New Cybersecurity Directive holds executives personally liable and up to €10 million in fines for organisations

A new directive set to be launched in Ireland in October 2024, could lead to 4,000 businesses in Ireland and their senior executives being personally liable and their organisations exposed to potential fines of up to €10 Million. The expanded Network and Information Security Directive (NIS2) is being implemented to ensure businesses classified as essential and important entities take appropriate measures to enhance their cyber vigilance and protect sensitive data.

In response to these challenges, OpenSky, the business process automation specialists & Microsoft Solutions Partner for Data & AI who use their expertise to bring AI to the centre of digital transformations, have now launched a new Data Management and Governance service for public and private sector organisations.

This new service by OpenSky, powered by Microsoft Fabric & Purview, applies a ‘Data Fabric’[1] approach as the strategy to connect, protect and make data accessible for organisations, aiming to ensure that they meet robust governance and regulatory compliance requirements. In addition their Data Fabric service allows organisations to build greater AI powered insights from connected data by breaking down internal data silos at scale across departments.

Commenting on the new OpenSky offering which will address organisations concerns, Michael Cronin, managing director, said, “The NIS2 directive is reshaping how we approach data management in Ireland, both in the public and private sectors. It’s an opportunity for us to lead by example, ensuring that our data strategies and AI implementations are secure, transparent, and aligned with the best practices in data governance.

The NIS2 directive is an EU-wide legislation on cybersecurity that provides legal measures to increase the overall level of cybersecurity in the EU, and urgently puts pressure on public and private sector organisations to determine its impact on their current cybersecurity posture.

The expanded NIS2 Directive is estimated to impact about 4,000 businesses in Ireland, which is significant considering less than 100 businesses in Ireland are currently impacted by NIS1. The expanded NIS2 brings new categories where organisations in scope are either directly involved in the provision of essential services or connected to their delivery.

Roseanne Killeen, Acting CEO Ireland East Hospital Group, who has worked with OpenSky on enriching the access and integration of HR & Finance data in the hospital group said, Healthcare faces major hurdles in making data accessible across various departments, and this is due to numerous disconnected data silos. Navigating the challenges around governance and prevention of data breaches can seem like an arduous task but it doesn’t have to be the case when you have access to all your data. We’re not only in a position to govern our data but we’re also now better equipped to provide accountability and transparency to the HSE.”

Based in Naas in Co Kildare, OpenSky has a rich heritage as an Irish digital transformation specialist providing AI powered IT solutions and consultancy services to both public sector and private organisations. OpenSky employs more than 110 people, and this year the company celebrates its 20th anniversary, positioning them as one of Ireland’s most established IT services businesses.

To assess your organisations’ eligibility for a funded Data Governance proof of concept, follow the link here: www openskydata.com

The 5 key trends in digital transformation for 2024: what companies need to know

In a world where technology is developing at an incredible pace, digital transformation is not just a trend but a necessity for every company that wants to remain competitive. Experts from the consulting company Avenga have identified five key trends that will shape the business landscape in the near future.

Artificial Intelligence and Machine Learning

Artificial intelligence and machine learning continue to lead the way in digital transformation, transforming industries and redefining business capabilities. These technologies automate routine tasks and open up new horizons for innovation and service personalization. In particular, advanced data analytics allows for processing and analyzing huge volumes of data faster and more accurately than ever before. Personalization of the customer experience enables companies to create individualized offers for each customer, optimize the customer journey, and improve service. In turn, automation and process optimization not only increase enterprise efficiency but also significantly reduce the likelihood of errors. 

 

Moreover, artificial intelligence also improves decision-making by providing organizations with deep and accurate analytical data for making more informed decisions. According to specialists from the leading digital transformation consulting company Avenga, a prominent example of successful AI and machine learning application is Amazon. The company uses artificial intelligence to personalize product recommendations for its customers. More specifically, machine learning systems analyze purchase history, search queries, and user behavior on the website to suggest the most relevant products and enhance the customer experience.

Process Automation and Robotics

Process automation and robotics are changing traditional approaches to business and production management. These technologies guarantee efficiency and cost reduction, increased accuracy and reliability of task execution, improved working conditions, integration with artificial intelligence, and the development of intelligent production. For example, Toyota has implemented robots on its production lines to automate assembly operations. This has increased productivity, reduced the likelihood of errors, and improved workplace safety for employees.

