What organisations can learn from the record breaking fine over Capita’s ransomware incident

Recently, the ICO fined Capita £14m for their Black Basta ransomware incident — the largest amount ever fined by the Information Commissioners Office. It ruled Capita were “negligent” when it comes to cybersecurity. They also noted that Capita bill themselves as a primary supplier to the UK government, and sell a Managed SOC (Security Operations Center) service — when the SOC was the primary failure identified in the report. The fine was originally supposed to be the maximum fine available under GDPR legisl