On the night of June 22-23, just before Midsummer, as Latvia was preparing for the long holiday weekend, attackers launched an active assault on one of the country's largest state-owned companies - Latvijas valsts meži (LVM, Latvian State Forests). The result: encrypted data, around 7,000 stolen employee passwords, deleted backups, and systems that stayed down for weeks. It is common to assume that attackers are more interested in state infrastructure itself than in individua

Picture a night watchman who stays awake while you sleep. He doesn't build fences or install locks — that was done earlier. His job is different: to watch, to notice, and to react in time. If he spots movement by the warehouse at two in the morning, he doesn't wait until sunrise — he checks what's happening and raises the alarm if needed. That is exactly how a SOC works. So what is a SOC? A Security Operations Center is a team of people, processes, and tools that continuously

"But we have an IT person - don't they take care of security too?" This is one of the most frequent questions we hear from company managers. The question is understandable, because both roles deal with data and computers, but behind it lies a misunderstanding that can be costly - especially now that the Cyber Security Law (CSL) sets new requirements for organisations. The answer is simple: an IT administrator and a CISO do different jobs — one looks after the company's IT est

It is easy to picture CISO as someone with their eyes glued to screens and code. The reality is different — much of the time goes to consulting and ensuring clarity, not to technical work. It is similar to the job of a house architect: they design the house, talk to its residents, and explain decisions, but they do not lay the walls themselves. 1. Preparing employees for threats - drills, phishing tests The weakest link in security is usually not the technology, but people. T

When you receive a letter from the National Cyber Security Centre (NKSC), the first question that comes to mind is: should I be worried? The answer depends on which of the three main types of notice you received. They are very different — from "you have been added to the register of entities" to "urgently fix your company's cyber security gap." Summary Inclusion in the register of entities — your company has become a cyber security entity and must comply with the requirements