This newsletter highlights all the feature articles published on Continuity Central during October 2022, as well as various resources.

NOTE: If you cannot read this newsletter properly visit www.continuitycentral.com/roundupnov2022.html

FEATURE ARTICLES

There’s a new acronym on the block: getting to know CNAPP
Cyber security and acronyms seemingly go hand in hand and every year there are new ones to learn and remember. From APTs and ZTNA to CASB and SIEM, the world of cyber security is full of them. Markus Strauss looks at CNAPP, one of the newest additions to the acronym list.
Read the article
• World

Resilience, communities, businesses, and social capital
Robert Hall looks at the importance of working towards community and social resilience, the role that businesses should play, and why strong communication between sectors is essential.
Read the article
• World

Seven important issues to consider when choosing a SaaS provider
In recent years, outsourcing business processes and applications via the Software-as-a-Service (SaaS) model has become hugely popular, not least in the business continuity world. As in all areas of procurement there are things to consider that make the difference between success and failure, as Jakub Lewandowski explains.
Read the article
• World

The Hunt for Hidden Risks
To avoid or mitigate this special class of risks, you must explore their nature. How do they creep into organizations? Where do they hide out? What makes them so difficult to see? Are they more dangerous or damaging than risks you can see more easily? And finally, how can you look for them – and keep them from coming back?
Read the article
• World

Identifying and implementing strategies to increase organizational resilience
In this article Lynnda M. Nelson Looks at how to design and implement an organizational resilience strategic initiative, innovating your organization for today and for the future.
Read the article
• World

Better data protection: is the 3-2-1 rule still relevant?
The 3-2-1 rule has been at the heart of successful data protection strategies for many years. Christopher Rogers looks at whether it still has relevance in today’s rapidly changing technology and threat environment.
Read the article
• World

Cyber insurance and identity threat detection and response: partners in resilience
Cyber insurance is an important tool in overall cyber resilience, but obtaining it, and ensuring that any claims will be paid out, requires ongoing attention to other defensive areas. One of these is identity threat detection and response, and in particular the protection of Active Directory. James Doggett explains further...
Read the article
• World

A guide to using root cause analysis
This E-Book will help you understand and use root cause analysis (RCA) to address the underlying causes of incidents that impact your organization. This will help you take actions to ensure that the issue does not occur again.
Read the article
• World

Getting started with the business impact analysis
This resource explores what the business impact analysis (BIA) is, how to get started, and provides access to an easy to use BIA and Risk Assessment Worksheet to carry out your first business impact analysis or to improve existing BIAs.
Read the article
• World

Improving resilience through supporting workforce mental health
World Mental Health Day serves as an ever-important reminder that we must not let mental health fall by the wayside; and that supporting workforce mental health is a key aspect of organizational resilience.
Read the article
• UK / World

Hidden, but critical infrastructure: undersea cables and pipes
Sabotage has been in the headlines since the recent Nord Stream incident under the Baltic Sea, but is not the only threat to the undersea critical infrastructure that countries and organizations around the world rely upon. Peter Power looks at the threats and suggests some actions for improving resilience.
Read the article
• UK / World

RESEARCH, REPORTS & PUBLICATIONS

Global study finds weaknesses in backup and recovery plans for remote workers
Arcserve has announced findings from its annual independent global research study which show that businesses are failing to adequately consider remote working in their data backup and recovery plans.
Read the article
• World

KPMG’s UK Regulatory Barometer ranks operational resilience in joint third place
KPMG has published its first UK Regulatory Barometer, which identifies nine key regulatory themes and assigns them each a regulatory impact score based on attributes such as volume of updates, complexity and time to implementation.
Read the article
• UK

New version of ISO/IEC 27001 now available
ISO/IEC 27001, ‘Information security, cybersecurity and privacy protection - Information security management systems - Requirements’ the widely used information security management standard, has been updated and is now available.
Read the article
• World

Ransomware attacks decline overall but rise in UK, EMEA, and APJ
SonicWall has released new threat data through to the end of the third quarter of 2022. The company found that ransomware attacks have declined significantly globally.
Read the article
• World

Ransomware remains a top cyber risk for businesses: but other threats are growing
The latest Allianz Global Corporate & Specialty cyber report provides an overview of developments in the cyber threat landscape. ‘Cyber: The changing threat landscape’ says that ransomware remains a top cyber risk for organizations globally while business email compromise incidents are on the rise and will increase further in the ‘deep fake’ era.
Read the article
• World

Procurement teams prioritizing business continuity and operational resilience finds survey
A new Procurious survey report, sponsored by Ivalua, shows that 52 percent of procurement and supply chain professionals are prioritizing business continuity and operational resilience over other objectives...
Read the article
• World

New Cyber Security Governance Principles for Australian organizations
The Australian Institute of Company Directors (AICD) and the Cyber Security Cooperative Research Centre (CSCRC) have released a new set of governance principles to help organizations strengthen their cyber resilience.
Read the article
• World

Family firms have an intrinsic advantage when it comes to reputation risk
Consumers are more inclined to forgive family firm brands than non-family firm brands in product harm crisis situations, according to new research from NEOMA Business School.
Read the article
• World

Gartner releases latest Quarterly Emerging Risks Report
Business risks are top of mind, but worries over critical infrastructure failures are growing, according to the Gartner 3Q22 Quarterly Emerging Risks Report. The report is based on a survey of 333 senior executives and risk management professionals conducted in 3Q22.
Read the article
• World

Report looks at c-suite and senior executives’ attitudes to organizational risk
Aon has released the results of its 2022 Executive Risk Survey, ‘Making Better Decisions in Uncertain Times’. The survey clearly shows that leaders who are making better decisions about risks are better prepared to navigate through and succeed during highly volatile times and economic uncertainty.
Read the article
• Various

