Luke Irwin Archive

Organizations across the U.S. are gearing up for the CCPA (California Consumer Privacy Act), a new law that takes effect next year governing the way they handle Californians’ personal data. The strict requirements of the CCPA have naturally led to …

During one of IT Governance’s GDPR (General Data Protection Regulation) training courses last year, a delegate from a well-known financial services company asked: I’ve just come on the course to understand how the GDPR works. Why do I need to sit an …

The GDPR (General Data Protection Regulation) isn’t only about preventing data breaches (it’s equally focused on strengthening data subjects’ rights), but organisations have understandably honed in on the importance of effective data protection. Both objectives have clear benefits for organisations, but the …

Cyber attacks are an increasingly serious risk for organizations, but many senior staff seem to believe that their organization won’t be targeted. They might say that their organization is too small to be on attackers’ radars, or that they don’t …

Many people mistakenly think that information security is all about technology. It obviously plays a massive part in any organization’s security measures, but technology alone can’t protect you from modern cyber threats. Rather, it forms one of three pillars on …

Information security policies are essential for tackling organizations’ biggest weakness: their employees. Everything an organization does to stay secure, from implementing state-of-the-art technological defences to sophisticated physical barriers, relies on people using them properly. It only takes one employee opening a phishing …

Law firms arguably hold more sensitive data than any other type of business. After all, it’s not only their corporate data they need to account for, but also that of their clients. Files and servers contain intellectual property information, financial …