
Penetration testing for first-timers: how to know if you need one
Most first Penetration Testing projects are bought for the wrong reason. A client asks for a certificate, cyber insurance tightens its wording, or a board member reads about an incident and wants reassurance by quarter-end. Penetration Testing is most effective when it is risk-driven and well-scoped …

Long read: what the BBC got right, and where leaders must push further
This long-form analysis responds to the BBC’s investigation, “The true cost of cyber attacks – and the business weak spots that allow them to happen,” examining the incidents that halted Jaguar Land Rover, disrupted Marks & Spencer and Co-op, and exposed the fragility of the UK’s critical supply …

When one portfolio company gets hacked, you all pay.
Portfolio companies don’t face a single cyber risk. They face a networked risk. A compromise at one portfolio company often exposes shared vendors, credentials, and processes that repeat across the rest of the fund. That’s aggregation. It’s why ransomware and supply-chain attacks scale so efficientl …

In-house security vs outsourced: who wins on ROI, and productivity
Security can be a powerful catalyst for productivity, not a burden to bear. The right operating model frees engineers to build, removes friction from change, and shortens recovery when something goes wrong. For most UK organisations outside the very largest enterprises, managed security delivers fas …

Achieving effective AI governance: a practical guide for small and medium businesses
As small and medium businesses (SMBs) begin to incorporate artificial intelligence (AI) into their operations, AI governance emerges as a crucial element for managing and mitigating risks, ensuring transparency, and maintaining compliance. For SMBs with limited resources, effective AI governance is …

October Cybersecurity Awareness: Stay ahead of cybercrime
With October’s cybersecurity awareness month helping us focus, we’ve been thinking about how to stay ahead, efficiently. Cybercriminals evolve all the time, and so must our business’s cybersecurity measures. The days of relying solely on antivirus software and firewalls are long gone. Surviving busi …

October Cybersecurity Awareness: Strengthening our digital defences
October marks Cybersecurity Awareness Month, an opportunity for us UK businesses to evaluate our digital infrastructure and bolster defences against an ever-growing array of cyber threats. As the landscape of cybersecurity evolves, so do the methods employed by cybercriminals. From small-scale phish …

October Cybersecurity Awareness: How IT Leaders Can Prevent a Ransomware Attack in 2024
Ransomware has evolved from a technical concern to a pervasive threat that requires a collective response from all levels of an organisation. From executives redefining priorities to employees being vigilant about online activities, cybersecurity is a shared responsibility. With ransomware ranking i …