Leadership
When does an organisation actually need a CISO?
Security leadership is usually needed long before a full-time CISO is affordable. Here is how to recognise the tipping point.
6 min read
Insights
Cybersecurity insight, in business language
Perspectives on cyber risk, security leadership and regulation for boards and executive teams.
Showing 6 of 6 articles. All articles below are clearly marked sample content.
Compliance
ISO 27001 without the theatre
Certification can either be a genuine improvement programme or an expensive documentation exercise. The difference is in the scoping.
7 min read
Threat Landscape
Ransomware readiness for mid-sized organisations
Preparation, not prediction, determines the outcome. A practical view of what mid-sized organisations should have in place.
8 min read
Cloud Security
Cloud misconfiguration is still the main event
Sophisticated attacks make headlines. Exposed storage, over-permissive identities and forgotten environments cause the incidents.
6 min read
Compliance
Answering customer security questionnaires without losing weeks
Security due diligence has become part of the sales process. Treating it as a repeatable capability saves significant time.
5 min read
Security Strategy
Board reporting that actually changes decisions
Boards do not need vulnerability counts. They need to understand exposure, direction of travel and the decisions in front of them.
6 min read
Ready to move from zero to one?
Book an introductory consultation and we'll help you identify where your organisation's real cyber risk sits.