Cloud Technologies and Big Data

According to our interviewees, cloud technologies and big data analytics are the most significant trends in digital transformation, offering enterprises new ways to store, process, and analyze information to improve decision-making and business operations. The scalability and flexibility of cloud solutions allow companies to amplify their IT resources according to current needs, providing agility and cost optimization. Access to advanced analytical tools enables companies to better understand customer needs, optimize processes, and make informed strategic decisions. 

Improving collaboration and communication contributes to better interaction between teams, regardless of their geographical location. Cloud technologies also offer advanced cybersecurity solutions, helping protect valuable data from external threats. Importantly, these technologies are available to companies of all sizes, not just large corporations. 

Among successful examples of implementing this trend is Netflix. The company uses cloud computing and Big Data analytics to store and process huge volumes of video content, as well as to analyze user preferences and optimize its streaming service.

Cybersecurity

In the era of digital transformation, cybersecurity is a top priority for companies of all levels and industries. Hackers constantly refine their methods, using increasingly sophisticated ways to gain unauthorized access to corporate resources. Modern cybersecurity solutions aim to create integrated systems that can automatically detect, analyze, and respond to potential threats. Training employees in the principles and basics of cybersecurity becomes a necessity, as many attacks begin with social engineering or phishing. 

Moreover, compliance with regulatory requirements and standards in cybersecurity, such as GDPR, HIPAA, or PCI DSS, not only protects the company from fines but also enhances its business reputation. Developing and implementing a comprehensive strategy includes regular audits, monitoring, threat analysis, and rapid incident response. For example, CyberArk provides cybersecurity solutions, specializing in privileged access management and protection against internal threats. Their products protect critical assets and comply with compliance requirements.

Sustainable Development and Social Responsibility

Sustainable development and social responsibility are an integral part of the digital transformation strategy for companies, as consumers and investors increasingly choose brands that demonstrate care for social and environmental issues. A good example is Unilever, which has launched a sustainable development program to minimize its environmental footprint and improve the social well-being of the communities with which it interacts. The program specifically focuses on reducing waste in production, increasing energy efficiency, and supporting local farmers.

It is important to understand that digital transformation is not a one-time project but a continuous process that requires constant adaptation and innovation. The five key trends outlined by the experts from the consulting company Avenga emphasize the need for companies to be flexible, secure, innovative, and socially responsible in their approach to digital change. Understanding and embracing these trends will allow organizations not only to survive but also to thrive in a rapidly changing and increasingly digital world.

 

Deepfakes and Hacktivism Take Centre Stage at Cyber Leader Summit in Belfast

Deepfakes have jumped from the pages of science fiction to become a legitimate business risk that could influence polls in the upcoming UK election . That was one of the messages from Deryck Mitchelson, Global CISO at Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading AI-powered, cloud-delivered cyber security platform provider, when he spoke at the Cyber Leader Summit held in Belfast at the Titantic Belfast on the 14th of February. As these sophisticated manipulations proliferate, the integrity of democratic processes faces unprecedented challenges, highlighting the urgent need for robust defences against AI-driven disinformation campaigns.

The one-day event brought together over 110 delegates and experts from Check Point, Microsoft, GitHub and Women in Cyber Security, among others, to explore the biggest cyber threats facing organisations today. It is the first time the event has been held in Belfast, which is fast becoming a hub for major players in the technology space.

During his presentation, Deryck explored the topic of Artificial Intelligence (AI) in relation to cybercrime and its influence on attack methods. He discussed how it has evolved to become a serious instrument in a cybercriminal’s arsenal when executing phishing, ransomware or hacktivism campaigns. “AI is not a new notion; we have been using it as the brain behind our threat intelligence for many years, “said Deryck. “However, the technology has changed so rapidly over the last twelve months and new versions such as Generative AI (GenAI) have made it more attainable for cybercriminals. While these skills were once reserved for technically minded hackers, anyone with access to the internet and free online tools can now generate alarmingly realistic phishing emails with a few good prompts.”

Deryck went on to share examples of how deepfakes, including voice clones, have had an impact on businesses and could potentially influence major events such as the general elections later this year. There have been several incidents recently, including a worker in Hong Kong who paid out £20 million to a fraudster impersonating a CFO during a conference call. However, he was also clear that defenders are using AI to fight fire with fire. He added: “Deepfakes used to be the work of science fiction, but they are now a legitimate risk for businesses and their bank balances. They could also be used to influence public opinion during the upcoming elections.

