Happy New Year! Time to improve your security.
Halkyn Consulting would like to wish a Happy New year to all our readers, customers (past, present and future) and anyone else interested enough to visit this blog. We will…
Christmas Availablity
As a quick update, our security service will be unavailable to new client requests and questions over the Christmas period between 17 December and 9 January. We will continue to…
Security Policy Framework Compliance Tool
As we mentioned recently, the UK Government has released an updated version of the Security Policy Framework (SPF), which details the security requirements for government agencies and departments. It also…
How to design a password policy
Passwords are probably the most widely used authentication mechanisms available. They are, on the whole, easy to deploy, easy to explain to users and easy to manage. It is likely…
Security Policy Framework Compliance Checklist – available for download.
As previously mentioned, we have updated the SPF Compliance Checklist to make it suitable for use with Version 7 of the Security Policy Framework released a few weeks ago. The…
Updated Security Policy Framework – UK Government Security Standard
The UK Government has released an updated version of the Security Policy Framework (version 7) which reflects changing opinions on the best way to manage security risks within Government. The…
Online bingo players details sold
Another week, another Data Protection Act breach. Yesterday, the ICO reported on a former employee of an online gambling site who pleaded guilty to selling the personal data belonging to…
Data Protection Act – Calls for more powers while breaches continue
Earlier this week, the Justice Committee Ninth Report made the recommendation that the Information Commissioners should have the power to issue custodial sentences (prison time) for breaches of the Data…
GCHQ chief reports ‘disturbing’ cyber-attacks on UK
As reported on the BBC news today, the head of the UK signals intelligence organisation - GCHQ - is concerned over the rising number of attacks on UK businesses. From…
Security Measurement and Control
One of the most challenging part of building security into your organisation - or even just improving your existing security - is determining how you will measure the effectiveness of…
Public distrust of business data protection safeguards
A press release issued today by the Information Commissioner's Office indicates that (in the UK at least), more and more businesses are becoming aware of their data protection responsibilities. However,…
3 reasons why you need a security consultant
Having good security practices, backed up by a knowledgeable & well trained staff delivers genuine value to your business. Having this security culture embedded in your organisation to the point…
Document disposal – don’t take risks
There has been a lot of press coverage over the recent incident where a cabinet office minister (Oliver Letwin) was observed throwing official documents into a public waste bin. Although…
Security Risk Management – Protecting your business
Security risk management is, as we frequently say, important for every organisation. For most businesses it can be a make or break issue and, in lots of industries, there are…
Security Risk Management and Risk Response Options
Proper management of risk is essential to every organisation. Although frequently seen in a negative light, risk is simply an uncertainty of outcome and routinely accompanies new opportunities. Poor risk…