I recently visited the Risk and Resilience Festival at the University of Twente. One of the keynote speakers was Maarten van Aalst, Director of the international Red Cross Red Crescent Climate Centre, and professor at the University of Twente. He told a story about Bangladesh and how the frequent flooding lead to increasing numbers of casualties. It was too simple, he said, to blame climate change. A much bigger impact was the increasing population. The more people there are living in the Ganges Delta, the bigger the exposure. It reminded me of the fact that exposure is often something we can influence.

My first-hand experience of being a victim of a cyber-attack created concerns and got me thinking.

One of the newest standards in the ISO 27k series is ISO 27701, which addresses security techniques for privacy information management. ISO 27701 offers a certification opportunity that cannot be missed for organisations that already align with ISO 27001 and have completed a GDPR (General Data Protection Regulation) compliance project.