Director’s Handbook on Cyber-Risk Oversight

The National Association of Corporate Directors (NACD) released an updated edition of its “Director’s Handbook on Cyber-Risk Oversight.” The Handbook is part of the NACD’s Director Handbook series, which reports and comments on widespread governance practices to help directors discharge their duties appropriately.

The 2017 edition improves on the previous version by clarifying several points for board directors to help them understand the strategic importance of cyber risks and the complexity of threats.

The European Network for Cyber Security (ENCS) & ENTSO-E join forces against cyber attacks

The European Network for Cyber Security (ENCS) and the European Network of Transmission System Operators for Electricity (ENTSO-E) have signed a memorandum of understanding (MoU) to develop state of the art cyber security regulation, practices & standards for the electricity transmission system.

ENCS will provide its expertise with technical information and support on cybersecurity issues, while share insights into the European transmission system and the challenges faced by its operators.

A Quick multi lingual guide to glossary on cyber security

According to UK Government research, 74% of small firms in the UK experienced a cyber security breach last year, and 90% of large firms were also targeted. Some incidents caused millions in damages.

This guide is for SMEs and small IT teams in public administrations as a first step to understanding the essentials of cyber risks and how to manage them effectively.

BCC Digital Survey 2017: Cyber security

The British Chambers of Commerce surveyed more than 1000 business people from all regions of the UK online in January 2017 to understand how cybercrime is impacting on UK businesses.

The results show that one in five businesses (20%) have fallen victim to a cyber-attack in the past year. Big businesses are far more likely than their smaller counterparts to be victims of attacks (42% of companies with more than 100 staff, compared to 18% of companies with fewer than 99 employees).

ENISA study into taxonomies for incident detection and prevention

The main objective of this report is to provide relevant good practices in terms of taxonomies for incident detection and prevention for the CSIRT community. Additionally, it aims to provide conclusions and recommendations based on the qualitative assessment of taxonomies within the current taxonomy landscape on improvements that can be made on current taxonomies, such as what fields can be extended or added to existing taxonomies.