40% Of London Public Transport Customers Now Using Contactless Cards

The latest Transport for London (TfL) figures show that 40% of public transport customers in London are paying for their journeys with contactless payment cards.

This represents a 25% increase in contactless use for all journeys since last year and the convenience and speed of using contactless has seen people moving away from pay-as-you-go Oyster Cards.

1 Billion ‘Contactless’ Journeys

Since the introduction of contactless payment cards in 2012 on buses and in 2014 on the tube and London Overground, the use of contactless payment cards recorded a billion journeys.

Contactless technology enables users to ‘tap and pay’ without entering a PIN for items or services up to £30 at a time, and the TFL figures show that payment using contactless now averages two million journeys every day, and one in ten journeys is paid for using contactless payment technology on mobile devices.

World Leader

London Mayor Sadiq Khan has been reported as saying that the figures show the global lead that London now has in the use of contactless, and how the revenue generated from selling TfL’s technology to other major global cities will be used to further improve London’s own transport network.

Boost For Tourism & Leisure Too

It is not just London’s daily workers who are finding the contactless system easy and convenient. Tourism and leisure in London is also thought to be benefiting from this system of payment as it simplifies travel for all.

x001-00081-buses-contactless-payment_rdax_400x200More Capacity – More Contactless

It has been reported that TfL will be introducing contactless payment options for the Elizabeth Line when it is fully opened in East London by December 2019. The Elizabeth line will increase central London’s rail capacity by 10% and will carry over half a million passengers each day, many of whom look likely to be using contactless for their journeys. The line is also designed to help deal with the increase in demand for public transport as London’s growing population is set to rise from 8.6m to around 10m by 2030.

Digital Rather Than Contactless Cards In Future

Some tech commentators have pointed out that digital payments using mobile devices will soon be taking over from contactless cards. Boston Consulting Group figures show that 20% of all consumer payments will be digital by 2021 (four times more than today), and just over half of that will be touch-and-go payments.

What Does This Mean For Your Business?

This story is an example of how the ease and convenience of contactless technology is benefitting businesses and their customers, and how cash, traditional debit card transactions, and pre-paid card systems are likely to decline as a result. Projected figures from payments industry trade body ‘Payments UK’ for example, have shown that as soon as next year, more payments will be made using debit cards than using cash, and this is being fuelled by contactless technology.

For businesses, contactless payments can mean increased average transaction values (ATV), more footfall, a reduction in the costs and hassle of handling cash, and reduced business risks due to having a clear audit trail and assured payment.

Smart Pest Control System Outsmarts Rats

Computer mouse and mousetrap isolated on white background

A smart new system from Swedish company Anticimex is now using smart technology to bring pest control into the 21st century by tracing rats and revealing vital information about where they converge or nest.

Used To Be Manual

Like many companies in that industry sector, pest control for the main industrial clients of Anticimex used to involve the manual process of the setting up of traps, and stopping by once a week or once a month to check if the trap had caught a rat.

The Inspiration

Anticimex CIO Daniel Spahr is reported as saying that the inspiration for the change from manual checking to smart innovation came from when, as a regional manager in central Europe, he read about rat infestations in Copenhagen and the invention of a motion detector-based rat trap to be used in the sewer system.

Catching Rats The Smart Way

When smart traps first came into being, the system has some basic reporting features. These were improved upon over time, and this process was helped by Anticimex engaging software company IFS to further develop the new platform for smart traps. This led to a trial of the new Anticimex in Finland this April.

As well as tracing rats and giving information about where they converge or nest, the smart traps work by sending real-time data and reporting if motion is detected, or if a trap has been activated. The information collected by the units can be used to improve the sales and marketing of the product, and give customers a detailed idea of the pest control efforts happening in their properties.

Battery Powered

The traps themselves are powered by various sizes of rechargeable batteries. Equipped with SIM cards, the units send text messages via SMS through 2G and 3G networks, alerting Anticimex of any activity with its traps 24 hours a day. The units send out warnings if the batteries need to be recharged / batteries that need to be replaced, etc. This information can help Anticimex plan their resources for its smart traps.

Hard To Hack

Despite worries about how smart devices of all kinds can be vulnerable to attacks by cyber criminals, Anticimex are reported to be confident that the devices and their communications are highly secure and difficult to hack.