“It is important that we don’t underestimate the potential impact this technology could have on organisations of all sizes. The good news is that companies like Check Point are leveraging the power of AI and Deep Learning to predict and prevent attacks from happening.”

In the morning, delegates also heard from other industry experts such as Lotem Finkelstein, Director of Threat Intelligence at Check Point. He provided insights into the world of hybrid cyberwarfare, demystifying the role of cybercrime during time of conflict. Other sessions included talks from Lesley Kipling, Chief Advisor at Microsoft on the importance of zero trust and Martin Woodward, VP of Developer Relations at GitHub regarding vulnerability fixes in open source.

The afternoon featured more presentations with Jennifer Cox, Director at Women in Cyber Security advocating for diversity in the industry, before the day finished on a panel discussion where experts covered a range of topics, including bringing new talent into the industry. This was a sentiment shared by Seamus McCorry, Check Point’s country manager, in his closing remarks. He was keen to emphasise the potential for Northern Ireland to become a cybersecurity powerhouse.

Seamus said: “We have a great pool of talent coming through our universities and it is important that we engage and encourage this new generation to live and work in this vibrant city. The cybersecurity industry is a thriving business, and together we can build a resilient future.”

MTU Drives Innovation with Cybersecurity and Sustainability-Themed Hackathon

Munster Technological University (MTU) and Cyber Ireland, in collaboration with the INGENIUM University alliance, is set to host an exhilarating Cybersecurity and Sustainability-themed Hackathon on the 12th and 13th of February at the Bishopstown Campus. In this dynamic event, 50 students from the INGENIUM University alliance, spanning 10 universities, including MTU, and multiple disciplines, will converge to tackle key challenges in cybersecurity and sustainability.

The hackathon focuses on addressing industry challenges in cybersecurity and sustainability, allowing students to gain a deeper understanding of real problems and develop potential solutions. The hackathon aims to foster collaboration and innovation among multidisciplinary international student teams and provide a practical application of academic knowledge. Participants will navigate the process of defining problems, developing solutions, fostering their entrepreneurial spirit, and presenting their work through impactful pitches. Cash prizes will be awarded for the best overall concept and the best pitch.

Teams will comprise five individuals, strategically selected to ensure a balanced academic background, with no team being exclusively composed of cybersecurity students. The teams will be formed from across INGENIUM, which is an alliance of ten universities from ten European countries, comprising 172,000 students and 15,000 staff. MTU proudly holds the position of a founding member of the INGENIUM Alliance and leads the Entrepreneurship workstream.

This event underscores MTU’s commitment to promoting regional, national and international partnerships and equipping students with the skills necessary to pursue and achieve their ambitions. With the collaboration and support of MTU’s External Affairs Office, Cyber Ireland and the MTU Innovation and Enterprise Office, this event promises to be an outstanding display of academic excellence and fun.

Dr. Sean McSweeney, MTU INGENIUM Coordinator said: “MTU is a very proud partner in the INGENIUM Alliance as we expand our global outlook and develop a better future for our students together.”

Eoin Byrne, Cyber Ireland Cluster Manager said: “The Hackathon aligns closely with Cyber Ireland’s goal of Developing the Workforce. We must make cybersecurity accessible with clear pathways and progression, while inspiring the next generation to consider a career in cybersecurity. It’s great to have the support from our industry partners who are key to the success of the event.”

Sponsors of the event have stated:

Rob Cameron, Cybereason: “Cybereason are delighted to sponsor this hackathon at MTU. As a company who believes in the growth of cybersecurity talent, witnessing the next generation of professionals emerge first hand is truly inspiring. A practical event like this gives a great platform to showcase their talent and skill sets and we are privileged to be a part of their journeys”.

Brian Ahern, Senior Manager, ISRM Training & Awareness, McKesson: “McKesson are delighted to sponsor the Cybersecurity Hackathon event in MTU which educates students on how to protect their future employers against evolving cybersecurity concerns.”

