What Happens to Corporate Data When a Business Closes?
When a business closes, its data doesn’t simply disappear. U.S. flight operator Spirit Airlines demonstrated this when it ceased operations on 2 May this year and entered liquidation. Its rem...
ISMS.online Blog
Compliance Matters
Keeping you up-to-date on the world of information security and compliance.
Legislation and Adaptation: How Compliance Experts Are Staying Ahead of Regulatory Change
When GDPR came into effect in 2018, it set a new precedent for data protection. The regulation strengthened individual privacy rights in the EU, re...
Fright Night: The Spookiest Cyber Incidents of 2026
Last year, we shared The Spine-Tingling Cyber Incidents Scaring Us This Halloween, a blog featuring commentary from IO’s executive team on some of ...
In the Spotlight
Catch up with our favourite stories of the year
Everything You Need to Know About the ISO 27701:2025 Standard Update
The International Organization for Standardization (ISO) released the updated ISO/IEC 27701 standard for privacy information management in October ...
Closing the Resilience Gap: Where the Government Says UK PLC Is Still Failing
Customers, boards and regulators are all in agreement. If cybersecurity breaches are impossible to prevent 100% of the time, the focus must be on i...
Shadow AI Is Already Inside Financial Services, Whether You Like It or Not
What can be done to regain control as the financial industry’s shadow AI issue gets worse? As tools such as OpenAI’s ChatGPT become ubiquitous, sha...
The New IO Home Page: Know Where to Focus the Moment You Log In
Key Takeaways Know where to focus the moment you log in, with a new IO Home page that’s the latest in a series of usability upgrades. See the risks...
How Silent Compliance Drift Could Harm Organisations, and What to Do About It
Eighteen months ago, agentic AI barely registered on the boardroom agenda of most organisations. Now 40% of large enterprises claim to be scaling u...
It’s Time to Prepare for Post-Quantum Cryptography
You’d better mind your PQC Ps and Qs. After AI, quantum computing will likely be the next big thing in tech. And just like AI, quantum comput...
The Revolut Breach and the Need for Joined-Up Governance
When is a breach not a breach? When it’s a highly targeted raid aimed at extracting information on specific customers over a period of several mont...
Patch Better, Not Faster: The ICO’s ACRO Reprimand and the Vulnerability Management Challenge
The ACRO case has demonstrated the role of ownership and accountability in patch management. How should CISOs and compliance leaders respond? In Au...
Stay ahead of the headlines with the IO newsletter
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
Cyber Security and Resilience Bill Raises the Stakes for Supplier Governance
As the Cyber Security and Resilience Bill (CSRB) progresses through Parliament, proposed new powers could give ministers greater control over the u...
AI Doesn’t Need to End Humanity to Demand Better Governance
Conversations about existential AI risk mask a more pressing issue: Organisations are already deploying AI without effective governance in place to...
The Cyber Resilience Act Just Got Real: It’s Time to Build Structured Governance
It’s been a long time in the making, but the Cyber Resilience Act (CRA) is finally here. And it couldn’t have come a moment sooner. As AI empowers ...
Popular Categories
Information Security
Cyber security
Data Privacy
Data Protection
ISO 27001
Legislation and Adaptation: How Compliance Experts Are Staying Ahead of Regulatory Change
When GDPR came into effect in 2018, it set a new precedent for data protection. The regulation strengthened individual privacy rights in the EU, re...
Fright Night: The Spookiest Cyber Incidents of 2026
Last year, we shared The Spine-Tingling Cyber Incidents Scaring Us This Halloween, a blog featuring commentary from IO’s executive team on some of ...
How Silent Compliance Drift Could Harm Organisations, and What to Do About It
Eighteen months ago, agentic AI barely registered on the boardroom agenda of most organisations. Now 40% of large enterprises claim to be scaling u...
IO Awarded 9 Badges in G2 Grid Leader Report for Fall 2026
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Fall 2026. We achieved nine badges in the Fall Report! G2, a leading peer-to-p...
Beyond the £300m Headline: The M&S Cyberattack, Reconstructed
With the financial results, parliamentary evidence and recovery picture now in view, what the incident really tells us about dependencies, connecte...
AI Is Supercharging Vulnerability Exploitation: What Happens Next?
AI is transforming the way many businesses work. Some 97% of executives claim they have deployed agents in the past year, with over half (57%) of t...
How Has the EU Digital Omnibus on AI Changed the AI Act?
The European Commission published the Digital Omnibus Package in late 2025, with proposals designed to simplify and harmonise parts of the EU’s dig...
Why Information Governance Is the Missing Piece of the Cyber-Resilience Puzzle
Not every data breach starts with a shadowy hacker and an external attack. Sometimes it’s not malicious third parties that overwhelm network defend...
Beyond The Breach: Why The Response Is Now The Story
As breaches become part of everyday business, how has the conversation evolved and what do recent incidents reveal about good — and poor — incident...
