CS Nov-Dec 2023

More documents

Recommendations

Info

data privacy Edward Machin, Ropes & Gray: it would be surprising if privacy interest groups in the UK don't mount their own challenge to the UK Extension. Robin Röhm, Apheris: sees the deal between the US and UK as a positive step for companies working in both jurisdictions. the UK GDPR contains a list of criteria the Secretary of State must consider when carrying out an adequacy assessment." If the Secretary of State decides an adequate level of data protection is afforded, then that country, territory or international organisation, or a particular sector in a country or territory, can make regulations to give legal effect to their decision. These adequacy regulations allow UK organisations to transfer personal data to a controller or processor located in a third country or to an international organisation. The transfer must adhere to the particular scope of those regulations. "For criminal offence data, there may be some risks, even where this is identified as sensitive, because, as far as we are aware, there are no equivalent protections to those set out in the UK's Rehabilitation of Offenders Act 1974," points out the ICO." Significantly, the UK Extension does not contain a substantially similar right to the UK GDPR in protecting individuals from being subject to decisions based solely on automated processing, which would produce legal effects or be similarly significant to an individual. "The UK Extension contains neither a substantially similar right to the UK GDPR's right to be forgotten nor an unconditional right to withdraw consent," states the ICO. "While the UK Extension gives individuals some control over their personal data, this is not as extensive as the control they have in relation to their personal data when it is in the UK." POSITIVE STEP In response to the UK-US transatlantic data adequacy agreement, Robin Röhm, CEO and co-founder of Apheris, sees the deal between the US and UK as a positive step for companies working in both jurisdictions. "But it does not solve the long-term issues around governance, security and privacy that prevents true collaboration between organisations," he comments. "Data is one of business's most important assets, so why would businesses want to risk transferring sensitive information and data across borders? Developing better models to securely access and collaborate with sensitive data is the most appropriate and pressing response to the problem of working across organisational and geographical boundaries, particularly in the fields of machine learning and artificial intelligence." Nadia Kadhim, GDPR lawyer and CEO of global automated compliance platform Naq Cyber, warns that the defence industry needs to do more to protect classified data, as the number of attacks on this sector has increased by nearly 50% with an average of 1,661 according to a global report by Check Point Research. This increased risk has already led to growing demand for additional compliance measures from the defence industry to ensure their suppliers meet legal and regulatory compliance requirements such as Cyber Essentials, JOSCAR, DART, and MOD Risk Assessments, she states. "The number of cyberattacks within the defence sector is expected to keep rising. While it is crucial to ensure the MOD's systems are secured, it is also just as crucial to ensure defence suppliers have a strong cybersecurity posture or risk putting the entire defence supply chain in jeopardy. "It's a pattern we see in other highly regulated sectors, such as healthcare, where attackers use suppliers to access valuable and sensitive information. To keep the UK defence sector safe, we must focus on suppliers and ensure they are meeting continuous compliance with the cybersecurity requirements set by the MOD and their primes." 34 computing security Nov/Dec 2023 @CSMagAndAwards www.computingsecurity.co.uk
SAVE THE DATE RDS, Dublin: 22-23 Nov 2023 Infrastructure • Services • Solutions DataCentres Ireland combines a dedicated exhibition and multi-streamed conference to address every aspect of planning, designing and operating your Datacentre, Server/Comms room and Digital storage solution – Whether internally, outsourced or in the Cloud. DataCentres Ireland is the largest and most complete event in the country. It is where you will meet the key decision makers as well as those directly involved in the day to day operations. EVENT HIGHLIGHTS INCLUDE: Multi Stream Conference 25 Hours of Conference Content International & Local Experts 60+ Speakers & Panellists 100+ Exhibitors Networking Reception Entry to ALL aspects of DataCentres Ireland is FREE • Market Overview • Power Sessions • Connectivity • Regional Developments • Open Compute Project • Heat Networks and the Data Centre • Renewable Energy • Standby Generation • Updating Legacy Data Centres Meet your market Lead Conference Sponsor Platinum Sponsor Lanyard Sponsor Session Sponsors For the latest information & to register online visit www.datacentres-ireland.com
Page 1: Computing Security Secure systems,
Page 4 and 5: Secure systems, secure data, secure
Page 6 and 7: news Daniel Hofmann, Hornetsecurity
Page 8 and 9: ook review INSIDE THE REVOLUTION A
Page 10 and 11: product review HORNETSECURITY 365 P
Page 12 and 13: 2023 CS Awards Magician Nick Einhor
Page 14 and 15: ansomware ENEMY NO 1 - IS THE CROWN
Page 16 and 17: ansomware Michael Smith, Vercara: r
Page 18 and 19: inside view RANSOMWARE THREATENS BA
Page 20 and 21: cybersecurity training DRIVING EMPL
Page 22 and 23: cyber awareness THE CRIME-BUSTING C
Page 24 and 25: cyber awareness Don Boxley, DH2i: t
Page 26 and 27: attacks offensive PHISHING ENTERS D
Page 28 and 29: attacks offensive Kennet Harpsoe, L
Page 30 and 31: artificial intelligence FAKING IT W
Page 32 and 33: data privacy WHAT DATA PRIVACY MEAN
Page 36: Computing Security Secure systems,

CS Nov-Dec 2023

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?