Louise MacIndoe, Security Program Director, Logitech: “Logitech is proud to support the Cyber Ireland and MTU Student Cybersecurity Hackathon 2024, providing an opportunity for young innovators to collaborate and create solutions for real-world problems. We are committed to nurturing the future generation of business & technology leaders, and events like this provide an excellent platform for doing so.”

Luke McDonnell, Head of PR, Huawei Technologies: “Developing the next generation of cyber-talent is important because Ireland has a great opportunity to become a cybersecurity leader in Europe. Hackathons challenge students to put their college learning into practice in a practical way and while technical skills and know-how are important, so too are the soft-skills that students will develop throughout the challenge, these skills cannot be understood and are essential for today’s modern graduate. Huawei is proud to support the Cyber Ireland and MTU Student Cybersecurity Hackathon 2024 and looks forward to seeing the students in action.”

Cyber Ireland unveils ambitious roadmap to drive Cyber Security sector growth by 2030

Cyber Ireland, the leading national cyber security cluster organisation, has today launched a comprehensive strategy aimed at driving the growth of Ireland’s cyber security sector by 2030. With a proven track record since its establishment in 2019, Cyber Ireland has evolved into a national representative body, uniting over 160 member organisations, including start-ups, SMEs, multinational corporations, and educational institutions.

Originally conceived to address cyber security skills shortage as an initiative at Munster Technological University, Cyber Ireland has grown into a recognised industry force, hosting activities across four strategic workstreams and also responsible for organising the annual Cyber Ireland National Conference (CINC), the premier cyber security conference which attracts leading cyber security experts from across Ireland and the globe.

According to the State of the Cyber Security Sector 2022 report the cyber security sector in Ireland employs over 7,300 professionals working across nearly 500 companies contributing €1.1 billion annually to the economy. Ireland requires a strong domestic cyber security sector with companies of scale that can deliver high value services to provide cyber resilience for the country and compete internationally. This can build on existing strengths as the island of Ireland grows into an international hub in Europe for cyber security multinational operations and further increase FDI in cybersecurity.

There has been strong demand for cyber security skills over the past four years with a trebling of job roles advertised between 2019 and 2022, from 2,000 jobs advertised to 6,700 open roles. On a growth trajectory of 10%, the sector anticipates the creation of 10,000 additional jobs by 2030, totalling 17,000 in the sector, contributing €2.5 billion per annum to the economy. How this demand is met given the existing skills shortages and skills gaps will be central in making Ireland a leader for cyber security talent globally.

Pat Larkin, Chairperson of Cyber Ireland and President, Ekco Security, said, “There is an incredible opportunity in front of us. Analysts quantify the current Cyber Security market opportunity in or around 200-250BN USD with a 15% growth rate. A recent consultancy report estimates that the current vended market spend may be 10 times under penetrated and thus the addressable market may be between 1.5 and 2 trillion USD.”

“No matter how you look at it, we cannot capture or service even a small percentage of that addressable market currently as individual entities. By working together as an industry sector we have a massive opportunity to capture a greater share of this market from Ireland, through Cyber Ireland,” Larkin added.

Eoin Byrne, Cluster Manager Cyber Ireland, said, “We have established the cyber security cluster as the representative body and coordinator of industry in Ireland, and are now recognised in Europe with our Cluster Management Excellence Award. We have quantified for the first time the size, scale and contribution that the cyber security sector makes to Ireland inc. and its potential for growth.

We now need to take Cyber Ireland, and the cyber security sector, to the next level by working with the wider ecosystem across industry, government, academia, training providers, research, investors and industry associations to drive business growth and position Ireland as a global leader,” Byrne said.

The opportunity now exists for Ireland to capitalise on its cyber security strengths and competitive advantages to develop a leading cyber security sector in Europe, and globally, providing resilience domestically and competing internationally. Cyber Ireland aims to be the driving force to deliver on Ireland’s cyber potential through the implementation of its new cluster strategy 2024 – 2027. The new strategy has four Focus Areas across Building the Community, Driving Business Growth, Developing the Workforce, and Advocacy and Promotion.

The cluster has recently been accredited with the European Cluster Excellence Initiative (ECEI) Bronze Label for “Striving for Cluster Excellence” by improving its management capabilities and performance levels. Cyber Ireland joins over 1,000 cluster organisations from 45 countries that have been benchmarked and received the award. The recognition will create additional opportunities for the cluster to promote the sector and engage with European organisations and clusters, and secure European funding.

