Security Roundup March 2021

Cybersecurity

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Breaches are bad for business… literally Expect to see this story featured in lots of security presentations about worst-case scenarios following a data breach. Last month, the Finnish therapy centre provider Vastaamo went into liquidation, having suffered a ransomware infection last […]

Meet the new flaws, same as the old flaws: how to do vulnerability management better

Vulnerability management

When it comes to vulnerability management, the old Donald Rumsfeld quote about ‘known knowns and unknown unknowns’ springs to mind. Unless an organisation understands what its weak points are, how can it strengthen or mitigate them, or accept the risks? Carrying out a vulnerability assessment and evaluating the risk from any weak points it uncovers […]

Security Roundup February 2021

Cybersecurity

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Crime doesn’t pay… unless you’re in the ransomware business Ransomware victims shouldn’t use their insurance firms to pay to get their data back because they’re inadvertently funding organised crime. That was the harsh message from Ciaran Martin, former head of […]

BH Consulting webinar looks at EU data transfer fallout from Schrems II

SCCs

In our latest webinar, we looked at the EU data transfer fallout from Schrems II. Any company transferring data outside the EU needs to identify any risks arising from international transfers to ensure it can comply with EU levels for protecting personal data. That was one of the key conclusions from BH Consulting’s webinar about […]

Security Roundup January 2021

Cybersecurity

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Do we really have to look back at 2020? It turns out COVID-19 was far from the only bad news during the past year. From a cybersecurity perspective, the year had more than its share of incidents. Unsurprisingly, the SolarWinds supply chain attack […]

What’s changing for Standard Contractual Clauses?

EU data transfer

For organisations needing to transfer data internationally, Standard Contractual Clauses (SCCs) are one option for staying compliant with the GDPR. But following the Schrems II ruling last summer, SCCs have been upgraded. In the third blog in our series on the CJEU ruling, Sarah Clarke looks at what’s changing for SCCs. SCCs are one of […]