Craig Goodwin

*** 𝗖𝗣𝗗𝗣 𝗖𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝟮𝟬𝟮𝟱 *** First day of an insightful week at Computers, Privacy and Data Protection (CPDP) Conference as the EDPS actively engages in discussions on a range of key topics, from the evolving landscape of AI to combatting spyware and enhancing vulnerability management. Today, we had the opportunity to discuss: 𝗔𝗜'𝘀 𝗜𝗺𝗽𝗮𝗰𝘁 𝗼𝗻 𝗙𝘂𝗻𝗱𝗮𝗺𝗲𝗻𝘁𝗮𝗹 𝗥𝗶𝗴𝗵𝘁𝘀 Supervisor, Wojciech Wiewiorowski, shared his insights in a panel organised by the European Union Agency for Fundamental Rights titled "𝘈𝘴𝘴𝘦𝘴𝘴𝘪𝘯𝘨 𝘍𝘶𝘯𝘥𝘢𝘮𝘦𝘯𝘵𝘢𝘭 𝘙𝘪𝘨𝘩𝘵𝘴 𝘙𝘪𝘴𝘬𝘴 𝘰𝘧 𝘈𝘐: 𝘖𝘱𝘱𝘰𝘳𝘵𝘶𝘯𝘪𝘵𝘪𝘦𝘴 𝘢𝘯𝘥 𝘊𝘩𝘢𝘭𝘭𝘦𝘯𝘨𝘦𝘴 𝘈𝘩𝘦𝘢𝘥". The discussion focused on navigating the delicate balance between leveraging AI for societal benefits and safeguarding fundamental rights. In his intervention, the Supervisor spoke about the AI Act reinforcing the protection of fundamental rights, including the right to data protection, by requiring every high-risk AI system to undergo a prior identification and analysis of known and reasonably foreseeable risks to fundamental rights, and mandates the adoption of appropriate measures to mitigate any such risks. “The AI Act complements existing regulatory frameworks, therefore its implementation raises a number of challenges, in terms of interplay and possible overlapping - he said. Cooperation is the key word. The multiplication of regulatory frameworks is a response to the development of new technologies, which have profound implications on our societies, for better or for worse. Their effective implementation requires a close and strong cooperation among all stakeholders. At the EU level, we have launched the Digital Clearinghouse 2.0 to foster collaboration among competent authorities. 𝗦𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝗲𝗻𝗶𝗻𝗴 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆: 𝗖𝗼𝗺𝗯𝗮𝘁𝗶𝗻𝗴 𝗦𝗽𝘆𝘄𝗮𝗿𝗲 Anna Buchta, Head of Policy and Consultation Unit, contributed to the Society for Civil Rights panel discussion "𝘊𝘭𝘰𝘴𝘪𝘯𝘨 𝘵𝘩𝘦 𝘋𝘪𝘨𝘪𝘵𝘢𝘭 𝘉𝘢𝘤𝘬𝘥𝘰𝘰𝘳: 𝘚𝘵𝘳𝘦𝘯𝘨𝘵𝘩𝘦𝘯𝘪𝘯𝘨 𝘝𝘶𝘭𝘯𝘦𝘳𝘢𝘣𝘪𝘭𝘪𝘵𝘺 𝘔𝘢𝘯𝘢𝘨𝘦𝘮𝘦𝘯𝘵 𝘵𝘰 𝘊𝘰𝘮𝘣𝘢𝘵 𝘚𝘱𝘺𝘸𝘢𝘳𝘦." The panel addressed critical strategies to enhance cybersecurity measures and protect against the threat of spyware. 𝗘𝗻𝗳𝗼𝗿𝗰𝗶𝗻𝗴 𝗗𝗮𝘁𝗮 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗶𝗻 𝗔𝗜 Fanny Coudert, Deputy Head of Supervision and Enforcement Unit, moderated the EDPS panel "𝘕𝘢𝘷𝘪𝘨𝘢𝘵𝘪𝘯𝘨 𝘙𝘦𝘨𝘶𝘭𝘢𝘵𝘰𝘳𝘺 𝘊𝘰𝘮𝘱𝘭𝘦𝘹𝘪𝘵𝘪𝘦𝘴: 𝘌𝘯𝘧𝘰𝘳𝘤𝘪𝘯𝘨 𝘋𝘢𝘵𝘢 𝘗𝘳𝘰𝘵𝘦𝘤𝘵𝘪𝘰𝘯 𝘪𝘯 𝘵𝘩𝘦 𝘍𝘪𝘦𝘭𝘥 𝘰𝘧 𝘈𝘐". This session explored the challenges and solutions to ensure robust data protection in the fast-paced world of AI development. Follow us to stay up to date on Day 2 of #CPDP25!