Financial Rewards

The move by Anticimex into innovative smart technology appears to be paying off as the pest control company is now achieving revenues of US$474 million.

What Does This Mean For Your Business?

This is another example of how some very old problems are now being solved using the latest smart technology. In the case of Anticimex, vision and inspiration, plus a strategic alliance with a technology company has delivered an important technical and competitive advantage, and could revolutionise a whole industry.

If this can be achieved with a pest control business, other businesses should be asking themselves how / if technology could play a part in solving some of the challenges for businesses and their customers in a cost-effective way, and whether the fresh perspectives and ideas offered by alliances e.g. with technology companies could help move things more quickly forward in new, exciting, and lucrative directions.

Hologram Phone Launch

Hollywood-based, high-quality camera manufacturer ‘Red’ has surprised the tech world by producing a holographic, virtual-augmented and mixed-reality-ready smartphone.

Hydrogen One

Red, a developer and manufacturer of high-quality cameras used in Hollywood blockbusters like Guardians of the Galaxy Volume 2 and others, has just unveiled the Hydrogen One stand-alone, full-featured, unlocked multi-band smartphone, with an Android OS and holographic capabilities!

The idea of the phone is that it can form the basis of a modular, multi-dimensional media system, where parts can be added to enable it to do many different things.

World First?

The Hydrogen One is being positioned by Red a ‘world’s first’ holographic media machine that you can fit in your pocket, and that you don’t need to use special glasses with in order to experience the special effects.

The price tag for the Hydrogen One is $1,195 for the model with aluminium casing and $1,595 for a titanium-cased model. You can place an advance order for the Hydrogen One now but the devices won’t actually be shipped until sometime in the first quarter of 2018.Hydrogen One

Features

According to Red, the features that make the Hydrogen One so “retina-riveting” include the fact that it uses nanotechnology that allows the user to switch between traditional 2D content, holographic multi-view content, 3D content and interactive games.
Another key feature of the Hydrogen One is that its operating system also has an algorithm that can reportedly convert stereo sound into the kind of multi-dimensional audio that is like 5.1 on headphones, and is intended to be a great match with holographic H4V.

Some Scepticism

Some technical commentators have been sceptical about the Hydrogen One because they believe that Red has yet to prove itself as a popular electronic device manufacturer. There is also some scepticism as to whether the products can / will actually deliver the level of feature quality that lives up to the current hype. Critics of the product have also said that it may be a bit too niche and that it caters to a very affluent audience.

What Does This Mean For Your Business?

The fact that this device is being positioned as a media machine that is simply the foundation of a future multi-dimensional media system helps the avoid product being simply classed as another phone (to compete with the big phone manufacturers). It also shows how businesses are combining technologies to create new offerings that are potentially more adaptable to the fast-changing requirements of tech-savvy new generations of customers who have very specific requirements and value customisation in their products.

Fibre Broadband, Government’s Scheme Launched With £400m

The long-expected launch of the UK government’s plans to improve broadband speeds for homes and businesses by replacing copper phone wires with fibre-optic cable has been launched with a £400 million investment from the Digital Infrastructure Investment Fund.

Not Full-Fibre For Most Properties

Although the aim is ‘full-fibre’, this first stage is intended to replace the copper cable that runs from individual properties to the roadside cabinets / green boxes at the end of the street. This means that most of the infrastructure for broadband, for the time being, will actually be ‘hybrid fibre’.

Full-fibre (where cables from the box are fibre-optic too) could potentially deliver multi-Gigabit speeds faster than 1000Mbps, but full-fibre is currently only available to 2% of UK premises (despite 89% of UK premises now being within reach of a fixed line superfast broadband service). This does not compare well to other European countries. In Spain for example, 80% of premises have full-fibre access.

Even Faster

The government’s focus until now has been to provide ‘super-fast’ broadband speed (24Mbps or more), but the government’s plans to start replacing copper with fibre-optic is intended to produce ‘ultra-fast’ broadband (anything over 100Mbps).

Two Technologies Together

There are in-fact two technologies which are being deployed to help the UK to work towards ultra-fast broadband. One is fibre, the other is BT’ Openreach’s G.fast which can get high speeds (330Mbits) using a copper wire system. It is cheap to install because it can simply piggyback on existing cables, but it can degrade through too much contact with water.

