Cybersecurity Starts in the Boardroom
I quite like the UK government’s Online Safety Bill. It compels the Big Tech companies to take action over child sex abuse material (CSAM) and promises huge fines if they fail to do so. However, the requirement to monitor communication apps with end-to-end encryption (E2EE), for CSAM causes me a …
The deadline for implementing a range of infosec directives, issued by India’s Ministry of Electronics and Information Technology (MeitY) and the Indian Computer Emergency Response Team (CERT-In) has been extended by 90-days. India extends deadline for compliance with IT Directions • The Register InfoSec in Indian now always seems to …
Continue reading “Indian government VPN logging deadline extended”
Following the Indian government directives about reporting of cyber-security incidents and the requirement to keep VPN user logs, both of which had ridiculously short deadlines for compliance – here is another: Indian stock markets given ten day deadline to file reports • The Register India in the news – when …
Continue reading “InfoSec in Indian now always seems to be in hurry”
This article was first published on 5 May 2022 Update 20 May 2022 The Indian government has moved on it’s hard line approach to incident report reporting, and some of the other provisions in their new cyber security laws – except the rules on VPNs! India slightly softens infosec incident …
Continue reading “India in the news – when is privacy not so private? UPDATED 20 May 2022”
Having just run a post, where the ICO is promoting it’s Child Code, a very effective way of protecting children, the very next article I read whilst researching the cyber security and privacy news this morning was this: EU Plan to Scan Private Messages for Child Abuse Images Puts Encryption …
Continue reading “And we are back to politicians wanting to end E2EE in the name of child safety!”
