IT Governance Publishing

First in our ITGP Author Interview series - We interview Dr Julie Mehan to discuss her book Artificial Intelligence - Ethical, social, and security impacts for the present and the future

Brexit and Schrems II and the practical implications for the UK and EU data transfers

Understand why cyber security awareness is vital for your professional and personal life

Preston Bukaty is an attorney and consultant. He specializes in data privacy GRC projects, from data inventory audits to gap analyses, contract management, and remediation planning. His compliance background and experience operationalizing compliance in a variety of industries give him a strong understanding of the legal issues presented by international regulatory frameworks. Having conducted more than 3,000 data mapping audits, he also understands the practical realities of project management in operationalizing compliance initiatives.

Preston’s legal experience and enthusiasm for technology make him uniquely suited to understanding the business impact of privacy regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). He has advised more than 250 organizations engaged in businesses as varied as SaaS platforms, mobile geolocation applications, GNSS/telematics tools, financial institutions, fleet management software, architectural/engineering design systems, and web hosting. He also teaches certification courses on GDPR compliance and ISO 27001 implementation, and writes on data privacy law topics.

Preston lives in Denver, Colorado. Prior to working as a data privacy consultant, he worked for an international GPS software company, advising business areas on compliance issues across 140 countries. Preston holds a juris doctorate from the University of Kansas School of Law, along with a basketball signed by Hall of Fame coach Bill Self. tection in North America

Cyber Security Threats and the risks they pose to SMEs

The world of work is changing. Many employees no longer hold the traditional nine-to-five job. Instead, working time is increasingly flexible. Technology has enabled a rapid rise in the number of remote workers in recent years; the TUC estimates that the number of UK people working from home increased by a fifth in the ten years to 2018, and now stands at around 2.5 million people. This number is expected to continue to rise – as a result of changing attitudes and technological developments – with half the UK workforce expected to be working remotely by 2025.

The increase in commercial aviation and international travel means that pandemics now spread faster than ever before.

Seasonal flu, zoonotic contagions such as Ebola, swine flu and avian flu (e.g. H5N1 and H7N9), respiratory syndromes such as SARS and MERS, and now COVID-19 (the 2019 novel coronavirus) have affected millions worldwide.

Add the ever-present threat of terrorism and biological warfare, and the possibility of large proportions of your workforce being incapacitated is a lot stronger than you might think.

How would your business fare if 50% or more of your employees, including those you rely on to execute your business continuity plan, were afflicted by illness – or worse?

Although nothing can be done to prevent pandemics, their impact can be significantly mitigated. Business Continuity and the Pandemic Threat explains how.

Sophie Sayer and Bridget Kenyon are joined by Nicola Day and Camden Woollven to discuss the release of ISO 27001 controls – A guide to implementing and auditing.

A new is book titled, A Guide to the Implementation and Auditing of ISMS Controls based on ISO/IEC 27001.

Reasons why Bridget chose us to publish her book are:-

because you're quite prominent in the marketplace and I can see what you're aiming to achieve which is, bridging the gap between what people need and what they think they need. If you know what I mean, helping people understand what they actually need and turning that into reality. Where the books are there to support that process and then the consulting is there to facilitate it.

This is the book you need when you’ve decided you want to be complaint with or certified to ISO 27001

Implementation guidance, which is easy to understand by people working in business

This book fills the gap between the standard and how companies can implement it

This book also includes auditing guidance

The modern security practitioner has shifted from a predominantly protective site and assets manager to a leading contributor to overall organisational resilience. Accordingly, The Security Consultant's Handbook sets out a holistic overview of the essential core knowledge, emerging opportunities and approaches to corporate thinking that are increasingly demanded by employers and buyers in the security market.

This podcast is 3 minutes long and talks about updating Richards book and his new business venture.