Cybersecurity Mastery: 6 Insider Tips to Safeguard Your Data and Identity

In today’s digital age, cybersecurity is a growing concern for individuals and businesses alike. With the constantly evolving technology landscape, the risk of cyber-attacks and data breaches has become more prevalent than ever before. From phishing emails to ransomware attacks, our personal information and sensitive data are under threat every day.

As we continue to rely on technology for work, communication, and daily tasks, we must take proactive measures to protect ourselves from these potential threats. Let’s dive in and learn how to master cybersecurity!

Consider Removing Your Data

Many people are unaware that their personal information is publicly available on various websites, making them vulnerable to identity theft and other cybercrimes. If you no longer need your account or just want to remove your online presence, you should know how to remove info from MyLife and similar websites. By doing so, you will reduce the chances of your data being accessed by unwanted parties.

Use Strong, Unique Passwords

Having a strong, unique password for each of your online accounts is no longer a recommendation but a necessity. Hackers and cybercriminals constantly come up with new ways to access personal data, and using easily guessed information like birthdays or common words only makes it easier for them. To ensure your online security, it’s best to use a combination of uppercase and lowercase letters, numbers, and special characters that aren’t easily tied to your personal information. The next time you’re creating a password, think beyond the obvious and get creative!

Activate Two-Factor Authentication

Two-factor authentication, also known as 2FA, is an additional layer of security that requires users to provide two forms of identification before accessing their accounts. This typically involves a password and a unique code sent to your phone or email.

Once you enable 2FA, you add another level of protection against unauthorized access to your accounts, even if someone manages to obtain your password. Many popular websites and apps offer this feature, so be sure to activate it whenever possible.

Stay Alert for Phishing Attempts

Phishing is a common tactic used by hackers to steal personal information through deceptive emails or websites. These fraudulent attempts often appear legitimate and may include links, attachments, or requests for personal information.

To safeguard against phishing attacks, you must stay alert and never click on suspicious links or provide personal data unless you’re absolutely certain of the source. Even some seemingly authentic emails can be phishing attempts, so always double-check the sender’s email address and verify any requests for sensitive information before taking action.

Keep Software and Devices Updated

Regularly updating your devices and software is one of the simplest yet most effective ways to protect your digital footprint. These updates are not just about adding new features or improving performance — they often contain important security patches that safeguard against known vulnerabilities.

If you keep your devices and software up to date, you can minimize the risk of cyber-attacks and protect your sensitive information. Don’t procrastinate on those pesky updates because your cybersecurity depends on it!

Use Reliable Antivirus Software

Reputable antivirus software offers real-time protection and detects any malicious activity or attempts to access your personal information. Make sure to research and choose a trusted antivirus software that fits your needs, and keep it updated regularly. Antivirus software can also provide additional features such as anti-phishing tools and ad blockers to further enhance your online security.

By following these insider tips, you can better protect yourself against potential cyber threats and safeguard your data and identity. Remember, cybersecurity is an ongoing effort, so stay vigilant and keep up with the latest best practices to ensure your digital safety. Don’t let cybercriminals get the upper hand — take control of your cybersecurity today!

Strategic Shift: 55% of CISOs Now View Cybersecurity as Top Priority

The issues that Chief Information Security Officers (CISOs) encounter are changing dramatically in the ever-changing cybersecurity world. Stott & May’s Cyber Security in Focus report for 2023 offers a comprehensive look at the trends impacting CISOs, shining a light on the industry’s most urgent concerns. Notably, this year’s survey reveals a significant strategic shift, with 55% of CISOs now identifying cybersecurity as their top priority, a break from previous worries.

One of the report’s significant findings is the increasing significance of budget restrictions as the principal barrier to implementing cybersecurity roadmaps. Over the last year, there has been a significant 16% year-on-year rise in CISOs citing financial constraints as their top challenge. This move is representative of a wider industry trend in which economic concerns force security officials to accomplish more with fewer resources.

The scarcity of internal capabilities is a continuous concern for CISOs, as emphasised by 34% of survey respondents. A startling 66% of security leaders say sourcing personnel is a significant challenge, emphasising the continued difficulty of locating and keeping skilled individuals in the area. Organisations are wrestling with the requirement to bolster their defences against an increasingly complex threat landscape as demand for cybersecurity knowledge continues to exceed supply.

