Explore the publication
Cybersecurity
Identity, access, security operations, supplier risk and organisational resilience.
Put it into practice
Resources for this topic
Enterprise Tech Logic
Worksheet
Identity procurement and migration scorecard
A structured record of IAM requirements, supplier evidence and migration readiness.
IAM teamsIT leadershipProcurement
Free worksheet · no registration
Explore this topic
Cybersecurity · Analysis
Supplier questionnaires leave the hardest resilience question unanswered
Use supplier questionnaires to identify where service-specific evidence, recovery arrangements and contractual commitments need a closer look.
Cybersecurity · Explainer
SSO, federation and provisioning: three different parts of the access journey
Understand what SSO, federation and provisioning each deliver, and why successful sign-in does not prove a complete identity integration.
Cybersecurity · Practical guide
A board cyber report should change a business decision
Turn cyber reporting into a clear discussion of service exposure, evidence and choices, with a practical example of a board decision.
Cybersecurity · Decision guide
Contractor access needs an end condition the business can enforce
Choose contractor access around the engagement, sponsor and removal path, with practical trade-offs between external and managed identities.
Cybersecurity · Analysis
Identity metrics: measure the access that remains after the ticket closes
Build identity metrics around confirmed application outcomes, coverage and unresolved access, rather than ticket closure or enrolment totals alone.
Cybersecurity · Practical guide
An IT incident handover must respect the physical process
Connect IT evidence with operational authority during an OT incident, including process context, handover decisions and return-to-service acceptance.
Cybersecurity · Practical guide
IAM migration: preserve the application journey through cutover
Plan IAM migration around account matching, application ownership, coexistence and rollback, with acceptance beyond successful sign-in.
Cybersecurity · Explainer
Penetration testing, red teaming and validation answer different questions
Choose security testing by the evidence needed: exploitable weaknesses, detection and response behaviour, or repeatable control checks.
Cybersecurity · Analysis
AI SOC analyst evaluation: count the correction work as well as the speed
Evaluate AI security assistance against analyst outcomes, source accuracy, correction effort and action permissions using a practical pilot design.
Cybersecurity · Practical guide
Security exceptions need an expiry decision, not another reminder
Make security exceptions actionable with clear exposure, ownership, interim controls and a real decision at expiry.
Connected topics
