Table of Contents

1. Security – why bother?
2. Risks to the network
3. Employee-related risk
4. Transaction-related risk
5. Online reputational risk
6. Other communications risk
7. Managing Operational ICT risk with standards and best practice

About the Author

Jonathan ArmstrongEversheds LLPJonathan Armstrong is one of the UK’s leading experts in technology law. A regular broadcaster on TV and radio, Jonathan’s practice includes counselling multinational companies on a range of technology issues. As well as being a solicitor, he is a member of The Chartered Institute of Marketing and the Georgetown University Advanced Institute on Electronic Commerce, Washington DC. He has also been involved in developing a number of technology applications, including one of the first ten law firm sites in the UK.
Mark Rhys-JonesEversheds LLPMark Rhys-Jones is Chair of the Eversheds Technology Dispute Resolution practice. Mark is accustomed to acting for both suppliers and users in complex IT disputes and focuses on the identification and reduction of risk. He is also an accredited mediator and is identified in several legal directories as a leading individual in his field. He is Secretary of the Wales Commercial Law Association and a member of the Directors’ Information Assurance Network.
Daniel DresnerThe National Computing CentreDaniel Dresner delivers the NCC’s information systems risk management research programme. One of the UK’s leading experts on standards implementation, Daniel contributes to IT standards nationally (including TickIT), across Europe (source code escrow) and through the International Standards Organisation (user documentation). He brought the NCC/DTI Towards Software Excellence scheme online and manages NCC’s Security Knowledge Network. He is the technical authority for the NCC’s assessment service for the e-Government Interoperability Framework (e-GIF).