The roadblocks to effective plan implementation are numerous, ranging from internal talent gaps to gaining leadership backing and building a security-centric culture. What sticks out in the present scenario, however, is the rising effect of economic issues, which forces CISOs to manage their cybersecurity projects with limited finances.

According to this year’s Cyber Security in Focus poll, money restrictions have eclipsed internal capabilities as the top impediment to plan implementation, with 51% of security leaders citing budgetary constraints as their primary impediment. Internal skills, while still a major issue for 34% of CISOs, have taken a second seat to the acute financial difficulties that organisations worldwide confront. Board-level buy-in (11%) and technology (3%) are also mentioned as hurdles by the CISOs polled.

The cybersecurity talent shortage is a chronic issue, with 66% of security leaders failing to fill open jobs inside their organisations. Alarmingly, approximately 69% of security openings remain vacant even after an 8-week period, highlighting the severity of the skills shortage.

The rising expectation of wage levels in the cybersecurity arena is exacerbating the personnel scarcity. A significant 47% of CISOs say that salaries have climbed by more than 11% year on year, while another 31% estimated salary inflation is between 6 and 10%. The competitive market for cybersecurity specialists is heating up, causing organisations to rethink their remuneration structures in order to recruit and retain top personnel.

Strategic cybersecurity investment remains a priority but with limited flexibility for innovation. A significant 44% of CISOs report that their budgets will either remain the same or decrease, emphasising the importance of resource allocation. Only 53% feel security expenditure is keeping up with digital business expectations, indicating a possible divergence between security goals and organisational strategy.

In terms of investment priorities, CISOs are focusing on cloud security (25%), identity and access management (IAM) (20%), and security and vulnerability management (18%). These goals demonstrate a thorough understanding of the changing threat landscape and the need to strengthen defences in key areas.

 

A notable shift in viewpoint may be seen as CISOs try to link cybersecurity with larger business initiatives. Moreover, 60% of respondents believe that the security function improves the total value proposition to clients. This change highlights the evolution of cybersecurity from a technical requirement to a strategic imperative that directly contributes to corporate objectives.

The Cyber Security in Focus study is a yearly in-depth investigation that draws insights from a high-quality sample of 60 CISOs and security professionals. The report, which was sourced from Stott and May’s professional network across EMEA and North America, combines quantitative research with qualitative interviews with key industry professionals. 

In the fast-expanding realm of cybersecurity, Haris Pylarinos, Founder & CEO of Hack The Box, emphasises the need to be outward-looking and ensure internal capabilities remain current. Crossbeam’s CISO, Chris Castaldo, underlines the need to know the company as a critical barrier to successful cybersecurity roadmap implementation.

Ultimately, the 2023 Cyber Security in Focus study presents a complete picture of the problems and possibilities that CISOs face. The industry’s transformation, driven by fiscal limitations, personnel shortages, and the requirement to connect security measures with larger business plans, has resulted in a strategy shift towards cybersecurity as a primary priority. As CISOs face these issues, intelligent decision-making and creative solutions will be essential in navigating the complicated and evolving cybersecurity landscape.

Cyber threats have real world consequences – it’s important for companies to get ahead and protect themselves today

Information Security Management is the first line of defence for a company against a range of threats, including data breaches, ransomware attacks, and malicious intrusions. With cyber attacks growing in frequency and sophistication, organisations of all sizes face unprecedented risks to their operations, finances, and reputation.  

Almost 54% of international business leaders believe the cybersecurity risk to their organisation has increased over the past 12 months.2 The financial and reputational damage inflicted by a cyber attack can be immense. Organisations operating in every sector – manufacturing, construction, retail, wholesale, health, ICT and all others – are at risk of these threats daily. The cost of recovery from an Information Security Management Breach can often exceed the investment required for preventative cybersecurity measures. 

Stewart Hickey, Head of Business Excellence, NSAI said: 

Standards and certification can be used by companies to underpin both legal and ethical obligations with respect to information security management and GDPR. Standards provide an important means to give technical effect to a principle or regulation in a way that can be evaluated, compared and certified, thereby offering a compliance pathway. Consequently, every business must protect itself – and ISO/IEC 27001 can help you identify the essential tools and skills to do this. Organisations need to be aware of the most serious threats so they can protect their reputation and finances. ISO/IEC 27001 equips companies with protocols and procedures that minimise the chance of a cybersecurity breach. 

