Digital Resilience in Financial Fortresses: Navigating the New Era of Cyber Risk Leadership

Understanding DORA: What UK Financial Entities Need to Know

What is all this Cyber Clop?

Clop Ransomware Gang Overview, Latest Activities and Steps to Defend

Cyber Security and Blockchain: Unveiling the Crucial Intersection

In an era where technology continues to defy boundaries, the rapid ascent of blockchain and cryptocurrencies has presented exciting possibilities as well as daunting challenges. As we head towards a future underpinned by these technologies, understanding the multifaceted implications for cybersecurity is paramount. Navigating the Regulatory Maze The dance between technology and regulation is a delicate one. Much like the fledgling days of the Internet, blockchain technology currently exists in a grey area. European and international regulatory bodies are wrestling with how to create regulatory frameworks that protect against cybercrime without stymieing innovation. The crux here is balancing the need for security and transparency with the immense potential that blockchain technology holds. Too little regulation, and we leave a gap for malicious actors to exploit, much like the darknet markets that thrived due to early Internet regulation vacuum. Conversely, excessive or ill-prepared regulations may throttle innovation or push illicit activities into obscurer corners of technology. Widening Awareness in Cyber Security Circles Blockchain and its applications, including cryptocurrencies and DeFi (Decentralised Finance), are on the radar of cybersecurity professionals. However, the nuances and intricacies often escape the untrained eye, creating challenges for incident response and resilience strategy. A 2022 PWC survey revealed that while 56% of European companies were cognizant of blockchain's implications, only 12% were actively incorporating it into their cyber resilience strategies. This discrepancy between awareness and preparedness begs for an enhanced focus on blockchain within the cybersecurity realm. Education and Upskilling: A Call of the Hour There's been an active push to bring cybersecurity professionals up to speed with blockchain technologies, yet demand is outpacing supply. Universities and online platforms are rushing to offer relevant courses, with practical skills being honed at blockchain-based CTFs (Capture the Flag events) and hackathons. According to LinkedIn, the demand for cybersecurity professionals with blockchain-related skills rose by 54% in Europe from 2021 to 2022. Quantum Computing: A Looming Threat As we edge towards the quantum computing era, we must contemplate the risks it poses to blockchain security. Will current cryptographic algorithms, like SHA-256 and ECDSA, crumble under quantum attacks? This question paints a sobering picture of a future where all existing blockchain systems, and the digital assets they harbour, could be compromised. Smart Contracts and Auditing Smart contracts, the lifeblood of many blockchain systems, are a double-edged sword. They unlock massive potential but also introduce vulnerabilities if not properly audited. The DAO hack serves as a chilling reminder of what a flawed contract can cost. GDPR and Blockchain: A Tough Balancing Act The tenets of blockchain - immutability and decentralization - challenge the implementation of GDPR, particularly the "right to be forgotten". How can these seemingly polar opposites coexist? What does this mean for cybersecurity? These are critical questions for those of us in Europe and beyond. Join us to Explore Further We're just scratching the surface here. If this has piqued your interest, we invite you to delve deeper with us into this complex and fascinating world at the "Blockchain Ireland" panel discussion, where we'll address these issues and more. It's an opportunity to gain valuable insights and engage in thought-provoking discourse on blockchain's future in cybersecurity. Don't miss out on this opportunity to be a part of the conversation shaping the future of cybersecurity in a blockchain-driven world. Remember, the future of cybersecurity and blockchain is not something that will be dictated to us – it's a dialogue, a shared journey. And it's through discussions and events

DORA Compliance Update

Summary of the recent updated guidance from the Central Bank of Ireland in relation to DORA Compliance

The NTC Vulkan Files: Implications for Cybersecurity and Businesses

National habits and perspectives on waging war are apparent in cyberspace. From aggressive Israeli responses to regional cyber threats to China's cyber espionage activities aligned with Communist Party interests, nations exhibit unique cybersecurity practices. The recent NTC Vulkan leak, involving thousands of pages of secret documentation related to Moscow's cyber and information operations capabilities, highlights Russia's obsession with social control and non-kinetic interference.

Putin's Vulkan Files: Lifting the Veil on Russia's Cyber Warfare Prowess

“The leaked documents expose the vast network underpinning Russia's cyber attacks, the state-sponsored Sandworm hacking group, and links to other cyber criminal organisations.”

Cyber Security Bootcamp for Women

We are very proud to say we have trained over 10,000 women from around the globe via our free Cyber Security Bootcamp for Women BUT we still get asked why?

10 Tips or “Keys to Success” with DORA Compliance

UNDERSTAND DORA: Familiarize yourself with the regulation and its requirements. Consider taking specialist training such as DCCS Dora Certified Compliance Specialist to deepen your knowledge. This will enable you to understand the regulation in detail and how it applies to your organization.

DORA in a Nutshell

The Digital Operational Resilience Act (DORA) is a new regulation that aims to strengthen the information and communication technology (ICT) security of financial entities in the European Union (EU). It was published in the Official Journal of the EU on 27 December 2022 and will enter into force on 16 January 2023. It will apply to a range of financial entities, including credit institutions, investment firms, central securities depositories, central counter parties, trading venues, benchmark administrators, fund management companies, insurance and reinsurance undertakings, insurance intermediaries, payment institutions, electronic money institutions, crypto-asset service providers, issuers of asset-referenced tokens, and crowdfunding service providers. There are limited exclusions for smaller firms, and DORA will also apply to third-party ICT service providers such as cloud platforms and data analytics providers.