Explore the publication
Cybersecurity
Identity, access, security operations, supplier risk and organisational resilience.
Explore this topic
Cybersecurity · Analysis
A cyber resilience business case should fund the recovery bottleneck
Connect resilience spending to tested service bottlenecks, compare credible alternatives and distinguish recovery capability from speculative avoided-loss claims.
Cybersecurity · Comparison
In-house or managed SOC? Budget for the work each model leaves behind
Compare internal, managed and hybrid security operations on the same responsibilities, coverage hours and response authority. Include retained work and transition costs.
Cybersecurity · Decision guide
Identity threat detection: prove the gap before buying another platform
Test whether identity logs can explain privilege changes, session use and account recovery before committing to another detection platform.
Cybersecurity · Practical guide
Supplier cyber assessments: put the deepest review where failure hurts
Scale supplier cyber assurance around access, sensitive data and operational dependency, with evidence and decisions proportionate to the risk.
Cybersecurity · Practical guide
Identity-provider outage readiness: test the route back into administration
Test whether administrators can reach credentials, runbooks and communications when normal identity fails, then prove the controlled return to service.
Cybersecurity · Analysis
Application security metrics: explain what changed before celebrating the count
Finding counts can rise with better coverage or fall when visibility is lost. Tie AppSec reporting to deployed exposure, verified fixes and recurrence.
Cybersecurity · Analysis
AI agents make delegated authority an access-governance decision
An agent can connect user requests to broader application permissions. Govern that change of authority at the tool boundary and preserve evidence of the task.
Cybersecurity · Practical guide
Detection coverage: follow one attack path from event to response
A useful detection coverage review traces relevant activity through telemetry, analytics and response. Find the broken step before buying another SOC platform.
Cybersecurity · Practical guide
Service credential rotation: include the integration that only runs at month-end
A new secret is only the start of rotation. Map delayed consumers, test fresh authentication and choose a revocation sequence the target system actually supports.
Cybersecurity · Practical guide
Close SaaS lifecycle gaps at the application, not the identity dashboard
Test joiner, mover and leaver outcomes inside SaaS applications. Separate provisioning, permissions and session revocation to expose unfinished changes.
Connected topics
