itgovernance.co.uk

Training offer – get 25% off selected training courses Subject Learning method Your basket is currently empty. Your basket is currently empty.

Ely, UK – 20 February 2025 – GRC International Group Ltd (GRCI), a global leader in governance, risk management and compliance (GRC) solutions, is pleased to announce a strategic rebranding initiative. The entire organisation, including its flagship subsidiary IT Governance Ltd, will transition to the unified brand name ‘GRC Solutions’. This strategic move reflects the company's commitment to providing integrated, end-to-end GRC Solutions to clients worldwide.

As the year draws to a close, let’s look at: What were some of the biggest breaches in 2024? What threats should you be aware of this Christmas? How can organisations stay safe during the festive season?

What image pops into your head when you hear the words ‘cyber attack’? A picture of someone wearing a hoodie, with their face obscured, hunched over a computer in a basement? Yet your biggest security risk isn’t some unknown threat actor, but your staff – the insider threat. By the nature of their employment, staff require access to your sensitive information and the systems that hold it.

How can you sail through your Cyber Essentials and Cyber Essentials Plus assessments? How can you prepare? What support can you expect from an assessor? What does the ‘technical audit’ for Cyber Essentials Plus involve, exactly? And what are some common pitfalls? We put these questions to cyber security advisor Ash Brett, who has carried out hundreds of Cyber Essentials Plus assessments.

As artificial intelligence develops relentlessly, organisations face a thorny problem: How can you harness the transformative power of AI tools and systems while ensuring the privacy and security of your sensitive data? We put the question to our head of AI product marketing, Camden Woollven. Safeguards for AI risks The risk of inadvertently exposing sensitive data is a big one. Most generative AI systems are basically a massive ‘sponge’.

How can you be confident your measures are fit for purpose – and prove it to stakeholders like customers, partners and regulators? Penetration testing (also known as ‘pen testing’ or ‘ethical hacking’) offers a vital tool for identifying gaps and opportunities to strengthen your security programme. Our head of security testing, James Pickard, explains further. What are key challenges when implementing a security programme? Resources and costs are often top of the list.

The CCSP (Certified Cloud Security Professional) certification was launched in April 2015 and last updated in August 2022. (ISC)² developed CCSP to address the growing need for Cloud security professionals and the rapidly escalating use of Cloud services. CCSP domain Weighting 17% 2. Cloud Data Security 20% 17% 17% 16% 13% While the first domain doesn’t hold the highest weighting, it’s critical to understanding all other domains.

The CCSP (Certified Cloud Security Professional) certification was launched in April 2015 and last updated in August 2022. (ISC)² developed CCSP to address the growing need for Cloud security professionals and the rapidly escalating use of Cloud services. What are the …

The UK and EU GDPR (General Data Protection Regulation) restrict transfers of personal data outside the UK and EU respectively. Consequently, you must put an appropriate mechanism or safeguard in place to transfer personal data internationally, such as: The IDTA (international data transfer agreement); SCCs (standard contractual clauses); or BCRs (binding corporate rules). Let’s take a closer look at these mechanisms, and when and how to use them. What are BCRs? How can we use BCRs?