Department for Education Cyber Attack: 600,000 Records Exposed and the Lessons for UK Organisations
The recent Department for Education cyber attack, which reportedly exposed over 600,000 records, is a stark reminder that no organisation is immune from cyber threats. We explore what happened, the GDPR implications, and the key cyber security and governance lessons every organisation should learn.
AI BOM Compliance 2026 Guide: AI Bill of Materials for EU AI Act, Cyber Resilience Act, ISO 42001 and NIST AI RMF
AI Bills of Materials are becoming a core compliance requirement as the EU AI Act and Cyber Resilience Act take effect. This guide explains what an AI BOM is, why it matters in 2026, and how organisations can build one in just 90 days.
PCI DSS Compliance Guide 2026: Requirements, SAQs, Merchant Levels and Breach Response
A clear and practical overview of PCI DSS v4.0.1, this guide explains what brings organisations into scope, the differences between merchants and service providers, the 12 core requirements, SAQs, payment channels, breach response and the role of acquiring banks. Ideal for retailers and social housing providers navigating modern payment security.
Third-Party Risk Management in 2025: UK Compliance, DORA, GDPR & ISO Best Practices
Learn how to manage third-party cyber risk effectively in 2025. Explore UK GDPR, ISO 27001, PCI DSS, and DORA requirements, plus insurer expectations for continuous monitoring and vendor assurance.
GRC – What we expect from 2026
Learn how to manage third-party cyber risk effectively in 2025. Explore UK GDPR, ISO 27001, PCI DSS, and DORA requirements, plus insurer expectations for continuous monitoring and vendor assurance.
GRC Hub helps BMS achieve Cyber Essentials rapidly
Discover how GRC Hub helped BMS achieve Cyber Essentials V3.2 recertification in just 5 days, ensuring NHS compliance and stronger security.
ICO Fine Highlights Cybersecurity Risks: Why Password Managers Aren’t a Silver Bullet
ICO fines password manager provider £1.2m, exposing risks of reliance on vaults. Learn why GRC and Cyber matters and how GRC Hub can help.
How GRC Hub helped meet Aire Logics training needs in just 5 days
Discover how GRC Hub delivered bespoke GDPR and Cybersecurity training for Aire Logic in 5 days, ensuring data compliance and readiness.
How to Choose the Right ISO27001 Consultancy and Support
Discover how to choose the right ISO27001 consultancy and support. Learn what to ask, what to avoid, and how to balance speed, cost, and compliance.
How to Decide if ISO27001 Certification and Support Is Right for Your Business
Wondering if ISO27001 certification is right for your business? Learn the benefits and how expert ISO27001 support can accelerate success.