- Published
- Source
- CSO Online
- Filed under
- Privacy, AI for defence
With typical cybersecurity exposure, I can conduct pen testing with deterministic tools. I am able to predict how a piece of software is going to respond. I even stand a decent chance of finding vulnerabilities before they can be exploited against me. What we are dealing with now is a new kind of exposure. For…
What it means for organisations
- Know what personal data you hold, where it lives and who can reach it – most obligations start there.
- Collect only what you need, and be able to say why you hold it and for how long.
- Report a serious personal data breach to the ICO within 72 hours of becoming aware of it.
MyCyberWay training
Compliance · part of our training
Regulation lands on the security team. We teach how it works day to day.
Compliance runs through our programmes: how ISO 27001 and NIST requirements land on daily SOC tasks and audit evidence in Blue Team Analyst, and designing controls to ISO 27001 Annex A, NIST CSF 2.0, CIS v8 and Cyber Essentials Plus in Blue Team Engineer – with risk assessment and a properly written risk register.
- ISO 27001 Annex A and NIST CSF 2.0
- CIS Controls v8 and Cyber Essentials Plus
- Audit evidence with Purview and Intune
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
