Explore the publication
Cybersecurity
Identity, access, security operations, supplier risk and organisational resilience.
Explore this topic
Cybersecurity · Decision guide
Incident response retainers: find out what starts when you call
Compare the first response, investigation scope, recovery handover and spending authority. A response-time promise is only one part of an incident retainer.
Cybersecurity · Practical guide
Access reviews are unfinished until the permission changes
Give reviewers a business decision they can understand, define what silence means and verify that denied access is removed at the system that grants it.
Cybersecurity · Practical guide
Vulnerability prioritisation: choose the next action, not just the highest score
Order remediation by exploitation evidence, reachable access and business consequences, then give each decision an owner, a deadline and a reason to change.
Cybersecurity · Explainer
Non-human identities need an owner beyond the next secret rotation
Separate workloads, identities, credentials and permissions so automated access has an accountable owner, a justified scope and a working retirement path.
Cybersecurity · Analysis
Vulnerability metrics: explain what disappeared before claiming progress
A smaller vulnerability backlog can hide lost coverage or changed scoring. Show verified fixes, missing assets and unresolved exposure separately.
Cybersecurity · Practical guide
An AI agent inventory should follow every route to action
Map each agent tool to its executing identity, permission source, audit evidence and stop control, including changes from user access to shared credentials.
Cybersecurity · Decision guide
Security tool consolidation: prove what can be switched off
Make security-tool retirement depend on detection, investigation and retention evidence, with migration and parallel-running costs in the business case.
Cybersecurity · Practical guide
Phishing-resistant MFA succeeds when a lost device does not become a bypass
Plan phishing-resistant MFA around enrolment, everyday access and lost-device recovery. Test support routes and application exceptions before expanding coverage.
Cybersecurity · Decision guide
Software supplier security: follow the evidence to the product you are buying
An application security lead needs assurance about the purchased product and its release process. A supplier's corporate policy is only the beginning of that conversation.
Cybersecurity · Decision guide
Attack surface management: turn discovered assets into owned exposure
Evaluate attack surface management through attribution, disputed assets and remediation handoffs, with evidence of coverage rather than inventory size alone.
Connected topics
