Category: CISO

  • Cloud-based software testing for 200€/employee

    Are you testing new HR software in your organization? A landmark ruling by Germany’s Federal Labour Court (Bundesarbeitsgericht) should make you pause and reconsider your approach. The court awarded €200 in damages to an employee whose personal data was improperly transferred during cloud-based HR software testing – and this decision could reshape how companies handle…

  • CEOs as Data Protection Officers: The €5,000 Mistake Your Company Might Be Making

    Is your CEO wearing too many hats? If one of those happens to be Data Protection Officer (DPO), your organization could be facing significant legal and compliance risks—as one company discovered after being hit with a €5,000 fine by Austria’s data protection authority (DSB). The DSB penalized a company for appointing its managing director as…

  • SMS Security Crisis: Hackers Selling SS7 Vulnerability for $5,000, Exposing Millions to Surveillance

    A Perfect Storm for Information Security Recent developments in the cybersecurity landscape have created what I can only describe as a perfect storm for organizations maintaining ISO 27001 certification. A critical vulnerability in the Signaling System 7 (SS7) protocol – the backbone of global telecommunications – is now being marketed on underground forums for a…