[{"description":"Key Drivers Behind the Rising Demand for Virtual CISOs Wednesday, April 22,2026 Businesses are navigating the challenges of a digital-first environment, which is driving an increased demand for expert-driven cybersecurity solutions. The virtual chief information security officer (vCISO) has become essential for organizations seeking to enhance their cybersecurity resilience while managing costs effectively. Effective security leadership is more crucial than ever, particularly in light of the evolving threat landscape, which includes ransomware attacks and data breaches. Addressing Cybersecurity Challenges Organizations face a significant escalation in cyberattacks as hackers continually evolve their tactics. This dynamic landscape makes it challenging for businesses to maintain effective defenses. A vCISO plays a pivotal role by providing specialized guidance in threat intelligence, risk management, and incident response. By working with a vCISO, companies can proactively identify vulnerabilities and implement comprehensive security frameworks tailored to their needs. This partnership empowers organizations to build stronger defenses against the rising tide of cyber threats. Compliance with various regulations remains a formidable hurdle for many businesses. Non-compliance can incur severe penalties and damage reputations, prompting the need for expert oversight. A vCISO helps organizations navigate complex regulatory landscapes and ensures ongoing assessments and strategic roadmaps to meet compliance needs. By implementing best practices aligned with the latest standards, businesses can mitigate risks and enhance their security posture. A Cost-Effective Solution for Security Leadership Hiring a full-time chief information security officer can be a significant financial burden, especially for small and mid-sized businesses (SMBs) with limited resources. A vCISO offers a cost-effective alternative, providing high-level security expertise without the expenses associated with a permanent hire. Organizations can customize vCISO services, enabling them to pay only for the cybersecurity guidance they require, thus allowing for more efficient allocation of resources. The digital transformation driven by adopting technologies like cloud computing, remote work, and the Internet of Things has further amplified the need for vCISOs. These advancements expand attack surfaces, making traditional security approaches insufficient. A vCISO aids organizations in implementing modern cybersecurity frameworks, ensuring robust data protection across various environments, including cloud services and remote workforces. Additionally, the ongoing shortage of cybersecurity professionals enhances the appeal of vCISOs. Many companies struggle to find and retain in-house talent, but a vCISO can provide immediate access to seasoned security experts with extensive industry knowledge. This accessibility allows businesses to improve their security strategy without the delays associated with lengthy hiring processes. The flexibility and scalability offered by vCISO services make them suitable for organizations of all sizes. Whether a startup outlines its initial cybersecurity strategy or an established firm seeks ongoing risk assessments, vCISOs can deliver tailored security solutions that effectively address specific business objectives.","id":2852311,"source":"The Cybersecurity Review Europe","url":"https://www.thecybersecurityrevieweurope.com/news/key-drivers-behind-the-rising-demand-for-virtual-cisos--nwid-1282.html","titre":"Read more","pubDate":"Tue, 28 Apr 2026 10:47:09 +0200"},{"url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","id":2703238,"source":"EDPB News"}]