49

1 Comment

#CyberAlert | Foundations for OT cyber security We have joined international partners to release guidance for owners and operators on foundations for operational technology cyber security and asset inventory. Read it here: https://lnkd.in/esEEhNFc

54

3 Comments

🚀 Introducing Ekco's Cyber Defence Complete Package 🚀 We are thrilled to announce the launch of Cyber Defence Complete, an all-in-one cybersecurity service offering designed to give SMBs everything they need to protect what matters, without breaking the bank. This solution integrates top-tier security from Microsoft, CrowdStrike, and Recorded Future, built on CREST-accredited methodologies. With 24×7×365 MXDR monitoring, incident response, threat intelligence, and SIEM, it delivers comprehensive protection. By simplifying cybersecurity complexity and uncertainty, Cyber Defence Complete gives businesses a proactive edge against threats, along with seamless access to world-class technologies and expert guidance in one cohesive service. 🔗 Read the full press release here - https://lnkd.in/eJz7AzFW #CyberSecurity #SMBs #Ekco #CyberDefenceComplete #BusinessProtection

110

2 Comments

A recent wave of ransomware attacks has disrupted major retailers across the UK. According to a new report from CTM360®, the attackers didn’t need to break down the door, they were invited in through misplaced trust and weak identity safeguards. 🔗 Read more: https://lnkd.in/dWqFcfvD #CyberSecurity #CyberCrime #netsec #security #report #InfoSecurity #CISO #ITsecurity #CyberSecurityNews #SecurityNews 

40

LDC-backed FSP has acquired Stratia Cyber, a provider of consultancy cyber security services. This acquisition will further enhance FSP's ability to deliver end-to-end cyber protection and defence for clients. Read more here: https://lnkd.in/eVrC4DgY #TrustedwithAmbition

30

1 Comment

🚨 New UK Cybersecurity Legislation Is Coming. Is Your Organization Ready? The UK Cyber Security and Resilience Bill will transform how businesses handle cyber risk. It’s no longer enough to secure your own network, today, attackers are targeting your vendors, partners, and supply chains. 🛡️ Our new whitepaper: “How to Prepare for the UK Cyber Security and Resilience Bill in 2025”, breaks down what this legislation means for business leaders, CISOs, and risk teams. 🔍 Learn how to: - Comply with proposed mandatory third-party monitoring - Implement continuous supply chain threat detection - Prepare for board-level accountability on cyber resilience With 97% of the UK’s top companies impacted by third-party breaches, waiting isn’t an option. Proactive risk management isn't just smart, it's about to be law. 📘 Learn what you need to do for your business by reading our whitepaper for free: https://lnkd.in/ePTQdyGs #CyberSecurity #UKCyberBill #ThirdPartyRisk #TPRM #SecurityScorecard #SupplyChainSecurity #CyberResilience

31

Cyber Essentials - Key facts and figures. 📣 The #CyberEssentials scheme has seen rapid growth, issuing its 200,000th certificate last year. 📜 The Cyber Essentials Impact Evaluation revealed that 88% of respondents feel certification has enhanced their understanding of cyber security risks. 💡 With over 360 Certification Bodies and around 1,000 Assessors, Cyber Essentials continues to strengthen the UK’s cyber resilience. 💪 Find out more about the scheme 👉 https://lnkd.in/edqgNgmj