The Money

Most telecoms commentators agree that the £400 million initial investment from the government will be nowhere near enough for the scheme to reach its aims. It is thought that lots more private money (private investors will bring the current total up to £1bn) and tax money will have to be used to bring about the desired updating of the UK’s telecoms infrastructure.

Criticism

There have been many criticisms of the government’s big plans for boosting broadband speeds with the widespread use of fibre-optic cables including:

  1. Even if you have a fibre-optic cable to your home / business premises, there will still be shared traffic points in the network which will slow down your broadband at certain times.
  2. The scheme will need a large number of construction workers. This could mean disruption, logistical challenges, and high costs.
  3. Full fibre-optic, ultra-fast broadband is not likely to be a reality in the UK anytime soon. At the current rate, BT Openreach has stated that only two million premises will have access to ‘full fibre’ by the end of 2020.

What Does This Mean For Your Business?

With so much of business (with customers, suppliers, and internal communications / collaboration) now conducted over the Internet, a fast connection is essential to help UK businesses to remain competitive. It is disappointing, therefore, that UK businesses don’t have, and look unlikely to have any time soon, access to kind of speeds that overseas companies (e.g. competitors) enjoy. While it is good that funding and momentum for the task of delivering faster (fibre or fibre/G.fast) broadband for UK businesses looks to be increasing, the UK has a long way to go. The reality is that we may only have 7% full fibre coverage by 2020.

Rogue Drone Over Gatwick

It has been reported that a drone being flown dangerously close to Gatwick airport was the reason why four Easyjet and one British Airways flights had to be diverted.

Runway Operations Suspended

Reports indicate that runway operations at Gatwick for two periods (one nine, and one five minute period) between 6pm and 7pm on Sunday 2nd July were suspended.

The resulting flight diversions during that period meant that many passengers ended up far from their intended destination (West Sussex), in places such as Stansted, Southend (Essex), and Bournemouth (Dorset).

The Drone

Reports about the exact nature of the drone itself are limited, other than to say that it was observed in the vicinity of Gatwick. Sussex Police are reported to be investigating the matter, but as yet the drone pilot has not been identified, and police were not able to recover the drone from the scene.

Certainly Not The First Time

The UK’s safety body jointly funded by the Civil Aviation Authority and the Ministry of Defence known as Airprox has recorded 70 such incidents last year, and 33 so far in this year. In fact, there has been a total of 142 Airprox incidents involving drones since 2010, with 40 of them being recorded near Heathrow, and 6 (7 including the latest) being recorded near Gatwick.

Could Have Been Worse – Has Been Worse

Although this latest incident caused a good deal of disruption, previous encounters with drones have posed more immediate and apparent danger.

In June, for example, a Loganair pilot attempting to land Edinburgh airport had to take evasive action after a drone came within only 20 metres of his plane.

Revised Code

A code (recently revised) exists in the UK to help ensure that drone pilots operate their crafts safely. The code specifically states that drones shouldn’t be flown near airfields or near aircraft, and that they should be flown below 120m (400ft) and at least 50m (150ft) away from people. This latest incident, and the fact that drones have been sighted by aircraft 12,500ft from the ground, show that not all drone pilots have read / abide by the code.

The Civil Aviation Authority has warned that flying drones near airfields carries serious punishments under law, including possible imprisonment.

What Does This Mean For Your Business?

Drones have found a use in many current business applications e.g. monitoring construction projects, film and TV, and the aerial photography market. They have also been tested and tipped for use in the future by e.g. Amazon for parcel deliveries. A move towards autonomous vehicles and new transport technologies means that drones currently have a bright future when used responsibly and professionally in the commercial world. Incidents such as the one at Gatwick give unwanted bad publicity to technology that has a lot of safe, cost saving, and productive uses in the right hands. It also points to the need for regulations and guidelines to be developed and revised as such new industries grow.

Charity Challenges (Snooper’s) Charter

The human rights charity has been given the go-ahead by the UK High Court to make a legal challenge against the so-called ‘Snooper’s Charter, and will be enabled to do so with the help of £50,000 of crowdfunding raised earlier this year via CrowdJustice.

What Is The Snooper’s Charter?

The Snooper’s Charter is another name for the Investigatory Powers Act which became law in November 2016. It was designed to extend the reach of state surveillance in Britain. The Charter requires web and phone companies (by law) to store everyone’s web browsing histories for 12 months, and also to give the police, security services and official agencies unprecedented access to that data. The Charter also means that security services and police can hack into computers and phones and collect communications data in bulk, and that judges can sign off police requests to view journalists’ call and web records.

