The aim of this Privacy Framework is to improve privacy risk management between business/mission drivers and privacy protection activities. It is intended for organizations that use data processing systems, products or services irrespective of their sector, focus or size. …
The Story of Daniel Seid, a PECB Certified ISO/IEC 27001 Master Looking back over the last decade, it’s remarkable how much PECB’s network has achieved and advanced professionally. Such advancement is not only a result of our training development and deliverables, but also of the ways by which we’ve been…
The first edition of ISO 22301 was launched in May 2012. It was the first truly internationally accepted standard on business continuity, and it consists of requirements to implement a Business Continuity Management System according to ISO Annex SL. As such, it stood in line with its prominent predecessors such…
Connectivity is one of the main pillars that are defining life in the 21st century. The level of depth that connectivity defines our routines in this century is truly astonishing. With a particular boost after the first decade of the century, we have developed not only habits, but entirely new…
A politically inclined attack or just a ‘simple’ lack of security awareness? Whatever the case, the cyber-attack that hit Marriott was huge. This was the joint second largest data breach to take place, after Yahoo in 2013 and Equifax in 2017. A cyber attacker stole personal information including names, emails,…
Melbourne has been considered “the most livable city in the world” over the past seven years, this year being dethroned by Vienna, the Austrian capital, according to the Economist Intelligence Unit‘s 2018 rankings. I am originally from Romania and before deciding to live in Melbourne, we lived in Adelaide, South…
The philosopher Santayana is famous for having once warned: “Those who cannot remember the past are condemned to repeat it.” Recent events have provided several sobering examples of just how true that is. The Apple-FBI dispute was perhaps one of the most recent, painful examples we’ve witnessed a debate the…
We are all talking about the future of jobs. But the question that we should perhaps ask, the most essential one, is: How should those jobs look like (or what should those jobs be)? With the evolution of the nature of the job market, we are facing new realities and…
Agentic AI is the talk of the town. Everywhere you look, startups and research labs are racing to build systems that don’t just respond to prompts but act independently, learn from their environment, and pursue complex goals. This new generation of AI promises autonomy, decision-making, and even initiative. It’s thrilling…
Artificial intelligence (AI) has moved rapidly from innovation labs to the center of business strategy. Across industries, organizations are investing in automation, generative AI, predictive analytics, and intelligent customer experiences to improve efficiency, competitiveness, and scalability. The pressure is understandable. Organizations want to know how AI can improve operations, reduce…
What do you do about an employee you never hired, never interviewed, never trained, and never gave a contract to, but who quietly has access to your customer data, your internal chats, your finance folder, and the authority to act on your behalf? This is not a thought experiment. It…
My phone rang at three in the morning. The voice on the other end was that of someone who had not slept, and for the right reasons: ransomware, live and spreading. Even though the dashboard was green the day before—and technically still was when the call started, since no one…
At a recent closed session in Geneva, a minister from a Global South economy said something I have not been able to shake. We were talking about AI adoption curves, sovereign cloud, and the usual agenda. He said, almost in passing, “We are buying tomorrow’s risks with today’s enthusiasm, and…
Auditing is one of the oldest professions. It was preceded by accounting which was born out of the need to keep records beyond the capacity of human memory. The need to keep records necessitated verification, which gave rise to the auditing profession. Management system (MS) auditing officially began with the…
For many years, cybersecurity has had a clear goal. Build secure systems, write secure code, design strong architecture, add controls, encryption, monitoring, and access management. If we did those things well, we believed the organization would be safe. And humans were part of the discussion, but usually in a simple…
The era of “paper governance” is over. For many years, organizations approached artificial intelligence using a familiar governance playbook: draft a set of ethical AI principles, publish a high-level policy document, and perhaps establish a cross-functional committee to review initiatives. While these steps created the appearance of responsible oversight, they…
Today, all sectors and industries continue to face threats that impact digital trust and resilience (WEF Global Cybersecurity Outlook 2026 Report). Threats arising from: Digital transformation technologies Geopolitics Supply chains Inequity Environmental conditions Global financial operations They affect boardrooms and strategic planning with a higher frequency year-on-year. This creates an…
Cyber and Climate Risks Recently, I trained a professional in PECB’s ISO 22301 (Business Continuity Management System). Originally from South Korea and now residing in North America, her main goal after completing my training was to take this knowledge back to South Korea and assist her organization, which has over…