121

5 Comments

📢 Cycode Bulletin; Understanding the GitHub Actions tj-actions/changed-files Supply Chain Attack To help you understand, mitigate and recover quickly from this incident, we sat down with Alex Ilgayev, Cycode's Head of Security Research to cover the 'must-know' details of the tj-actions/changed-files incident. Watch the bulletin where Alex Ilgayev covers: 1️⃣ The ‘must-know’ details of the incident 2️⃣ Step-by-step guidance on securing your repositories 3️⃣ How to prevent future supply chain attacks 👇 All the tools & resources covered are linked below in the comments 👇 Don't hesitate to reach out to Alex Ilgayev or the team at cycode.com if you are looking for 1:1 support. #GitHubActions #SupplyChainSecurity #DevSecOps #Cybersecurity #Cycode

46

4 Comments

Introducing the Cyber Assessment Framework (CAF) 4.0 On 6 August 2025, the UK’s National Cyber Security Centre (NCSC) released the most significant update to the Cyber Assessment Framework since its original launch in 2018.   CAF remains a key tool for demonstrating cyber resilience across the UK's essential services and Critical National Infrastructure. Version 4.0 introduces important updates that reflect a more advanced and evolving threat landscape.   What’s changing? ✅ Stronger focus on threat-informed assurance and contextual risk ✅ New expectations for behavioural monitoring and threat hunting ✅ AI, machine learning, and automation must be considered in risk assessments ✅ Updated and new Contributing Outcomes across all four CAF objectives ✅ Transition timelines will be set by sector regulators, not centrally   If you are an Operator of Essential Services (OES), a Digital Service Provider (DSP), or support UK Critical National Infrastructure, now is the time to start preparing.   We are already working with clients to assess readiness and close gaps against the new expectations.   Read our latest blog, Introducing the Cyber Assessment Framework 4.0: An Updated Tool for UK Cyber Resilience by Josh Waller at NCC Group, to learn what’s required and how to get started.   ➡️ https://bit.ly/4m8Fuv5   #CAF #CyberSecurity #NCSC #NISRegulations #CriticalInfrastructure #CyberResilience 

68

#Ransomware - New UK Home Office Consultation on proposals aiming to (1) reduce payments to ransomware criminals, (2) increase the UK's ability to disrupt ransomware actors, and (3) enhance the government’s understanding of the threats in this area. The consultation considers three proposals: (a) A targeted #Ban on ransomware payments for all public sector bodies and critical national infrastructure (b) A ransomware #PaymentPrevention regime, increasing the National Crime Agency’s (NCA) awareness of live attacks and criminal ransom demands, providing victims with advice and guidance before they decide how to respond, and enabling payments to known criminal groups and sanctioned entities to be blocked. (c) A mandatory #Reporting regime for ransomware incidents, bringing ransomware out of the shadows and maximising the intelligence used by UK law enforcement agencies to warn of emerging ransomware threats, and target their investigations on the most prolific and damaging organised ransomware groups. Bravo to Sam Howarth and all involved!

23

1 Comment

NPSA research shows that it is best practice to have a minimum of three people working in a security control room at any one time. However, this isn’t always possible or practicable.   Watch our video to discover effective strategies to deal with an incident and prioritise tasks.   Security Control Room (SCR) operators and managers can learn more about preparedness and prioritisation during incidents by signing up for the SCR course on the website: https://lnkd.in/eCRbP6-U   #SecurityControlRoom #Security #SecurityTraining #Preparedness #ActingFastWillSaveLives #NPSA #IncidentResponse #TaskPrioritisation

98

3 Comments

Cyber firm targets growth with £250,000 support “CyberSafe aims to make cybersecurity accessible for businesses of all sizes, enabling them to rapidly detect threats and take swift action.” Cybersecurity firm Melius CyberSafe is eyeing market growth after securing £250,000 support from the North East Venture Fund. The Newcastle-based operator says the cash will aid the roll-out of a “new and more powerful version” of its online monitoring platform. Find out more here: https://lnkd.in/eNvuctbd Richard Brown Ian Wilson Mercia Asset Management PLC Eldon Jobe

23

2 Comments