Impacts of serial disasters on the electrical transmission infrastructure
Researchers at The Ohio State University have developed a machine learning model for predicting how susceptible overhead transmission lines are to damage when natural hazards like hurricanes or earthquakes happen in quick succession.
Read the article
• World

ENISA releases report exploring potential threats that will come from post-quantum cryptography
A new report published by the European Union Agency for Cybersecurity (ENISA) explores the necessity to design new cryptographic protocols and integrate post-quantum systems into existing protocols.
Read the article
• Europe / World

Balancing your resilience needs with the requirement to reduce carbon emissions
Distributing workloads across multiple locations helps users achieve resiliency. Users should be aware, however, that greater duplication can mean both higher costs, and greater carbon emissions. A new report from the Uptime Institute has explored this issue.
Read the article
• World

Report shows that organizational confidence in cyber and technology resilience decreases
‘Spotlight on: Cyber and technology’, a new research report from Beazley, shows a drop in business leaders’ confidence about their resilience to cyber and technology threats.
Read the article
• World

Academic paper presents a reference model to assist with organizational resilience audits
In a paper presented in MAB (Maandblad voor Accountancy en Bedrijfseconomie), Isabel van Maaren has sets out a six section framework for auditing organizational resilience programs.
Read the article
• Europe / World

Financial Stability Board proposals aim for more uniformity in cyber incident reporting
The Financial Stability Board (FSB) has published a consultative document on ‘Achieving Greater Convergence in Cyber Incident Reporting’.
Read the article
• World

Cloud Server Privilege Management for Dummies eBook launched
Delinea has published Cloud Server Privilege Management for Dummies, a new eBook which looks at best practices for cloud server security to simplify complexities around securing access to business-critical resources.
Read the article
• World

Survey finds that disconnected finance and operations teams in many organizations results in risk management weaknesses
Disconnected finance and operations teams can expose businesses to new risks, KPMG research reveals; and environmental, social and governance (ESG) is a particularly weak area.
Read the article
• World

Many cyber incident management plans may fail due to lack of resources
BlackBerry Limited has published new research highlighting the challenges organizations in all major sectors face in maintaining and improving their overall cyber security posture.
Read the article
• North America / UK

Microsoft Teams information missing from many backup plans
A survey for Hornetsecurity has found an ‘urgent need’ for greater attention to backup plans for Microsoft Teams, with nearly half of users (45 percent) sending confidential and critical information frequently via the platform.
Read the article
• World

CEOs increasingly concerned about reputational risk
KPMG has published its 2022 CEO Outlook, which asked more than 1,300 CEOs at the world’s largest businesses about their strategies and outlook. The survey identified the areas that CEOs see as the top medium term risks.
Read the article
• World

New academic paper looks at the use of ‘infranetics’ as a framework for resilience and business continuity management
Infranetics, which is a combination of infrastructures and cybernetics, is highlighted as a possible new framework for managing resilience and business continuity, amongst other areas, according to a new academic paper.
Read the article
• World

BCI report looks at how organizations view business continuity and resilience
The BCI has published the 2022 edition of its Continuity & Resilience Report, sponsored this year by Riskonnect. The report looks at how business continuity and resilience are perceived within organizations across different industry sectors. It also examines the challenges these disciplines are facing amid the rise of new working environments.
Read the article
• World

Ever wondered how big a tsunami is possible?
A new study finds that the asteroid that struck Earth 66 million years ago triggered a tsunami with mile-high waves that scoured the ocean floor thousands of miles from the impact site on Mexico's Yucatan Peninsula.
Read the article
• World

Survey finds that UK businesses are struggling with ESG
Almost half (44 percent) of UK businesses say they are failing to deliver on their sustainability commitments and one in five (18 percent) admit to publicly exaggerating their green credentials according to a poll of more than 1,500 senior executives by corporate and environmental, social, and governance (ESG) communications agency, Clearly PR.
Read the article
• UK

Transforming Supply Chain Resilience: report looks at retailers’ issues
Wincanton has published Transforming Supply Chain Resilience, a new report that provides insight into the experiences of retail and ecommerce businesses in the UK and the resilience of their supply chains.
Read the article
• UK

New research looks at the impacts of downtime and highlights increasing resolution times
50 percent of CIOs report their businesses have recorded financial losses due to increased downtime, according to research commissioned by Opengear.
Read the article
• Various

A quarter of companies globally have suffered a data breach that cost them more than US $1 million in the past three years
27 percent of companies globally have suffered a data breach that cost more than US $1 million in the past three years, according to PwC’s annual Global Digital Trust Insights Survey.
Read the article
• World

IT leaders in the UK and Ireland see a ‘protection gap’ between tolerable data loss and how IT is protecting data
A new report from Veeam Software says that UK and Irish businesses are ‘headed for a data protection emergency’. Nearly eight in ten (79 percent) of IT decision makers and professionals in the countries disclosed gaps between their data dependency, backup frequency, SLAs and ability to get back to productive business when asked by researchers compiling the Veeam Data Protection Trends Report 2022.
Read the article
• UK / Ireland

CALL FOR PAPERS

Written a relevant article or white paper? We'd like to consider it for publication on Continuity Central. Simply e-mail editor@continuitycentral.com

PRIVACY NOTICE

You can read our privacy information at https://www.continuitycentral.com/index.php/privacy-and-cookies

You have subscribed to this newsletter. To unsubscribe visit:
http://www.continuitycentral.com/index.php/unsubscribe or e-mail webmaster@continuitycentral.com

Continuity Central is a registered trademark