[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:gdpr\u002F32":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"gdpr","32","Article 32","Security of processing",2391,"Regulation (EU) 2016\u002F679 (General Data Protection Regulation)","**What it asks for.** Controllers and processors must put in place technical and organisational measures that give a level of security appropriate to the risk, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of the processing. The article names examples such as pseudonymisation, encryption, resilience, the ability to restore availability and regular testing of the measures.\n\n**In practice.** Organisations base their controls on a documented risk assessment of each processing activity rather than a generic checklist. Typical evidence includes access control and encryption standards, backup and restore tests, vulnerability management records and results of periodic security testing. Processors are expected to show the same discipline for the data they handle on a controller's behalf.\n\n**Common gaps.** Measures are often chosen once and never revisited as risks change. Testing and evaluating effectiveness, which the article explicitly mentions, is frequently missing or undocumented.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32016R0679#art_32","Read the official text on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},2873,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"qilin-ransomware-steals-personal-data-from-university-of-texas-at-arlington","Qilin Ransomware Steals Personal Data from University of Texas at Arlington","2026-11-13T18:20:39.241+00:00",{"slug":24,"title":25,"published_at":26},"376m-nitori-customer-records-stolen-after-weeks-of-undetected-access","37.6M Nitori Customer Records Stolen After Weeks of Undetected Access","2026-11-10T21:20:22.479+00:00",{"slug":28,"title":29,"published_at":30},"vanderbilt-ransomware-attack-exposes-over-one-million-ssns","Vanderbilt Ransomware Attack Exposes Over One Million SSNs","2026-11-10T18:20:22.74+00:00",{"slug":32,"title":33,"published_at":34},"ransomware-attack-hits-vanderbilt-university-exposing-millions-of-records","Ransomware Attack Hits Vanderbilt University, Exposing Millions of Records","2026-11-10T13:20:22.168+00:00",{"slug":36,"title":37,"published_at":38},"spyware-goes-mainstream-everyday-users-now-prime-targets","Spyware Goes Mainstream: Everyday Users Now Prime Targets","2026-11-10T12:22:28.417+00:00",{"slug":40,"title":41,"published_at":42},"barbuti-spa-fined-5000-for-ignoring-gdpr-erasure-request","Barbuti S.p.A. Fined €5,000 for Ignoring GDPR Erasure Request","2026-11-10T12:21:45.559+00:00",{"slug":44,"title":45,"published_at":46},"wind-tre-fined-17m-after-social-engineering-breaches-expose-365000-customers","Wind Tre Fined €1.7M After Social Engineering Breaches Expose 365,000 Customers","2026-11-10T12:21:25.255+00:00",{"slug":48,"title":49,"published_at":50},"critical-ios-flaw-exposes-crypto-wallet-keys-on-unpatched-iphones","Critical iOS Flaw Exposes Crypto Wallet Keys on Unpatched iPhones","2026-11-10T12:20:45.506+00:00",{"slug":52,"title":53,"published_at":54},"ai-assisted-formal-verification-strengthens-cryptographic-protocol-security","AI-Assisted Formal Verification Strengthens Cryptographic Protocol Security","2026-11-10T12:20:24.338+00:00",{"slug":56,"title":57,"published_at":58},"turlas-cereal-malware-hijacks-exchange-mail-flow-for-espionage","Turla's Cereal Malware Hijacks Exchange Mail Flow for Espionage","2026-11-10T11:23:25.058+00:00",{"slug":60,"title":61,"published_at":62},"turlas-cereal-malware-silently-pillages-government-exchange-servers-1794309743435","Turla's Cereal Malware Silently Pillages Government Exchange Servers","2026-11-10T11:22:23.404+00:00",{"slug":64,"title":65,"published_at":66},"apple-imessage-and-bluetooth-flaws-expose-chat-privacy-and-unauthorized-pairing-risks","Apple iMessage and Bluetooth Flaws Expose Chat Privacy and Unauthorized Pairing Risks","2026-11-10T11:21:04.69+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",774,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",538,{"slug":79,"name":80,"problem":81,"stories":82},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",532,{"slug":84,"name":85,"problem":86,"stories":87},"patch-management","Automated patch management","Known holes get closed in days, not months.",494,{"slug":89,"name":90,"problem":91,"stories":92},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",447,{"slug":94,"name":95,"problem":96,"stories":97},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",430,[99,105,111,116,121,125,130,135],{"family":100,"item":101,"code":102,"title":103,"together":104},"nist-800-53","si-2","SI-2","Flaw Remediation",959,{"family":106,"item":107,"code":108,"title":109,"together":110},"cis","6","Control 6","Access Control Management",957,{"family":112,"item":113,"code":114,"title":114,"together":115},"itil","overview","ITIL",829,{"family":106,"item":117,"code":118,"title":119,"together":120},"7","Control 7","Continuous Vulnerability Management",822,{"family":106,"item":122,"code":123,"title":124,"together":72},"3","Control 3","Data Protection",{"family":100,"item":126,"code":127,"title":128,"together":129},"ac-2","AC-2","Account Management",714,{"family":106,"item":131,"code":132,"title":133,"together":134},"14","Control 14","Security Awareness and Skills Training",710,{"family":106,"item":136,"code":137,"title":138,"together":139},"13","Control 13","Network Monitoring and Defense",632]