Launching a new website without prioritising security testing is like inviting trouble. Security testing before website launch is crucial. It strengthens the integrity, confidentiality, and availability of the site while safeguarding sensitive data (especially personal data). Security testing identifies vulnerabilities in the website’s infrastructure, code, and configurations. It simulates real-world…

In the data-driven era, organisations face a critical decision: Should they invest in a Data Protection Officer (DPO) or risk sailing through the complex business waters without one? Imagine a scenario without a DPO. Compliance breaches loom, inviting hefty fines and legal nightmares. Reputations crumble like sandcastles, eroding customer trust…

Employees are the lifeline of every organisation, but they are also the weakest link when it comes to an organisation’s cybersecurity, which can be attributed to targeted attacks and a lack of policies in place for them to follow. You cannot expect that every employee has equal footing when it…

Storing personal data on an outdated server is a recipe for disaster, as OrangeTee & Tie painfully discovered when the PDPC ordered them to pay a substantial financial penalty of S$37,000 due to a breach caused by their outdated server. Note that the outcome could have been different if the…

We often overlook available security patches, assuming there’s no immediate threat. However, the reality is that these patches exist precisely because such dangers have been identified and urgently require mitigation. This neglect proved costly for Fortytwo, whose data breach incident resulted in an S$8,000 financial penalty. Fortytwo, an online furniture…

Last month, Samsung’s employees were reported to have disclosed confidential information while using ChatGPT to assist with their tasks. This occurred because engineers in its semiconductor division utilised the ChatGPT to address issues with their source code. However, by doing so, they submitted sensitive data, including the source code for…

Why Server Updates Matter Server updates are essential for addressing security vulnerabilities, fixing bugs, and improving overall server performance. Regular updates can help protect your servers against potential security threats, such as unauthorised access, data breaches, and malware infections. By neglecting updates, you may be putting your organisation’s sensitive data…

In Singapore, a Data Protection Officer (DPO) is a mandatory role for organisations under the Personal Data Protection Act (PDPA). This is because the DPO is responsible for ensuring that the organisation complies with the PDPA’s requirements and other relevant data protection laws and regulations. A DPO can be any…

However, when data is breached, it doesn’t necessarily mean that the PDPA is also breached; it still depends on what type of data the bad actors acquired. This is why we should know the difference between personal data and sensitive data and why knowing their differences matter. Based on the…