More results...
State broadcaster’s staff reportedly held under suspicion of disseminating the clip of Salva Kiir at official eventSix journalists have been detained by South Sudan security forces over viral footage of the country’s president apparently urinating on h…
Concerns raised over health of Pape Alé Niang, detained since 20 December on charges of revealing confidential government informationPressure is mounting on authorities in Senegal to release a journalist and human rights defender on hunger strike in de…
The business benefits of developing an information security strategy and accompanying security architecture/design include: Being proactive, taking the lead in this area – more puppeteer than puppet; Designing a framework or structure to support t…
A glossy, nicely-constructed and detailed PowerPoint slide deck by Microsoft Security caught my beady this morning. The title ‘CISO Workshop: Security Program and Strategy’ with ‘Your Name Here’ suggests it might be a template for use in a workshop/cou…
This morning I bumped into a marketing/promotional piece announcing PageProof’s certified “compliance” (conformity!) with “ISO 27001” (ISO/IEC 27001!). Naturally, they take the opportunity to mention that information security is an integral part of the…
While arguably better than
nothing at all, an unstructured approach to the management of information security results in organisations adopting a jumble, a
mixed bag of controls with no clear focus or priorities and – often –
glaring holes in the ar…
Prompted by some valuable customer feedback earlier this week, I’ve been thinking about how best to update the SecAware policy template on software/systems development. The customer is apparently seeking guidance on integrating infosec into the develop…
Following its exit from the EU, the UK is having to pick up on various important matters that were previously covered by EU laws and regulations. One such issue is to be addressed through a new law on online safety.”Online safety: what’s that?” I hear …
Compliance is a concern that pops up repeatedly on the ISO27k Forum, just this morning for instance. Intrigued by ISO 27001 Annex A control A.18.1.1 “Identification of applicable legislation and contractual requirements”, members generally ask wh…
News emerged during June of likely further delays to the publication of the third edition of ISO/IEC 27001, this time due to the need to re-align the main body clauses with ISO’s revised management systems template (specfically, the 2022 edition of the…