Why Challenge It?

The charity ‘Liberty’ wants to challenge the Charter on the arguments that surveillance of everybody in the UK may not be lawful or necessary, and that whistleblowers and experts have warned that the powers would actually make it more difficult for security services to do their jobs effectively.

There are also the arguments that the new law puts too much power in the state’s hands, could be and invasion of privacy, and that the government storing large amounts of sensitive information about each of us could in itself be irresponsible and a security risk.

Some critics have also expressed suspicions about the motives of the UK government for introducing the law e.g. to censor and control rather than to protect.

Helped By Recent Judgement

Liberty’s argument has been helped by the fact that last December, the European Court of Justice (in a separate case, represented by Liberty lawyers) ruled that the same powers in the old the UK state surveillance law the ‘Data Retention and Investigatory Powers Act’ (DRIPA) were unlawful.

What Does This Mean For Your Business?

It goes without saying that, especially in the light of the recent UK terrorist attacks, the UK’s ability to spot and foil potential plots is vital. Although the new surveillance Charter may include measures that could help with that, many people and businesses (communications companies, social media, web companies) are uneasy with the extent of the legislation and what it forces companies to do, how necessary it is, and what effect it will have on businesses publicly known to be snooping on their customers on behalf of the state. The 200,000+ signatures on a petition calling for the repeal of the Investigatory Powers Act after it became law late last year, and the £50,000 crowdfunding raised from the public in less than a week to fight the bill, both emphasise the fact that UK citizens value their privacy and take the issues of privacy and data security very seriously.

NHS Sharing Data With Google Not Compliant Says ICO

A deal which led to the sharing of healthcare records of 1.6 million patients in the UK with Google’s AI company ‘DeepMind’ has been judged by the UK data protection watchdog the Information Commissioner’s Office (ICO) to have not complied with the Data Protection Act.

What Deal?

Back in May 2016 a data sharing agreement between Google’s A.I. Company DeepMind and the Royal Free NHS Trust meant that Google was granted access to the information of the patients for 5 years up to 2017 of 3 London Hospitals, namely;  Barnet, Chase Farm and the Royal Free Hospital.

The information was intended to be used by Google for the specific purpose of developing an app called ‘Streams’ to alert doctors when a person is at risk of developing acute kidney injury (AKI). NHS figures at the time showed the need for such an app because kidney injuries were believed to cause 40,000 deaths a year in the UK.

What Went Wrong?

A member of the public complained, the ICO investigation took place, and it was reportedly found that there were some shortcomings in how the data was handled e.g. some patients were not adequately informed that their data would be used as part of the deal. This led to concerns being raised about transparency for patients about how records were being used.

Protection

The Royal Free Trust originally stated that the patient data that Google would be given access would be encrypted, and that the Google DeepMind employees working on the project would not be able to identify any individuals from it.

There were also assurances that Google could not use the data in any other part of its business; that the data would be stored in the UK by a third party, and that all data will be deleted when the agreement expires at the end of September 2017.

Not Unusual

Despite concerns being raised in the media when the deal was first announced, the Royal Free NHS Trust pointed out that information sharing agreements of this kind weren’t unusual and that it was one of 1,500 agreements with third-party organisations that process NHS patient data.

Now What?

The ICO has now asked for the Trust to commit to changes which will ensure that it is acting within the law by signing an undertaking. The Trust has been asked to establish a proper legal basis under the Data Protection Act for the Google DeepMind project (and for future such projects), to complete a privacy impact assessment, to commission an audit of the trial and share the results with the ICO, and to show how it will comply with its duty of confidence to patients in any future trial involving personal data.

What Does This Mean For Your Business?

If your organisation works in a medical field or develops products or services with medical applications or inputs, an agreement of this nature with the NHS or a private health company could represent an R&D opportunity. As the national data guardian Fiona Caldicot pointed out in this case, there was huge potential that creative use of data could have on patient care and clinical improvements.

This story is, however, a reminder that companies / project partners should always be very clear on the Data Protection law (and GDPR as it will be next year) before embarking on a project. It also illustrates how privacy impact assessments are an important data protection tool in digital innovation, and how, just because new technologies enable businesses to do more, it does not mean these tools should always be fully utilised. The price of innovation shouldn’t be the erosion of legally ensured fundamental privacy rights, and the costs for companies that don’t take account of this could be great.

