Cyber security in the hospitality and travel industry

The PCI DSS (Payment Card Industry Data Security Standard) applies to any organisation that processes, transmits or stores cardholder data. Although the PCI DSS has existed since 2004, data breaches involving cardholder data have revealed that the Standard has not been enforced or tested effectively. Are you certain that you’re compliant

Find out more

The EU GDPR (General Data Protection Regulation) superseded the UK Data Protection Act 1998 on 25 May 2018. It extends the rights of individuals to control how their personal data is collected and processed, and also places a range of new obligations on organisations to be more accountable for data protection.

Find out more

Penetration testing – also known as ‘pen testing’ or ‘ethical hacking’ – is an effective way to determine the security of your networks and web applications. It is essentially a controlled form of hacking in which the ‘attackers’ operate on your behalf to find the sort of weaknesses that criminals exploit. Information is power, so by identifying your ‘weak spots’ you can prioritise efforts to protect your assets. 

Find out more

Staff awareness training is crucial, with the biggest security threat often being internal – it is all too easy for employees to accidentally click on a phishing link, or download malware by opening a rogue attachment. Cost- and time-effective e-learning can help with this, equipping teams with the knowledge they need, and demonstrating that your organisation is acting responsibly.
 

Find out more

ISO 27001 is the international information security standard. Achieving accredited certification to ISO 27001 equips organisations with the knowledge, procedures and processes to successfully manage information risks such as cyber attacks, hacks, data leaks and theft. ISO 27001 certification isn’t only for large organisations. Organisations of all sizes are seeing the benefits.

Find out more