Organizations taking an ‘all or nothing’ zero trust often find that they struggle to implement it effectively, especially when it comes to application access control. Chris Buijs explains why integrating DNS into the zero trust framework can help. 
In an article aimed at providing assistance to those starting out in business continuity, CMAC overviews the basics of business continuity and offers a useful framework for writing your first business continuity plan.
As the UK waits for the launch of the long-promised National Resilience Strategy, Peter Power calls for the appointment of a Government Minister for Resilience, supported by a National Resilience Committee.
Lynnda M. Nelson looks at how to increase your preparedness and reduce risk by taking a systems approach to managing risk and increasing resilience. She also explores risk-based thinking and the importance of considering your organization’s risk culture. 
Enterprise risk management news
The top three emerging risks facing smaller UK organizations
2022 Global State of Enterprise Risk Oversight: 5th edition of wide ranging study published
University of Queensland study finds that boards need to boost cyber security skills
Preparing for the Metaverse and its associated risks
Workplace bullying reflects structural risks present in organizations
Resilience news
Resilience First issues first part of Operational Resilience Guide on Learnings from the Pandemic
Gartner highlights three actions to maintain supply chain resilience
ESMA issues consultation paper on market outages
Women in Resilience: How to be ‘seen’ in a hybrid working environment
Gartner Hype Cycle for Supply Chain Strategy highlights supply chain resilience
Technology news
SaaS data was the target of half of recent ransomware attacks
Majority of companies had a cloud security incident in the last year
Paying the ransom is still the most common response to a ransomware attack
Why geo-redundancy for cloud infrastructure is a ‘must have’
A mental health minefield: the increasing pressure on cyber security teams