COMMENCEMENT OF CERTAIN SECTIONS OF THE PROTECTION OF PERSONAL INFORMATION ACT, 2013 – 1 JULY 2020.

Critical Portions of the POPI Act are Scheduled to Commence   The Protection of Personal Information Act (POPIA) promotes the protection of personal information processed by public and private entities and seeks to ensure that the human right to privacy is upheld. We have noted in recent media releases that the Information Regulator has made […]

5 STEPS TO CREATING A CYBER SECURITY INCIDENT RESPONSE FRAMEWORK

With Patrick Ryan, Amanda Hechter and Raymond du Plessis from Mobius Consulting        The NIST Cyber Security Incident Response Framework   Cyber security breaches should be taken as a “when” and not an “if” occurrence, especially given the rise in cyber attacks due to remote working. The wrong time to put your cyber security incident response plan in place is […]

KNOW AND MANAGE YOUR APPLICATION RISKS DURING COVID-19

With Amanda Hechter and Raymond du Plessis from Mobius Consulting as well and Lee Bristow from Phinity Risk     Improve your Identity and Access Governance (IAG) & Assess your Application Security Risk     With COVID-19 catching much of the world off-guard, there has been a scramble for organisations to make key applications, such […]

ETHICAL HACKING AND CYBER SECURITY TESTING: 7 TESTS TO CHECK YOUR CYBER SECURITY

With Patrick Ryan, Managing Director; and Robert Len, Lead Security Tester of Mobius Consulting.      Remote Working may be the New Normal    To help slow down the spread of COVID-19, companies around the globe have sent their employees home, requiring them to work remotely. For some companies this transition to remote working was easy to implement as there has been […]

[FREE INFOGRAPHIC] 3 STEPS TO A SUCCESSFUL INFORMATION SECURITY AWARENESS CAMPAIGN

With Yolandi Moodley, Senior Managing Consultant for Mobius Consulting.     We live in the digital age, where information is shared at an astronomical rate. Since remote working has become the “new normal” in a very short space of time, many companies are entering uncharted territory when it comes to managing their information security risks. […]

KNOW AND MANAGE YOUR SUPPLIER SECURITY RISK DURING COVID-19-19

With Lee Bristow from Phinity Risk Solutions and Malcolm Parker, Senior Managing Consultant at Mobius Consulting.     Manage your Supplier Security Risk    The novel Coronavirus has created a number of challenges for society and most organisations are not well prepared to cope with this pandemic and the impact that it has on their trade. […]

HOW TO MAINTAIN CORPORATE PRIVACY IN A HOME-BASED OFFICE

With Patrick Ryan, Managing Director and Roelien Howell, Principal Consultant from Mobius Consulting.     POPIA: The Protection of Personal Information Act   The Protection of Personal Information Act (POPIA) aims to enforce protection of personal information by creating the lawful conditions for how this information must be managed. POPIA is closely related to the […]

CORONA VIRUS AND WORKING REMOTELY

4 CRITICAL RISKS FOR A COMPANY TO MANAGE   Coronavirus poses a risk to humanity, possibly the greatest risk to our physical health that many of us have faced in our lifetime, and at the same time, unethical cybercriminals are using the pandemic as an opportunity to increase hacking attempts and phishing attacks. In order […]

THE IMPORTANCE OF CYBER SECURITY AND THIRD PARTY RISK MANAGEMENT FOR YOUR BUSINESS

Having a solid cybersecurity and third party risk management plan for your business is paramount.

WILL THIS BE THE YEAR WE SEE THE POPI ACT COME INTO EFFECT?

THE LONG WAIT TO ENFORCEMENT  The Protection of Personal Information Act (POPIA) was first tabled in 2005. In 2013, the President signed off the act.  Subsequently, a few developments were established, we saw the appointment of the Information Regulator in 2016 and most recently in 2019 the final regulations of the act were published. These […]

WHERE TO START WITH PRIVACY

Acting ethically means organisations need to understand their personal information processing activities together with the positive and negative impacts on all parties. This means organisations need to be effective data stewards and align processing activities with applicable privacy compliance requirements. Being compliant with privacy law / regulations may be daunting, however we have a recommended […]

READY, SET… PRIVACY

We’ve certainly noticed recent changes in global Privacy regulation, including the go live date of the General Data Protection Regulation (GDPR) as well as some advances with the Protection of Personal Information Act (POPIA) – more precisely, the efforts of the Information Regulator to establish its office. Privacy has most definitely moved past the point […]

CYBER SECURITY INCIDENT RESPONSE INFOSHEET

  Hot off the press is our new Cyber Security Incident Response infosheet.   The infosheet articulates how we can help clients to improve their cyber security incident readiness through our approach of developing, adopting and testing an organisation wide response process.   Download the infosheet HERE        

A LOOK AT THE GDPR AND THE RELEVANCE TO NON EUROPEAN ENTITIES

It’s been almost a year since we received large amounts of emails informing us of updates to companies’ privacy policies. On May 25, 2018 the General Data Protection Regulation (GDPR) came into effect. The cost of non-compliance, with this extraterritorial regulation, for those entities which process EU citizen personal information is still as high as […]

NIST RELEASES VERSION 1.1 OF ITS POPULAR CYBER SECURITY FRAMEWORK

Credit: N. Hanacek/NIST GAITHERSBURG, Md.—The U.S. Commerce Department’s National Institute of Standards and Technology (NIST) has released version 1.1 of its popular Framework for Improving Critical Infrastructure Cyber security, more widely known as the Cyber security Framework. “Cyber security is critical for national and economic security,” said Secretary of Commerce Wilbur Ross. “The voluntary NIST Cyber […]

MOBIUS CONSULTING IS NOW PART OF THE IAPP VENDOR LIST

We are proud to announce that we are now part of the International Association for Privacy Professionals (IAPP) vendor list, one of the largest global privacy communities. Learn more about the IAPP: IAPP Mission and Background