# OCSRC Blog

## [Avoiding cyber security mistakes](/content/ocsrc-blog/avoiding-cyber-security-mistakes/index.html)
People make mistakes... all the time. It's inevitable, it's difficult to fix with technology and represents at least one step in the majority of successful breaches. Technology helps people and cyber security makes sure technology is less likely to help people make mistakes.

## [Securing the supply chain](/content/ocsrc-blog/securing-the-supply-chain/index.html)
In big organisations, cyber security has often reached a level of maturity where the “low hanging fruit” have been addressed. The next big challenge is to understand the risk that comes from the supply chain, which is populated with far smaller businesses.

## [Securing your people](/content/ocsrc-blog/securing-your-people/index.html)
Who do you invite through your security? Which documents bypass your controls? Who is looking over your shoulder? Security isn't just about the tech, it's about the people who use it too…

## [GDPR and Cyber Security: Putting Data in the Cloud](/content/ocsrc-blog/pitfalls-of-gdpr-and-cyber-security-for-micro-organisations-part-3/index.html)
Small businesses don’t know which parts of the cloud are secure enough to collaborate through. With the support of Piers Clayden, of Clayden Law, we explore what might be hiding in those Ts and Cs we all choose not to read.

## [GDPR and Cyber Security: Bring Your Own Device](/content/ocsrc-blog/pitfalls-of-gdpr-and-cyber-security-for-micro-organisations-part-2/index.html)
Separating roles in bring your own device (BYOD) environments: what if voluntary organisations can’t segregate their IT use... because the volunteers own all the equipment?

## [GDPR and Cyber Security: Mailing List Consent](/content/ocsrc-blog/pitfalls-of-gdpr-and-cyber-security-for-micro-organisations-part-1/index.html)
Maintaining services in a changing legal environment: Any charity or club might have to rethink what they're doing with their personal data. Not collecting data is a legitimate cyber security measure, but good security isn't intended to be obstructive.