"Low-hanging fruit refers to the tasks, actions or goals that may be most easily achieved. The expression low-hanging fruit is used to de...

"All things are subject to interpretation whichever interpretation prevails at a given time is a function of power and not truth". - Frie...

INTRODUCTION PCI DSS is a master catalogue of security controls, designed to provide a baseline for the protection of payment card operat...

Re-purposed Former Cold War RAF Station Introduction We are seeing an increasing number of businesses that appear shocked by the devastat...

PCI DSS - Requirement 1: Install and maintain a firewall configuration to protect cardholder data. Firewalls are devices that control co...

"We have problems with our physical security, operational security through to management". @Kevin Mitnick Introduction The first 13 years...

INTRODUCTION Since ending nearly 5 years working as a Payment Card Industry Qualified Security Assessor (PCI QSA) at the end of 2017, and...

Introduction No matter what industry security standard you are looking to apply to your organisation, is it important that you ensure tha...

Introduction On the 25th May 2018, the European Union (EU) introduced a new data protection regulation (the General Data Protection Regul...

Failure to complete these mandatory checks is detrimental to flight safety and could impact the licensing of the airline company.

Introduction It is no secret to say that I am a keen supporter of the PCI DSS integrated controls framework. However, during my research...

Introduction It has always amazed me by businesses contempt for compliance, or the heightened levels of assurance they get from getting t...

The business impact of poor supplier management.

Why does the PCI DSS sometime appear to be inconsistent, especially in regards to wireless testing?

The value of Cyber/Info Security within a business's GDPR/Data Privacy programme.

'59% of Companies Experienced a Third-Party Data Breach, Yet Only 16% Say They Effectively Mitigate Third-Party Risks'

Generational changes have undermined the InfoSec function, within the business environments. Over the past 2 decades we have seen a shif...