Physical security has always been a cornerstone of any Information Security program. As a topic, it is covered by every major security standard. Most have entire sections dedicated to physical…
As mentioned previously, we have now uploaded our ISO 27001 (also known as ISO/IEC 27001:2013) compliance checklist and it is available for free download. Please feel free to grab a…
As part of our ongoing drive towards improving your security, We have updated our office security checklist to make it easier to use and clearer to follow. The 2013 version…
The effects of crime can be devastating on people and businesses. While recent crime trends have been reassuring, there is still a reported 1 in 50 businesses in the United…
Following on from the recent issues experienced by The Scottish Borders Council, we have been asked several times about what can be done to build some assurance into supply chain…
Today the Information Commissioner's Office (ICO) announced it had produced "A practical guide to IT Security" with the subheading that this is "Ideal for the small business." At the time…
You are probably aware that the Cabinet Office have recently issued Version 8 of the Security Policy Framework (SPF). This is the document that provides the overarching framework for security…
Physical security forms the baseline for any asset protection or loss prevention programme and is an essential bedrock for building your organisations risk management strategy. While high tech data attacks…
For any organisation looking to provide services to the UK Government, consideration of the Security Policy Framework (SPF) is essential and for most Government contracts audited compliance is required. Unfortunately,…
As we mentioned recently, the UK Government has released an updated version of the Security Policy Framework (SPF), which details the security requirements for government agencies and departments. It also…
As previously mentioned, we have updated the SPF Compliance Checklist to make it suitable for use with Version 7 of the Security Policy Framework released a few weeks ago. The…
It is important that you understand what your current security situation is. This is the bedrock for everything else you do, however, unfortunately most organisations seem to have difficulty pinning…
Passwords are frequently thought of as an "outdated" method of security and numerous product vendors will tell you how they offer a much better solution that kind of works like…
Office security is important for any business, from multinationals with offices across the globe to sole-traders working from home. Your office is likely to have most of the important information…
We would always suggest that any business with even half an interest in protecting its resources, carries out regular penetration tests (pentest) - at the bare minimum when a system…