AA Website Shop Data Breach

Reports have surfaced of a data breach in April this year in the website shop of motoring / breakdown company the AA which left a large (13 gigabyte) cache of data, including personal customer data viewable online for several days.

What Happened?

Security researcher Scott Helme from ‘Motherboard’, and Troy Hunt of website ‘Have I Been Pwned’ reportedly discovered that a breach in the AA website meant that, what the AA blamed on a server “misconfiguration” actually meant that a huge file, allegedly containing addresses, names and parts of payment card numbers was left exposed online.

Mr Hunt and Mr Helme reported finding 117,000 unique email addresses in the exposed file along with names, net addresses, credit card types, expiry dates and the final four digits of the card.

Motherboard and ‘Have I Been Pwned’ subscribers / victims whose information was included in the exposed database were contacted to verify if the details were genuine and accurate, which they were reportedly found to be.

The AA Said…

AA president Edmund King is reported to have said that they first learned about the problem on 22 April. Soon after discovery, the firm that runs the shop on the AA’s behalf was told about the problem, and the vulnerability and the issue was resolved on 25 April. The AA has also reportedly said that, even though the database file was exposed, no (customer) payment details were compromised.

The AA Have Done…

Reports indicate that the AA have stated that they take data security very seriously, opened an independent inquiry into the issue, informed the UK’s data watchdog, the ICO, and issued legal letters warning against a dissemination breach under the ‘Computer Misuse Act’.

Criticism

The reported criticism of those who discovered and made the details of the breach public appear to focus of accusations that the AA may have not informed of all of the affected customers about the existence and the seriousness of the breach, and may in effect have kept quiet about it until others made it public.

What Does This Mean For Your Business?

This is another example, in what appears to be a long line of customer data breaches, involving high profile, well-known companies. This story is a reminder that, particularly with GDPR coming into force next year, companies need to be very familiar with, and to ensure that they comply with data protection regulations, and to realise that they are obliged by law to keep people’s personal information safe and secure.

Companies need to be as transparent as possible to customers about data breaches, and to inform them when data is exposed, rather than trying to keep quiet.

Businesses can help themselves and their customers avoid heartache by making sure that web and data security are issues that are prioritised, practices and systems are regularly reviewed and assessed for risk to make sure they are effective, compliant, and up to date, and that Disaster Recovery Plans are in place.

EU Roaming Charges Finally Finished

Roaming Free Euro Zone-1After a decade of campaigning by EU citizens and after 2 years of preparing the mobile networks for the change, The European Commission has announced that there will be no more EU roaming charges.

What Does This Mean?

The abolition of roaming charges applies to calls, texts and browsing the internet, and this means that citizens who travel within the 28 countries of the EU will be able to call, text and connect on their mobile devices at the same price as they pay at home.

Balance

Statements from the EU have focused on what a valuable achievement the agreement between mobile network operators and EU countries is in terms of its contribution to the idea of the EU’s Digital Single Market and accessibility for all citizens.

Other statements have focused on the balance that has been needed to strike the deal with the mobile phone networks. This means offering customers a better deal and maintaining profitability of mobile networks, and many people have taken this to mean the mobile networks could make up the charges lost in roaming fees in other ways e.g. increasing domestic phone tariffs and charges.

Are There Any Caveats And Exceptions?

Yes. Although, as the EU statements say that roaming charges have been abolished for travellers in the EU, there are some important caveats, exceptions and anomalies. These are:

  • Exceeding your agreed minutes, texts and data allowances are still chargeable in the in the EU, just as they are in the UK.
    The fair use clause still applies to data roaming. This means that even though you can make as many calls and send as many texts as you like at domestic prices, if your roaming data use exceeds “a reasonably high volume” at domestic rates, you may have to pay a surcharge of approximately £8.30 per gigabyte (inc VAT).
  • If you spend more time abroad than at home and consequently use your mobile more abroad than at home, you may still receive roaming charges. This is a result of a clause that was designed to dissuade people from taking out a contract in a low-cost country e.g. Romania.
  • Different providers include different countries in their roaming territories. Also, some countries are not automatically covered by the new rules e.g. Switzerland, Monaco, Andorra, some Eastern European nations, the Channel Islands and the Isle of Man.
    Roaming charges will still apply when you are on board European ferries or cruise ships in the Mediterranean, the Baltic and across the English Channel. This is because you are between EU ports and are using a satellite link to the ship.
  • Calling another EU country from the UK will still incur extra charges.
  • Calls to any EU country are now cheaper as long as you make them from any EU country that isn’t the UK.
  • Three non-EU countries in the European economic area have not yet introduced ‘Roam Like at Home’ charges, but have said that they may do so a short time after 15th June. These are Iceland, Norway and Liechtenstein.