The National Standards Authority of Ireland (NSAI) is urging firms in Ireland to be aware of the importance of cyber security. Cyber criminals are constantly developing new ways to steal data, demand ransoms, and disable IT systems. Any business, large or small, is a potential target. Tackling these ever-evolving dangers can’t be just another management talking point- it is a matter of corporate survival. 

Conor Dowling, Director of Managed Services with ProCloud, commenting on the benefits undertaking the ISO/IEC 27001 certification process said: 

We applied for and achieved ISO/IEC 27001 certification for how we manage security for our own business, and the benefit of this also extends to our clients. We look after their security, so that gives them confidence. There is a huge concern and consciousness regarding cybersecurity in today’s climate. We also found that the benefits extend to ProCloud’s own staff as we now have clear processes in place from the moment an employee starts with us, so they feel confident and secure in their management of our systems and handling of information on behalf of clients. We would recommend ISO/IEC 27001 to any company looking to improve their cyber resilience and protect the security of their business”. 

Certification to ISO standards is a significant step for any company. The NSAI are hosting free webinars so you can find out more about what is involved and how you can help your company secure itself against today’s most serious cyber threats. Places are limited and you can register at nsai.ie/27001 for the upcoming webinar dates; November 30th 2023, December 6th 2023, and January 25th 2024.  

You can also download a free self-assessment tool to help analyse your current Information Security Management status and how ISO/IEC 27001:2022 could enhance it. Prepare your company now for 2024 – regardless of the size of your business or the sector in which you operate, cybersecurity needs to be a priority. 

[1] https://www.aon.com/2021-global-risk-management-survey/index.html?utm_source=media=&utm_medium=org-digital&utm_campaign=ri_global-risk-management-survey__global_all&utm_content=press-release_all

2 https://www.mazars.ie/Home/Insights/Global-insights/Cyber-security-report-2022

2 in 3 Irish businesses to increase investment in cybersecurity according to Dell Technologies survey

A new survey undertaken by the Dell Technologies in association with the Executive Institute found that two-thirds (66%) of businesses in Ireland are planning to invest in their cyber security as cyber threats continue to increase. Moreover, 93% of organisations have already taken steps to enhance their data protection measures in the past twelve months.

The latest ‘Digital Pulse Survey’ from Dell and the Executive Institute of over 150 business leaders, shows that Irish businesses are struggling under the weight of increasing cyber-attacks. The majority of respondents (64%) say that the ever-growing number of attacks is the main barrier to enhancing their organisation’s cyber resilience, with 13% citing lack of in-house cyber skills and expertise and 9% citing outdated technology and upfront investment in cybersecurity solutions.

Highlighting the cyber dangers posed by hybrid working, 68% of businesses have already taken steps to mitigate the cyber risks of flexible and remote working models.

The Digital Pulse Survey also reveals that Irish businesses are increasingly turning to technology to help them achieve their sustainability goals. Over 8 in 10 business leaders (84%) say that technology has positively impacted their sustainability goals to date. Over one-third (37%) are using technology to increase energy efficiency, 24% are using it to facilitate hybrid or remote working, and 20% are using technology to help reduce carbon emissions.

In addition, almost half (49%) of Irish business leaders say they are considering replacing outdated technology in the next 12 months to reduce higher energy costs.

Commenting on the survey results, Catherine Doyle, Managing Director, Dell Technologies Ireland, said: “It’s clear that cyber risk continues to weigh heavily on business leaders as they advance their digital transformation plans. The vast majority have taken steps to enhance their data protection, and two-thirds are looking to increase this investment in the year ahead. Proactive and timely action will be vital to strengthening cyber defences.  

“As businesses work to enhance their cyber resilience, it’s also positive to see the role of technology in driving sustainable innovation. From using technology to increase energy efficiency and facilitate remote working to achieving operational efficiency, digital transformation can help leaders shape a more sustainable future.”

Conor Morris, Managing Director, Executive Institute, said: “The results of the survey suggests that the threat posed by cyber-attacks continues to grow and threatens the future success of our member organisations. These attacks are becoming more frequent and more sophisticated.  Planning for and adopting a security strategy that remains current and as up to date as new cyber threats themselves will be a key factor going forward.”