Fox Red Risk
The Cyber Security and Data Protection Consultancy
Want to Learn More about Cyber Security & GDPR
Cybersecurity Skills Gap – Who is doing the teaching…and who should provide the funding?
It seems like every other day there is yet another article highlighting the impending apocalypse of the cybersecurity skills gap. The articles often moan that it is the fault of the employer for wanting qualified personal (who knew) and then try to solve the problem essentially with the advice: Why not hire someone who wantsRead MoreAsset Discovery for Cybersecurity & Data Protection – You can’t protect it if you don’t know it exists!
There is an old management adage that what isn't measured isn't managed. It's so true. Something similar applies to cybersecurity. If you don't know an asset exists, how on earth can you protect that asset from a cyber-attack or data breach?! Asset Discovery is the number one exercise a new CISO (or Virtual CISO) shouldRead MoreProcessor Contract – How Data Processors can inadvertently become Controllers…and why it matters!
For those of you who deal with the wonderful document that is a data processor contract. Whether you're on the Controller side or the Processor side, you will know there are quite a few hoops to jump through. This is because GDPR strengthened the requirements of a Controller-Processor relationship, outlined in Article 28. That said,Read MoreGDPR Subject Access – why verifying ID can be dangerous!
wrote a few weeks ago discussing how DSAR volumes may have gone up in your organisation and that it's probably not simply down to the GDPR Subject Access hurdles being lowered for Data Subjects. Since GDPR came into force in May 2018, Data Subjects now don't have to pay a fee (in most cases). TheRead MoreSupply Chain Resilience – Who are your Backup Suppliers?
Is your supply chain resilience programme reminiscent of the article image? Aged, poorly maintained, complex, hard-to-untangle. Do you carry out due diligence at the beginning of your engagements? More importantly, do you carry out ongoing governance and oversight? Even more importantly, does supply chain resilience form part of your wider operational resilience strategy or businessRead MoreSWIFT independent assessment – have you booked yours?
The SWIFT independent assessment regime will kick in later this year. Have you booked in your assessment? If not, Fox Red Risk has some availability to carry out assessments. Remember the SWIFT payments attacks a few years back? As a reminder In 2015 & 2016, a series of cyberattacks using the SWIFT banking network, whichRead More
