Author: Ashley

AI is having a significant impact within the cyber security landscape, particularly in vulnerability discovery. Traditional cyber security strategies already have their challenges with addressing vulnerabilities and are typically built around periodic assessment, fixed remediation windows and manual investigation. Experts believe that AI will make it easier, faster and cheaper for attackers to discover and…

During 2024, we carried out a Security Health Check for 2MC 24/7. The security assurance we were able to deliver was great, but we were especially happy with the other benefits realised as part of the service. Below are the words of Conor McCabe, CEO of 2MC 24/7. Cyber Security Assurance  I firmly believe security is…

Between 2023 and 2024, Practical Infosec implemented ISO 27001 for iWebDevelopment. We were delighted to get this client certified to ISO 27001 in September 2024, which was a testament to the activities that had been undertaken over the previous year.  Personally, it was a really fun project and a great opportunity to be a part of.…

Using information such as birthdays, your company’s name, sports teams etc. should be avoided as this information can usually be gathered from social media profiles, making life easier for a cyber criminal. A password should also never be reused on another account. For example, using the same password for your email and Spotify means someone…

In today’s digital landscape, the reliance on external third-party suppliers, freelancers and partnerships has become universal. This dependency, however, comes with significant cyber security risks, as evidenced by the sharp rise in third-party and supply chain breaches. An extreme example was seen in the July 2024 CrowdStrike-Microsoft incident, where an issue in one entity led…

I (Farzan speaking here) remember when I was first looking to break into cyber security just over two years ago.  Reading 100s of job descriptions trying to work out what was needed to enter the industry. I came across “ISO 27001” listed within job duties and required experience. My immediate thoughts were what is this…

During late 2023, Practical Infosec were fortunate enough to have the opportunity to conduct an engagement with UK-based charity: Parathyroid UK. This project was a personal highlight, delivering the entire end-to-end process to increase their security resilience.  Who is Parathyroid UK?  Parathyroid UK is a small charity based in the UK & Ireland, providing practical…

During 2023, we worked on one of our favourite projects to date! We helped Africa’s Climate Venture Builder, Persistent, develop a cybersecurity toolkit for its portfolio companies under the Energy Entrepreneurs Growth Fund (EEGF).  We helped Persistent understand some of the security risks faced by small and medium-sized enterprises (SMEs) in Africa. We then designed…

October 17th, 2024 marks the day that the EU’s cyber security legislation: NIS2 becomes effective. EU member states will have to publish and adopt the measures to comply with this directive. With the 1 year countdown beginning (October 17th, 2023), what is this updated legislation? What do organisations have to consider? Well let’s have a…

In the world of cyber security, budgeting is far from a one-size-fits-all formula. Various factors will come into play when determining the right investment for your organisation’s security needs. Let’s delve into some key considerations that can guide the decision making process. Understanding the landscape A report by Deloitte highlighted that, as of 2020, around…