Fox Red Risk
The Cyber Security and Data Protection Consultancy
Want to Learn More about Cyber Security & GDPR
-
Calling time on time-based billing – use service-based billing if you want to save £££
When pitching for consultancy work, many of our clients are [initially] surprised we at Fox Red Risk do not price any of our services based on a daily rate model. It seems the majority of consulting organisations, small and large, price their jobs based on some form of time-based billing. This billing approach may beRead More -
Complexity & Data Subject Access Requests
According to the 2020/21 ICO annual report, around half of the [46% of ~40k] complaints the regulator receives are related to subject access. Fulfilling DSARs is clearly an area where Data Controllers are facing challenges with data subject satisfaction. In a previous article, I wrote about coping with DSAR volumes, suggesting methods to bring such high numbersRead More -
Colonial Ransomware Attack: It’s time to rethink your backup & restoration strategy.
No doubt, if you're following the news, you may have seen an uptick in the number of ransomware attacks doing the rounds. There have been quite a few. In particular, the Colonial Pipeline attack. It's beginning to seem a lot like Groundhog Day! You would think, after seeing how the ransomware attack in January 2020 crippledRead More -
The Black Swan Fallacy: Why a failure of imagination is irrelevant to Resilience Planning
Every time there is a major incident, whether it be a global pandemic or a natural disaster. Whether it be an IT Outage or a bout of unseasonably hot or cold weather, the rallying cry of those trying to defend the paucity of their response to the unfolding events is now cliche: "We never thoughtRead More -
Denial of Suez: What can we learn about risk assessing SPOF?
Single points of failure (SPOF) creep into many business processes. Often unintentionally. Some exist from the outset but were simply not assessed, or were assessed and deemed low risk. That legacy server running a critical piece of code wasn't legacy at the beginning. That retiring SME, the one who wrote the code, had just started.Read More -
Virtual CISO – Running a Business. Thinking Differently about Security!
It's Monday morning and I have already been up for a while. I have had a few cups of tea. I have answered a few emails. I have written and submitted a proposal for a new piece of work. It's a great client too. When I submitted the proposal I had a sense of reliefRead More
