News in brief

UEA accidentally sent a spreadsheet with confidential medical information to 320 undergrads. The sheet wasn’t password protected, or encrypted, because... the confidential medical information was stored in a spreadsheet because… the spreadsheet was accessible to be attached to an email because… Please tell me that the GDPR will prompt UK orgs to spend at least … Continue reading News in brief →

Doing IT right costs money

Well I would say that, wouldn’t I? It’s how I make my living (sorry, couldn’t face doing the it/IT pun twice in three sentences). It’s true, though. Consider your line of business application. Probably cost a good deal to put in; probably has at least some hardware and software resilience – being mission-critical and all. … Continue reading Doing IT right costs money →

Blame the victim

I’m going to take a possibly unpopular stance here. Forget everything you know about 21st-century offence culture. In cyber-security, it’s OK to blame the victim. Yes, the police should do more to catch cyber-criminals. Yes, the government should do more to discourage them. Yes, the world as a whole should work together to stamp this … Continue reading Blame the victim →