The EU AI Act - What Does It Mean For Your Business? Business Leaders Cyber Briefing podcast

19:11

If your business processes card payment transactions you need to be PCI-DSS compliant. This episode provides an introduction to PCI-DSS and along the way explains many key cyber security concepts that apply to all businesses. This podcast episode discusses PCI DSS, a global information security standard for organisations that handle branded credit cards from the major card schemes. The episode focuses on two key areas: scoping and segmentation . Scoping is the process of identifying all the systems, people, and processes that need to be included in a PCI DSS assessment. This is crucial because it determines which parts of an organisation’s infrastructure are subject to the PCI DSS requirements. Accurately determining scope helps organisations focus their security efforts and resources where they are most needed. The episode provides a detailed breakdown of the scoping process, including: Identifying all payment channels and how cardholder data is received. Documenting the flow of cardholder data and the systems involved. Identifying any systems, processes, and personnel that can interact with or impact the cardholder data environment. The episode emphasises the importance of considering all connected systems and the potential risks if these systems are overlooked during scoping. Segmentation is a security strategy that involves isolating the cardholder data environment (CDE) from other parts of the network. Effective segmentation can significantly reduce the scope of a PCI DSS assessment, making compliance easier to achieve and manage. The episode discusses different segmentation approaches and their impact on PCI DSS scope, particularly in the context of shared services like directory services. It stresses that segmentation should be part of a holistic security strategy and not a replacement for securing the entire infrastructure. The episode concludes by highlighting that effective scoping and segmentation can significantly reduce the risk of data breaches and streamline PCI DSS compliance efforts. It encourages business leaders to engage with their security teams to ensure a thorough understanding of these concepts and their impact on the organisation's overall security posture. Business Leaders Cyber Briefing is produced by Cool Waters Cyber, a UK based cyber security firm who have been protecting businesses across 3 continents since 1999. We are an NCSC Assured Service Provider and Cyber Advisor. To learn more: www.cool-waters.co.uk…

1
The EU AI Act - what does it mean for your business? 9:32

πριν 5 weeks9:32

9:32

The EU has passed the world’s first comprehensive law on Artificial Intelligence (AI): The AI Act. This groundbreaking legislation aims to ensure the safe, ethical, and transparent use of AI within the EU, impacting businesses in the UK and globally. Key Takeaways for Business Leaders: Understanding Risk Categories: The AI Act categorises AI systems based on their potential risk. Systems posing unacceptable risk, such as those used for social scoring or manipulative practices, are banned. High-risk systems, like those used in critical infrastructure, healthcare, or law enforcement, will face strict regulations, including pre-market conformity assessments and ongoing monitoring. Transparency is Paramount: Businesses using AI, especially generative AI systems like ChatGPT, must be transparent about their use. This includes disclosing AI-generated content, preventing the generation of illegal content, and providing summaries of copyrighted training data. Compliance is Essential: The AI Act enforces compliance through hefty fines, reaching up to 7% of a company's global annual turnover. Businesses need to understand their obligations and implement necessary measures to avoid costly penalties. Embrace the Opportunities: The AI Act aims to support innovation by offering testing environments and resources for start-ups and smaller companies. Businesses should leverage these opportunities to develop and deploy AI solutions responsibly. Call to Action: The AI Act signifies a significant shift in the AI landscape. Business leaders need to: Assess their current and future use of AI systems. Determine the risk category of each system. Develop and implement compliance strategies. Embrace transparency and ethical considerations. Stay informed about the evolving regulatory landscape. By taking proactive steps, businesses can ensure compliance, mitigate risks, and harness the power of AI responsibly. Business Leaders Cyber Briefing is produced by Cool Waters Cyber, a UK based cyber security firm who have been protecting businesses across 3 continents since 1999. We are an NCSC Assured Service Provider and Cyber Advisor. To learn more: www.cool-waters.co.uk…

1
Cyber Security for Charities - what trustees and managers need to know 13:19

πριν 6 weeks13:19

13:19

This episode explains Cyber Essentials , a UK government-backed scheme that helps charities protect themselves against common cyber attacks. Trustees and leaders are responsible for ensuring their charity's IT systems and data are secure. This is essential for maintaining public trust, protecting beneficiaries, and securing funding. Cyber Essentials certification demonstrates a commitment to cyber security, helping charities meet the increasing requirements of grant-making bodies and public sector contracts . Key actions for trustees : Understand the five technical controls : firewalls, secure configuration, security update management, user access control, and malware protection. Implement key policies , such as applying security updates within 14 days, using supported software, having strong password policies, and managing user accounts and permissions. Ensure all systems used for charity business meet these requirements, including devices owned by trustees and volunteers . Cyber Essentials offers significant benefits: Protection against the vast majority of common cyber attacks. Increased confidence in data security. New funding opportunities . Reduced likelihood of cyber insurance claims . Free cyber insurance for small charities. This episode will guide you through the essential steps to protect your charity from cyber risks . Business Leaders Cyber Briefing is produced by Cool Waters Cyber, a UK based cyber security firm who have been protecting businesses across 3 continents since 1999. We are an NCSC Assured Service Provider and Cyber Advisor. To learn more: www.cool-waters.co.uk…

1
NCSC Annual Review of 2024 - what business leaders need to know 19:14

πριν 7 weeks19:14

19:14

This episode explores cybersecurity in the UK , examining threats, resilience efforts, and long-term strategies . It draws on the National Cyber Security Centre's (NCSC) 2024 Annual Review . Key Themes: Escalating Cyber Threats: The UK faces a "diffuse and dangerous" cyber threat landscape, with increasing attacks from hostile states (Russia, China, Iran, North Korea), organised crime , and opportunistic actors . These threats are becoming more sophisticated, exploiting vulnerabilities in critical infrastructure, supply chains, and democratic processes . Bridging the Resilience Gap: The UK's cyber defences are struggling to keep pace with evolving threats. While basic cybersecurity practices can prevent most attacks , widespread adoption is lacking. The episode emphasises the urgency for organisations to prioritise cybersecurity as an investment, not a compliance burden. Building a Robust Cyber Ecosystem: The NCSC advocates for a collaborative approach to enhance the UK's cyber resilience. This involves: Securing government through initiatives like the Government Cyber Coordination Centre (GC3). Empowering sectors through collaboration with industry-specific Trust Groups. Defending democracy through partnerships with the Defending Democracy Taskforce and bolstering election security. Developing a skilled workforce by inspiring young talent through programs like CyberFirst and supporting higher education institutions. Fostering innovation through collaboration with startups and industry leaders. Shaping the Future of Cybersecurity: The episode highlights the need for proactive, long-term strategies : Stronger legislation and regulation , like the Cyber Security and Resilience Bill, to raise security standards and protect critical infrastructure. Creating market incentives to drive investment in "secure by design" products and services by addressing issues like information asymmetry and prioritising security over speed and cost. Embracing emerging technologies like AI and post-quantum cryptography (PQC) securely, while managing associated risks. This episode provides a comprehensive overview of the state of cybersecurity in the UK, highlighting the need for urgent action, collaboration, and long-term vision to build a more secure and prosperous digital future. Business Leaders Cyber Briefing is produced by Cool Waters Cyber, a UK based cyber security firm who have been protecting businesses across 3 continents since 1999. We are an NCSC Assured Service Provider and Cyber Advisor. To learn more: www.cool-waters.co.uk…

1
Upcoming Cyber Regulations and Cyber Threats 18:25

πριν 9 weeks18:25