Cybersecurity

Cyber risk, like any other risk to your business, needs to be managed properly and considered a high priority risk for the internal compliance or legal team—not just the IT department. It is a business risk that must be managed within an overall information risk-management and crime prevention framework.

The guidance and tools referenced reflect information security and breach notification requirements in the UK General Data Protection Regulation (UK GDPR), Assimilated Regulation (EU) 2016/679 and Data Protection Act 2018, but are not intended to cover specialist sector-specific requirements in the:

  1. Network and Information Systems Regulations 2018 (NIS Regulations), SI 2018/506

  2. Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR 2003), SI 2003/2426 (as amended), or

  3. Financial Services and Markets Act 2000 (FSMA 2000) and the Financial Conduct Authority (FCA) Handbook

What is cybercrime?

Cybercrime is simply a crime that has some kind of computer or cyber aspect to it. It takes shape in a variety of different forms.

  1. one-off—involves theft or manipulation of data or services which appears, from the victim’s perspective, to be a single event, eg malware or phishing

  2. ongoing—a

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Powered by Lexis+®
Latest Risk & Compliance News
View Risk & Compliance by content type :

Popular documents