Insights

With only 100 days remaining before the Digital Operational Resilience Act (DORA) becomes enforceable, financial entities across the EU must act swiftly to ensure compliance. The clock is ticking, and organisations need to prepare now to meet the stringent requirements of this regulation by 17th January 2025. This blog delves into the five core pillars of DORA and how Integrity360 can assist your organisation in achieving compliance before the deadline. 

Organisations across Europe are bracing for the full implementation of the NIS2 Directive (Network and Information Systems Directive 2). This updated legislation, which strengthens the security requirements for critical infrastructure, will become applicable by 18th October 2024. While it is an EU directive, its impact extends beyond the EU borders, affecting UK-based companies as well, despite the UK no longer being an EU member. 

In today's digital world, cyber security threats evolve at an alarming rate, making it increasingly difficult for businesses to keep up. Traditional methods such as Penetration Testing or Red Team Testing are often limited to one-off or periodic engagements, which while essential and valuable, may leave gaps in continuous visibility of exposure. This is where Continuous Threat Exposure Management (CTEM) steps in, offering a proactive, cyclical approach to ensure businesses are always ahead of the curve.  

The constant influx of CVEs (Common Vulnerabilities and Exposures) can make it difficult for businesses to keep up, leaving critical assets at risk. Added to this, organsations also have to deal with many other types of exposures, such as inappropriate identity permissions, or cloud platform misconfigurations. To address this challenge, Integrity360 is now offering Continuous Threat Exposure Management (CTEM) as a Service, providing organisations with a comprehensive solution to identify, prioritise, and manage the greatest risks to their critical assets, whether on-premises, in the cloud, or in a hybrid environment. 

The Internet of Things (IoT) has transformed the way we connect and interact with technology, enabling devices from smart thermostats to industrial machinery to communicate seamlessly over the internet. However, with this connectivity comes a unique set of challenges in securing these devices and ensuring they aren't a gateway for cyberattacks. This is where IoT penetration testing comes in. 

The legal sector has seen a dramatic 77% increase in successful cyber attacks over the past year, with incidents rising from 538 in 2022/23 to 954 in 2023/24. This rise is largely due to the sensitive and valuable nature of the information that law firms hold, making them prime targets for cybercriminals.

In today’s fast-paced and technology-driven world, having a robust Business Continuity Plan is crucial. However, a Business Continuity Plan is not complete without a strong focus on integrating threat detection and response mechanisms. In this blog, we'll explore why integrating threat detection and response is essential and how to effectively incorporate it into your Business Continuity Plan.

Cloud security myths persist, casting unnecessary doubts on the technology's robustness. It’s time to set the record straight and bust some of the most prevalent myths surrounding cloud security.

Testing methodologies play a pivotal role in identifying vulnerabilities and fortifying systems against potential attacks. Among these methodologies, the concepts of Black Box, Grey Box, and White Box testing are fundamental. Understanding these approaches and their applications can significantly enhance the effectiveness of a security strategy.

With new data showing that the the number of cyber attacks on UK utility companies increased to 48 in 2023, representing a 586% rise compared to 2022 and Data breaches impacting 140,000 individuals, a substantial increase from 17,000 the previous year cyber security in the sector has never been so important. 

In a recent incident, a prominent cyber security company discovered they had inadvertently hired a North Korean operative posing as an IT professional. This individual, using various AI tools, managed to infiltrate the company by joining as an employee, accessed its systems and attempted to plant malware. The incident has brought to light the increasing sophistication of cyber threats during the recruitment process. If a major cyber security firm can fall victim, other less security-savvy organisations face even greater risks and underscores the necessity for robust verification processes and heightened vigilance in recruitment.

One of the most potent lines of defence when it comes to cyber security is often overlooked: the users themselves. This blog explores some strategies to ensure users are an integral part of your cyber security solution, highlighting how Integrity360 can support each step.