On 6 January 2026, the UK Government published the Government Cyber Action Plan, setting out how cyber resilience is expected to be strengthened across central government, local authorities, public services, and the suppliers they rely on. At face value, this is a delivery plan. It outlines how responsibility is organised, how capability will be developed, […]
There is a phrase that comes up again and again in conversations with small organisations, usually delivered calmly, often reasonably, and rarely with any sense of denial or bravado. “We’re too small to be a target.” It might be said during a discussion about training, while reviewing budgets, or when someone raises a question about […]
If you look closely at most cybersecurity incidents, a familiar pattern appears. The tools were in place. The policies existed. Training had been delivered. On paper, the organisation had done what it was supposed to do. And yet, something still went wrong. More often than not, the incident didn’t involve a technical failure or a […]
Cyber insurance is often spoken about in the same way as firewalls, backups, and incident response plans. Something sensible organisations are expected to have. Something that reassures boards, clients, and insurers alike. And yet, when incidents actually happen, many businesses discover that their understanding of cyber insurance was built on assumptions rather than reality. Claims […]
If you sit in enough meetings about risk, compliance, or “cyber”, you start to notice something interesting. The language changes, but the assumptions rarely do. Cybersecurity and information security are used as if they’re interchangeable. Different words, same meaning. Same budget line. Same responsibility. Most of the time, no one challenges that assumption. It feels […]
Running a small, service-based business doesn’t automatically exempt you from thinking about environmental responsibility. In fact, in many ways it makes the question more uncomfortable. When your footprint is modest, it’s easy to tell yourself that the impact is negligible, that bigger organisations are the ones who need to worry about policies, plans, and accountability. […]
If you want to understand online influence, don’t start with the extreme cases. Start with something ordinary. A child sits curled at one end of the sofa, drifting through their feed with the absent-minded ease that comes from habit and comfort. The room is quiet except for the faint chime of a notification. They scroll. […]
Financial services operate in one of the most heavily regulated environments in the world, and yet the failures identified in FCA cybersecurity reviews often have little to do with whether a firm understands the rules. Most institutions can recite the familiar acronyms — SYSC, SMCR, PRIN, and the operational resilience framework — with ease. They […]
Conduct sits at the very centre of online safety, yet it is often the part we understand least. Content shapes what captures our attention, contact shapes who reaches into our lives, and commerce shapes the subtle pressures that influence our decisions. But conduct is different. It is the behaviour we bring with us into digital […]
Artificial intelligence has become both the promise and the paradox of our time. It’s the silent assistant that writes our reports, predicts market trends, and keeps networks safe from attack — yet it’s also the engine behind voice clones, deepfakes, and misinformation that spreads faster than truth. Every headline tells a different story. In one, […]
