber Essentials Plus in Blue Team Engineer – with risk assessment and a properly written risk register.
- ISO 27001 Annex A and NIST CSF 2.0
- CIS Controls v8 and Cyber Essentials Plus
- Audit evidence with Purview and Intune
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
