Cybersecurity

This sub-topic is not a technical guide, but rather a series of guidance and tools designed to help organisations take proportionate steps to manage the risk of cybercrime. Although this sub-topic contains a number of references to some technical aspects of cybercrime and cybersecurity, these are intended as signposts only.

This topic reflects information security and breach notification requirements in the General Data Protection Regulation (UK GDPR), Assimilated Regulation (EU) 2016/679 and Data Protection Act 2018, but is not intended to cover specialist sector-specific requirements in the:

1. •

   the Network and Information Systems Regulations 2018 (NIS Regulations), SI 2018/506

2. •

   the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR 2003), SI 2003/2426 (as amended), or

3. •

   the Financial Services and Markets Act 2000 (FSMA 2000) and the Financial Conduct Authority (FCA) Handbook

Cybercrime is a challenge for internal compliance teams requiring a wider response than, 'it's a job for the IT department'. Cyber risk, like any other risk to your business, needs to be managed properly and considered a high priority risk for the internal compliance or legal team. It is a business