#BlackFriday presents an increased risk of #Cyberattack for organisations, as threat actors take advantage of the discount period to target businesses and consumers alike. Christie Rae shares how businesses can boost #DigitaResilience: https://ow.ly/U8Ko50XyVMq #ISO27001

An image of the UK flag with an ISO 42001 button sitting in the centre of the flag. A headline sits beneath the flag reading "Could ISO 42001 Become the UK's De Facto AI Regulator?" Beneath that is an image of the author, Rebecca Harper.

Without binding rules on responsible #AI development, how can UK organisations demonstrate that their AI systems are trustworthy? In her latest blog, @beccacybersec.bsky.social shares how #ISO42001 could fill the regulatory gap: www.isms.online/iso-42001/co...

Unpacking the Cost vs ROI of ISO 27001 Certification 📈

ISO 27001 offers a robust information security framework, but how does the investment stack up against potential returns? @beccacybersec.bsky.social discusses in the blog: https://ow.ly/vbUq50Xia8l

EU says it will continue rolling out AI legislation on schedule | TechCrunch The European Union said it will stick to its timeline for rolling out its AI legislation, ignoring calls by tech companies to delay the bloc's AI rules.

The EU’s holding its course on the AI Act, aiming to lead on regulation even as timelines slip and guidance lags behind. It’s a strong stance, but for the businesses trying to prepare, navigating the gaps is getting harder.
techcrunch.com/2025/07/04/e...

The UK government’s Data (Use and Access) Act (#DUAAct) has received Royal Assent, bringing with it a host of changes to the UK’s #DataProtection regulatory landscape. Phil Muncaster discusses what these changes mean for security and #Compliance teams:

Helpful summary about the Qantas breach so far from @lisaforte.bsky.social, particularly interesting: "Look at your crucial suppliers with a DORA coloured lens (even if DORA doesn’t apply to you) and consider how to build redundancy into that supply chain in case a key supplier is hit."

Governments are still pushing for backdoors into end-to-end encryption—but at what cost? This piece breaks down why strong encryption matters and how open-source solutions could help keep our data secure. Well worth a read. 👇

Interesting move from Microsoft with the EU Data Boundary, good for compliance, but does it really solve the data sovereignty challenge? Keeping data local is one thing, but with the CLOUD Act still in play, is it truly ‘sovereign’? Transparency & control matter more than ever.

Caught the House of Commons debate on Data (Use & Access) Bill (Feb 12) while walking the dog (thrilling, I know). Streamlining data use sounds great, but fewer safeguards, more AI-driven decisions, & looser oversight-aren't we just creating new risks? www.parallelparliament.co.uk/mp/john-haye...

The UK’s push to weaken end-to-end encryption under the Investigatory Powers Act puts global data privacy at risk. If backdoors become the norm, how can businesses maintain compliance and trust? Security shouldn’t be negotiable.

Really enjoyed learning all about this new standard and looking at it's application for responsible, secure and ethical AI usage within businesses

I feel like this deadline for banning “unacceptable risk” AI use cases under the EU AI Act passed relatively quietly in my news feeds. It's good to see some more details here!