This is a question we often get asked at RTG Commercial Services by our clients. Unfortunately, the answer is, it depends which is not always what our clients want to hear. This blog provides a brief overview of the most common security frameworks used in the UK and some ideas of how to best adopt and tailor them to suit your needs. As you can see, there are many different frameworks and many options for managing your information security risk. And there are many reasons for

Do you know what makes a good password? Is your policy aligned to best practice and guidance? Think again. Does your password policy still require a complex mix of upper case, lower case, numbers and special characters? Are some special characters disallowed but not all? The picture above may seem unrealistic, but every security manager doing a floorwalk has seen it - and your password policy may be the cause. You might think that complexity and regular changing of passwo

WRONG! Digital transformation continues to be a hot topic in organisations, particularly as we start to (potentially) emerge from the covid pandemic. Remote working practices that were once seen as unusual and unproductive by some managers, have become the norm. And the discussion about what will become the 'new normal' is gathering pace, with extreme views on either side. There is no doubt that there is a divide - those who can and cannot work remotely, those who can and c

At RTG Commercial Services, a key way we help our clients is to identify and assess their risks. For most organisations, risk management is a key control to prevent security incidents, but doing it properly is a real challenge. Firstly, lets address a common question. What is the difference between a risk and an issue? Put simply, this is a risk. The dog is barking and may attack. But it has not yet attacked you and may never do so. There are things you can do and actions

We are thrilled to announce that RTG Commercial Services has become a partner of ISMS Online - simplifying and enabling efficient management of information security, data privacy and business continuity. This new partnership will allow our customers to easily access and maintain their information security, data privacy and business continuity management systems in line with the latest industry best practice. Many organisations find information security and assurance (commonl

Data from the National Fraud Intelligence Bureau shows that victims of investment fraud, lose a staggering £84,604. Losses to victims of repeated non-investment fraud are a shocking £21,121 each. These are life-changing crimes with long-lasting financial and emotional impacts. These are huge numbers, and no business can afford a reputation of allowing fraud to happen. Either they will be targeted by fraudsters or their customers will leave for services they trust more. Ei

Today is International Women's Day and a celebration of women everywhere. No matter what colour, religion, shape, size. Working or not. Today is the day to recognise the talents of women all over the world. The list of inspirational women is long and motivating, but I'd also like to shout out to wider diversity opportunities - and the blind spots that exist. Talking about diversity - and supporting programmes to increase diversity, only works if the leadership and managem

New Year, new lockdown and after a well deserved break over the festive period, organisations are having again to support staff working remotely and ensure that their data and commercial interests are protected. It's difficult to maintain a level of security awareness when you are working in a comfortable environment and distracted by pets, partners and homeschooling children. So what can you do to reduce the likelihood and impact of a security incident from remote working?

It's time to batten down the hatches and prepare for a stormy winter ahead. Prioritise your emotional and physical well-being.

With children across the UK going back to school, new cyber risks are appearing. How do we protect our sensitive data in these new times?

Lockdown, the new kid on the block. Changing lives, changing working, changing relationships. For everyone - self employed, employed, looking for work, retired - 2020 will be a year to remember. Not necessarily fondly, but one to remember nonetheless. For me, lockdown has been a period of intense learning - about myself, my work colleagues and my working preferences. And what have I learned? 1) After years of wishing I didn't need to commute, I've learned that working from

Never waste a good crisis - or so the fraudsters in our society seem to think. We live in uncertain and troubling times. The world is in lockdown, adults are worried about elderly parents, jobs and their children. For some however, life is changed but unchanged - working from home, home-schooling children, sending phishing emails, charging people for products and services that won't arrive, extracing money from pension funds and investments. For fraudsters, a crisis is a b

It is often difficult for Cyber Security professionals to communicate effectively with their internal customers. This is (in my experience) particularly the case for cyber security and information security professionals who have progressed their careers through coding, to IT security to application and Cyber Security. Their technical skills may be second to none, but their ability to tell a story and lift their heads to the strategic level is often less successful. October

Gameification - a word that filled me with dread and cynicism. Another word in the world of cyber, made up by overgrown boys to sit alongside weaponise, zero day threats and all the other phrases trying (and failing) to make cyber security sexy. As a female in the world of information technology, cyber security and assurance, I'm pretty used to dealing with overgrown boys with their boys toys and general toddler-like behaviour (yes I know I'm stereotyping, but take a look and

My role often involves assuring new technology implementations to "make them safe from hackers". The hacker in a hoodie is a popular myth that excites boards and media interest alike. The truth about cyber security is that it is much simpler and much more mundane than that. 72% of big businesses reported a cyber security breach in 2018 according to the Department of Culture, Media and Sport - many of which could be avoided with some simple steps to good cyber hygiene. If yo