What Does This Mean For Your Business?

For business people who are frequent overseas travellers, and for UK citizens who plan to use their mobile while on holiday abroad, this announcement is good news. There is still a rational suspicion that the mobile operators will make their lost roaming charges back somehow e.g. with higher tariffs and extra charges.

Brexit could, however, mean that the UK may lose its right to freedom from roaming charges. Some commentators believe that the UK could avoid this by negotiating equivalent measures, and / or that the mobile networks will introduce some lesser charges.

Legally, the UK government could decide whether EU price restrictions on roaming apply after Brexit because EU price restrictions on roaming or not after the UK leaves the EU are part of a regulation (not a directive), and, therefore, are not technically part of UK law. At this stage, it is unknown exactly how Brexit will affect the roaming charges issue going forward.

WannaCry Came From North Korea Say Experts

 

The UK’s National Cyber Security Centre (NCSC) led investigation into the origins of the WannaCry ransomware attack that crippled NHS systems last month has concluded that it came from a hacking group in North Korea.

What Happened?

The WannaCry global cyber attack back in May spread worldwide, claiming victims in 150 countries and leading to around 130,000 ransomware infections of computers. The attack also made the headlines in the UK because it temporarily crippled NHS computer systems.

WannaCry was made to exploit a vulnerability on an NSA-developed hacking tool called ‘Eternal Blue’. The rapid, global spread of WannaCry was eventually thwarted when UK security researcher Marcus Hutchins registered and took over the domain that was written into the ransomware’s core code.

Lazarus

The recent NCSC investigation has concluded that WannaCry was made and distributed by the North Korea-based hacking group known as Lazarus. This is believed to be the same group that targeted Sony Pictures with a hack in 2014 over the release of the film ‘The Interview’ that satirised the North Korean leadership. The Lazarus group is also believed to have targeted a South Korean supermarket chain.

Indiscriminate

It is believed that the WannaCry ransomware attack was indiscriminate, and the fact that the (old) NHS systems were particularly badly affected may have made it appear that it was targeted.

Traced

Initial reports from cyber security experts ruled out Russian-based hackers and focused on the fact that the code showed that it may have been created on a machine in a +9 GMT timezone.

A study and reverse-engineering of the WannaCry code, combined with some overlaps with previous code developed by the Lazarus group, plus taking into account wider evidence gathered by GCHQ’s NCSC, have led experts to confirm that WannaCry was the product of the North Korean Lazarus group. It is believed that America’s NSA did not contribute heavily to the investigation because the U.S. was not hit as badly as the UK by the attack.

Was It Worth It?

The motivation of the group has been called into question since the amount of ransom paid by victims is thought to only have been around £40,000, and none of the money has been collected by the group. Also, unlike many other hacking groups, Lazarus doesn’t claim responsibility for its attacks, does not release communiqués, and does not tweet about its exploits.
IT security commentators have, therefore, concluded that WannaCry is likely to have been an attack that was far more successful and widespread than the group had intended or expected.

What Does This Mean For Your Business?

In the wake of WannaCry’s rapid and extensive spread, Internet and data security, particularly with GDPR due to come into force next year, must surely now be given high priority by businesses and must be championed at board level. The danger and false economy of staying with old operating systems as long as possible was painfully exposed in this attack. For businesses, where an attack comes from is not as relevant and important as knowing that protection is in place.

Businesses need to take a range of measures to ensure that they are well defended against known cyber threats, and prepared for the aftermath, should defences be breached. Preparations could include making sure that all the latest updates and patches are installed on systems and that anti-virus software is up to date, all important data is regularly and securely backed-up, all staff are trained to spot and deal correctly with potential threats, and workable Disaster Recovery and Business Continuity Plans are in place.