Matt Villion (CISSP MBCS CITP ITPC)

NHS DSPT Mandatory Audit Assertion 7.3 — Incident Response Capability Assertion 7.3 of the NHS DSPT is all about incident response. Discover how to detect, contain, and recover from cyber incidents quickly and effectively.

1

The UK Cyber Governance Code of Practice sets out the most critical governance actions directors are responsible for when it comes to cyber security. This free webinar, designed specifically for board members, focuses on the 'Incident Planning, Response and Recovery' principle of the Code — covering everything from developing a cyber incident response plan, to business continuity, board communications during an incident, and planning for the typical phases of recovery. 📅 Wednesday 20 May 2026 | 14:00–15:00 GMT 🔗 https://ow.ly/qvRE50YwilF #CorporateGovernance #CyberGovernance #NonExecutiveDirector #BoardLeadership #CyberSecurity Cyber4Directors Susanne Alfs

3

Our Information Security Lead, Ashley Dunn (CISSP, CEH), will be taking the stage later today at an Open Web Application Security Project (OWASP® Foundation) event in Bristol. He’ll be hosting a session on Bug Bounty Programs. Ash’s Q&A session will draw on his experience in the industry and include a breakdown of why companies should consider using bug bounties to help improve their security posture, how to implement them, and the ROI and unexpected wins that can come from implementing them. 📍Dareshack, Bristol 📅 July 15th 🕟 6:40 - 7:30pm For more information on the session, head to the comments below 👇 #OWASP #InformationSecurity #SuperAwesome

14

1 Comment

I recommend my five-step approach to achieving ISO/IEC 27001 ISMS, as it has worked for many of my customers. Most customers expect the consultant to bring a strategy that has a low impact on corporate culture and can be achieved within a given timeframe. Teaching customers how to implement an ISO/IEC 27001 ISMS is not the goal. If an ISO/IEC 27001 ISMS consultant wants to demonstrate their experience, the customer only needs to look at their track record of success. The goal is to become ISO/IEC 27001 ISMS Certified /Registered for several reasons: 1/. A client of the customer has asked, How would you be able to protect my information? 2/. During the pursuit of new business and new revenue, ISO/IEC 27001 ISMS has been identified as a requirement and thus a competitive advantage. 3/. The Board of Directors has requested a world-class, globally accepted Cybersecurity program to address all regulatory and shareholder inquiries regarding compliance. I am bringing the best approach to the table. Link: https://lnkd.in/gFeh5n4e

1

ICO UK Guidance on Encryption This document outlines best practices for implementing encryption to safeguard personal data, ensuring adherence to UK data protection regulations.

13

Last week at UoM 🚂 Gartner IAM summit in London. Interesting takeaways on IAM programme optimisation and lessons learned from PAM implementations ⚖️ Risk management - making key updates and bringing more clarity 🔍 Deep dive on our forensic capability 🏆 Cyber essentials ❓️Reviewing our draft code of connection 🪙 HCAT finance and arc committees

22

Ready to take control of your cybersecurity - without the jargon or headaches? Our latest blog breaks down the Cyber Essentials checklist into practical steps you can actually use. From firewalls and patching to access control and malware defence, simply follow the path to certification and protection. Drop the stress. Grab your guide. Get Cyber Essentials done. Read more: https://lnkd.in/eGnxY6ks

1

Proud to be part of the cybersecurity leadership at ServiQual. At SQ, cybersecurity is not handled by a single role, it is delivered by a structured and specialised team working together to protect our SQ and clients’ environments. Our Cybersecurity Department includes: • IT Audit & Compliance • Red Team (Offensive Security, VAPT) • Blue Team (Defensive Security & Monitoring) • Purple Team (Threat Simulation & Security Improvement) • Security Operations Centre (SOC) • Digital Forensics & Incident Investigation • CISO providing governance, strategy and risk oversight This multidisciplinary approach allows us to combine governance, detection, response and resilience to support organisations in building secure-by-design infrastructures. A special thanks to Hamza Seedat and my team for their continuous support and collaboration in strengthening our cybersecurity capabilities.

12

Teknicor's new Cyber Assessment Framework (CAF) Whitepaper can help you navigate the complexity and meet your obligations as an NHS Trust. Download a Preview version at https://lnkd.in/gEFSdM-6 Teknicor Corporation NHS #CAF #CyberAssessmentFramework National Cyber Security Centre

11

Cyber Essentials turns a technical standard into clear business outcomes you can measure: faster wins in UK public procurement, a lower cyber risk profile for boards and insurers, and compliance that keeps contracts and policies intact. You don’t need a big security team to get there. At Get Cyber Certified we guide small teams and MSP partners through a straightforward process backed by proven pass rates and experienced assessors. The result: certification that helps you bid with confidence, reduce exposure, and meet insurer and contract requirements. Ready to make Cyber Essentials work for your business? https://wix.to/NOslTbR #CyberEssentials #UKSMEs #CyberSecurity

1

UK cyber regulation is shifting from guidance to obligation... and the proposed Cyber Security & Resilience Bill is just the beginning. In this video, CSA consultant Ivaylo explains why organisations delivering essential, critical or digital services will soon need to prove resilience (and not just simply claim it). Our upcoming webinar, hosted speakers from the CSA SOC and UK Government frontlines, will explore this further - including: ✔️ The patterns shaping novel attacker behaviour, ✔️ The drivers behind emerging government action and regulation, ✔️ And their joint implications for organisations. 🌐 UK Threats and Regulatory Trends: A Leader's Briefing 📆 Tuesday 24th March at 10am Secure your space today: https://hubs.ly/Q045z1610 #cyberrisk #regulation #csrb

28

The UK National Cyber Security Centre National Centre for Cyber Security has published a Software Security Code of Practice. A key requirment is to manage and track third-party components in software development https://lnkd.in/eRSNs2yC #opensource #securebydesign #sbom

11

Understanding and Optimising Infrastructure: Public sector organisations need to audit and understand their existing digital estates to avoid repeating past mistakes and to ensure effective digital transformation. Read the full story >> https://lnkd.in/ehC9q_Fc

1

1 Comment

Many deepfake attacks succeed because people don't know what to look for. CloudGuard have published a practical guide breaking down 10 visual and audio deepfake warning signs, plus a short interactive walkthrough you can share internally. If your team can spot the signs, they can help stop the attack. 👉 Read it here: https://lnkd.in/eKem5xGe

53

5 Comments

Penetration testing is not about panic. It is about proof. For NHS and public sector organisations, testing needs to stand up to scrutiny from auditors, regulators, and procurement teams. CREST and NCSC CHECK frameworks exist for a reason. They ensure testing is methodical, proportionate, and defensible, with clear scoping, evidence and reporting. At ESG, we work with accredited partners and proven methodologies to help organisations demonstrate that controls work in practice, not just on paper. #PenetrationTesting #CREST #CHECK #NHSIT #CyberAssurance #PublicSectorSecurity

3