Comments for Ascentor

Comment on Colin Dixon by PCI DSS: 5 Things You Must Do To Retain Compliance Each Year – Ascentor

PCI DSS: 5 Things You Must Do To Retain Compliance Each Year – Ascentor — Thu, 02 Feb 2012 16:21:26 +0000

[...] Article by Colin Dixon, Ascentor’s lead QSA for PCI DSS. [...]

Comment on Sign up to the Ascentor mailing list by What Every Government Supplier Needs to Know About the UK Cyber Security Strategy – Ascentor

Thu, 02 Feb 2012 15:41:17 +0000

[...] 1. Get involved. The strategy makes it clear that the Government will work with industry to bolster cyber security but does not mention how. Ascentor will continue to monitor and provide advice and guidance through our blog updates and newsletters: Sign up for our Information Risk Management updates [...]

Comment on Information Risk is NOT Just an IT Issue by Dave James

Dave James — Thu, 12 Jan 2012 11:19:00 +0000

Thanks Sam, Glad you found the article interesting. I am confident this is a subject more companies will be thinking about this year.

James, Bryony – you have hit the nail on the head; in our ever more technology driven world it is easy to focus our attention only on information stored in the plethora of electronic devices at our finger tips. The rise of the term ‘cyber security’ only reinforces the view that responsibility for information security resides within the IT department. The reality, as demonstrated by the senior civil servant who left very sensitive UK government information on the train (http://news.bbc.co.uk/1/hi/7449255.stm), is that paper is still used to ‘store’ company information. If you want to protect sensitive information, regardless of its storage medium, you need a holistic view of the business, not one focussed entirely on IT.

Comment on Information Risk is NOT Just an IT Issue by Bryony Thomas

Bryony Thomas — Wed, 11 Jan 2012 11:22:19 +0000

So true. As a marketer I’m highly conscious of things like data security. Even leaving an event attendee list with contact details hanging around unattended can have you lose key customer data. And, of course, breach their privacy and the Data Protection Act. And, there’s nothing an IT bod can do about bits of paper inadvertently left lying around!

Comment on Top 10 Information Security Breaches by Dave James

Dave James — Mon, 19 Dec 2011 10:50:09 +0000

Thanks Ruth, really pleased the article struck a chord with you. Certainly agree that global corporations should be concerned and actively mitigating the liklihood of these big newsworthy compromises happening again. Unfortunatley in our ever more connected world, where we are only as strong as the weakest link, everyone needs to up their game. For home users there is great information provided by the Governmnet initaitive ‘Get Safe Online’ which reminds people of the basics. At the micro and small end of the SME market the Get Safe Online advice applies equally. The big enterprises can afford the big solutions (although looking at the compromise lists shows that money alone doesn’t solve the problem), but mid and upper end SME’s need a different approach, which is where Ascentor’s approach is targeted. With Ascentor’s holistic approach to information risks you can reduce your exposure to risk, helping secure a long term future, without it necessarily costing the earth.

Comment on Top 10 Information Security Breaches by Ruth Cox

Ruth Cox — Wed, 14 Dec 2011 11:12:14 +0000

What happened to Sony was really worrying. As opportunities for information risk increase it’s important to be aware of what can be done to minimise it, especially for global corporations.

Comment on Information Risk is NOT Just an IT Issue by Sam McFadden

Sam McFadden — Wed, 14 Dec 2011 11:04:13 +0000

Interesting article. Very useful.

Comment on Information Risk is NOT Just an IT Issue by James Jefferson

James Jefferson — Sun, 06 Nov 2011 16:34:10 +0000

This is very useful and often overlooked. I totally agree with your article – information security is most often dumped on IT who, as you would expect focus on technical controls only. This leaves organisations vulnerable when they think they have the risk covered. Thanks for sharing your view.