There is a phrase that comes up again and again in conversations with small organisations, usually delivered calmly, often reasonably, and rarely with any sense of denial or bravado. “We’re […]
If you look closely at most cybersecurity incidents, a familiar pattern appears. The tools were in place. The policies existed. Training had been delivered. On paper, the organisation had done […]
Cyber insurance is often spoken about in the same way as firewalls, backups, and incident response plans. Something sensible organisations are expected to have. Something that reassures boards, clients, and […]
If you sit in enough meetings about risk, compliance, or “cyber”, you start to notice something interesting. The language changes, but the assumptions rarely do. Cybersecurity and information security are […]
