Cyberattack
-

FCA confirms new incident and third-party rules after cyberattacks
Regulator says new rules will make existing incident and third-party reporting clearer, more consistent, and easier for firms to follow.
-

Backed into a corner: Why pressure on Iran is expanding its options
The conflict in the Gulf is more than a security event; it is a live stress test of risk management. Ben Todd offers six steps for organizations operating in the region.
-

Sportadmin gets SKr 6m fine for lacking IT security
Personal data of a large part of Sweden’s population was leaked on the darknet following an attack on the company in January 2025.
-

UK announces cyber action plan to tackle threats to public services
Ministers believe investing in cybersecurity apparatus is necessary to protect the UK against threats from state and non-state actors at home and abroad.
-

UK cyberattacks led to record insurance payouts in 2024
UK government and insurers urge businesses not to ignore cyber risks, as major retailers try to recover from a string of costly cyber attacks this year.
-

Cascading risk and mitigation lessons stemming from the AWS outage
Organizations are threaded together in a web of digital infrastructure. It sounds pretty until something gets stuck. Our experts weigh in on strategies that can stem the fallout.
-

Cyber incident response and compliance with DORA
A consideration of the expectations and processes to follow should an in-scope entity, (including banks, assets managers, and insurers), suffer a cyberattack.
-

Capita fined for cybersecurity failings that led to data breach
Ineffective response to security alerts, inadequate access controls, lack of active directory tiering, and penetration testing shortcomings all cited as factors.
