Category Archive

Having implemented ISO 27001 Information Security Management Systems, and spoken to others who have, there is a group of controls from Annex A that seems to be regularly excluded. A10.9 Electronic Commerce Services, has the objective “To ensure the security…

Spare some time to look at the FREE materials provided by the Th!nk Privacy Campaign to help businesses create a culture of privacy and Data Protection Compliance. The materials include posters and bin stickers which can be downloaded, without signing…

From 6th April 2010, the Information Commissioner’s Office (ICO) has new powers to issue fines of up to £500,000 to firms that fail to report data security incidents. Firms are advised to act quickly and responsibly in the event of…

Fines up to £5000 await businesses who fail to comply with the Data Protection Act, even if they have notified the Information Commissioners Office. All organisations collect personal data and therefore are required to notify under the act. However the…