Security
Subscribe to this community
ECJ rules in favour of security and inci...
The recent European Court case of Breyer v Germany provides welcome support for those who wish to protect the security of on-line services. The case concerned two questions – whether a website's logfiles (typically containing time, client IP address, URL requested and result) constituted personal data and, if so, whether data protection law allowed the site operator t...
European Law on Public Authorities
It's pretty clear from the context and implications that when European legislators wrote "public authority" into the General Data Protection Regulation they didn't mean the same as the drafters of the UK's Freedom of Information Acts. "Public authority" isn't defined in the Regulation and I've not been able to find it in any other Europea...
Centralisation of logging using WEF
What I find in my daily incident response work with different sites is the need to promote the importance of logging: namely centralised log collection. It cannot be understated how logs prove invaluable in a security incident. Tracing through logs on a central location makes investigation so much easier, and allows incident responders to locate a security event. There sh...
Janet London Procurement - Delivery Upda...
Please find attached a report that outlines the delivery and migration progress for the Lo...
Sensitive/Special Category Data and Lear...
In thinking about the legal arrangements for Jisc's learning analytics services we con...
Sharing Information to Protect Privacy
I was invited to give a presentation on legal and ethical issues around information sharin...
An anthropologist learns about incident ...
If you've been watching movies and TV series, it may come as a surprise that most comp...
Data Breaches: Be Prepared
The Article 29 Working Party's guidance on Breach Notification suggests some things we should do before a security breach occurs. The GDPR expects data controllers, within 72 hours of becoming aware of any security breach, to determine whether there is a risk to individuals and, if so, to report to the national Data Protection Authority. It seems unlikely that an organisati...
Counter-Terrorism and Security Act 2015
The Counter-Terrorism and Security Act 2015, which received Royal Assent last week, has some network-related provisions among its various powers relating to terrorism. Section 21 adds further "relevant internet data" to the l...
Data Protection Regulation - now there a...
After more than three years of discussion, all three components of the European law making process have now produced their proposed texts for a General Data Protection Regulation should look like. The Council of Ministers’ versio...
Janet ESISS: Identifying security risks ...
Learn more about the Automated and Manual Penetration Testing offered by Janet E...
Janet Customers in Wales
Janet provides services to the following organisations in Wales: ==Higher Education * Aberystwyth University * Bangor University * Cardiff Metropolitan University * Cardiff University * Y Coleg Cymraeg Cenedlaethol * Glyndŵr University * HEFCW * The Open University * Royal Welsh College of Music and Drama * Swansea University * University of South Wales * Univ...
BYOD: Doing Security Together
Presenting at the Jisc’s Safer Internet Day event got me thinking a bit more about the shared interests between owners and organisations in a BYOD scheme, and the opportunity that might present. For many years I’ve liked th...
Janet London Procurement - Delivery Upda...
The project to replace and upgrade connections in the London region is continuing at pace. However, Virgin Media are facing a number of significant challenges in delivering the new connections to customers in London. As a result of this the expected delivery dates for the majority of connections have passed and we are working with them to deliver these as soon as possible.That ...
Janet 6 Migration
The Janet south west regional network was migrated to the new Janet 6 core on the 31st July. There was no disruption to service, or down time and the Janet South West regional network is now connected to the fastest National Research a...
Draft e-Infrastructure Landscape Mapping
To better understand the access and identity management and security technical landscape, the UK e-infrastructure Security and Access Management Working Group produced a mapping of the various groups, activities and technologies that t...
Travelling with encrypted devices
Most portable devices – laptops, smartphones and memory sticks – should be enc...
Big Data: Wrongs and Rights
Last week I gave a seminar at Southampton University on how data protection law could provide support and guidance for universities' use of learning analytics. The next day Jisc launched a Code of Practice on Learning Analytics, wh...
Public traffic backhaul
It has long been a source of frustration that if a Janet connected site wanted to provide connectivity to members of the public this required a separate physical network link to connect those users to a partner Internet Access Provider. Members of the public can't be given access to the Janet IP service as this would risk changing the network's status as a private Elect...
What does successful industrial collabor...
I sat in on an interesting session at the CASC-HPCSIG meeting in Oxford last week, looking at different models for university-industry cooperation in high-performance computing. All considered that people, support and expertise are at least as important to a successful liaison as processors, so were slightly puzzled that publicity, bids and even informal discussions tend to foc...
Latest activity
I am now blogging on the Cyber Security blog on Jisc Involve.
If you are looking for...
** Please be advised that the Jisc Community site is due to be decommissioned shortly.
This will mean that this group will no longer...
The Community group for the Jisc Assent Service launched on 25 March 2015
Jisc, as the service operator, will post things on here relevant to the service but...
These statistics only relate to information collated by Janet CSIRT and do not provide an accurate sample of security activity across the research and education...
These statistics only relate to information collated by Janet CSIRT and do not provide an accurate sample of security activity across the research and education...
** Please be advised that the Jisc Community site is due to be decommissioned shortly.
This will mean that this group will no longer...
You may be aware of the launch by the government of CISP - the Cyber Security Information Sharing Partnership.
It's a web based environment in which various...
** Please be advised that the Jisc Community site is due to be decommissioned shortly.
This will mean that this group will no longer...
JiscCommunity has been this blog's home for eight years, but I'm now moving over to JiscInform. That has many nice features, notably that it works really well on...
