The aim of this Privacy Framework is to improve privacy risk management between business/mission drivers and privacy protection activities. It is intended for organizations that use data processing systems, products or services irrespective of their sector, focus or size. …
The Story of Daniel Seid, a PECB Certified ISO/IEC 27001 Master Looking back over the last decade, it’s remarkable how much PECB’s network has achieved and advanced professionally. Such advancement is not only a result of our training development and deliverables, but also of the ways by which we’ve been…
The first edition of ISO 22301 was launched in May 2012. It was the first truly internationally accepted standard on business continuity, and it consists of requirements to implement a Business Continuity Management System according to ISO Annex SL. As such, it stood in line with its prominent predecessors such…
Connectivity is one of the main pillars that are defining life in the 21st century. The level of depth that connectivity defines our routines in this century is truly astonishing. With a particular boost after the first decade of the century, we have developed not only habits, but entirely new…
A politically inclined attack or just a ‘simple’ lack of security awareness? Whatever the case, the cyber-attack that hit Marriott was huge. This was the joint second largest data breach to take place, after Yahoo in 2013 and Equifax in 2017. A cyber attacker stole personal information including names, emails,…
Melbourne has been considered “the most livable city in the world” over the past seven years, this year being dethroned by Vienna, the Austrian capital, according to the Economist Intelligence Unit‘s 2018 rankings. I am originally from Romania and before deciding to live in Melbourne, we lived in Adelaide, South…
The philosopher Santayana is famous for having once warned: “Those who cannot remember the past are condemned to repeat it.” Recent events have provided several sobering examples of just how true that is. The Apple-FBI dispute was perhaps one of the most recent, painful examples we’ve witnessed a debate the…
We are all talking about the future of jobs. But the question that we should perhaps ask, the most essential one, is: How should those jobs look like (or what should those jobs be)? With the evolution of the nature of the job market, we are facing new realities and…
In May 2026, Google’s Threat Intelligence Group (GTIG) documented a first for its casework: a criminal group staging a mass-exploitation campaign around a zero-day that GTIG assessed as AI-assisted. The vulnerability was a two-factor-authentication bypass in a widely used open-source web-administration tool, a semantic logic flaw rooted in a hardcoded…
Many organizations discover the need for artificial intelligence (AI) governance only when an AI solution is nearly ready to go live. By then, the most important decisions have often already been made. A vendor has been selected, data has been shared, proof-of-concept work has begun, employees have tested external tools,…
Have you ever been asked to keep an incident quiet? I am not talking about a cover-up, nothing as dramatic as that. Just handled internally, kept in the room, managed discreetly while somebody more senior decides how serious it really is. Have you ever watched an incident being logged as…
Modern leadership moves at a pace that often leaves reflection in the dust. Modern executive teams are under continuous pressure to innovate, deploy, and scale digital capabilities faster than the competition. Whether it is adopting enterprise AI models, migrating core infrastructure to cloud architectures, or automating legacy workflows, the mandate…
Quantum computing is often presented as a technology of the future. For many organizations, it may still appear too distant to become a current governance, risk, and compliance concern. However, its possible impact on cryptography makes the question more urgent than it first seems. Today, organizations depend on cryptographic mechanisms…
We are living through an era of unprecedented technological velocity. Across every industry, organizations are racing to harness the transformative power of data analytics, cloud architecture, and Artificial Intelligence (AI). These technologies offer extraordinary competitive advantages by optimizing complex supply chains, personalizing customer experiences, and automating intricate operational workflows. Yet,…
I have said it from a stage more than once. Stop chasing compliance, build real resilience. The room nods, someone writes it down, and we move to the next slide. It sounds serious, the kind of line a person who has seen a few things is supposed to say. And…
Twenty years ago, if you asked someone in an office what “IT” meant, they would say it was the person you called when the printer jammed or your email stopped working. Fast forward to today, and IT, security, and privacy have quietly become three of the most consequential functions inside…
Artificial intelligence is no longer a distant prospect in healthcare — it is already embedded in radiology workflows, clinical decision support tools, medicines management platforms, and patient-facing digital therapeutics. For those of us who have spent careers at the intersection of clinical practice and digital health governance, this acceleration is…
Artificial intelligence adoption is accelerating faster than most organizations can govern it. Globally, generative AI tools are already embedded into daily operations, often long before organizations have fully assessed the risks they introduce. Recent research highlighted by TechRadar found that almost a third of European businesses still do not have…
