Insights
Writing on cybersecurity, risk and compliance
Practical notes on risk, security fundamentals and what they mean for your organisation.
Risk assessment
Risk assessment techniques for cybersecurity
A working method for turning a long list of possible problems into a short, ranked list of the ones worth acting on first.
7 July 2025 · 4 min read
Cryptography
Cryptography, in plain terms
What cryptography actually protects against, and the four properties confidentiality, integrity, non-repudiation, authentication that a good system needs all four of.
19 April 2023 · 3 min read
Incident response
What an incident response plan actually needs to cover
Detecting a breach is only step one. What separates organisations that recover quickly from ones that don't is who's on the response team and what they're each responsible for.
19 April 2023 · 3 min read
Cybersecurity basics
Cybersecurity basics: why it's everyone's responsibility
Cybersecurity isn't a single problem with a single fix it's a collection of overlapping challenges. Here's how to start building the awareness that keeps most of them from becoming incidents.
17 March 2019 · 3 min read
Network security
Network security: protection, detection, reaction
Every organisation needs some level of network security. The three phases protection, detection and reaction — are the same regardless of size.
9 March 2019 · 3 min read
Cloud security
Cloud security is a shared responsibility
Cloud security depends on both the provider and the client getting their half right and knowing which half is theirs.
9 March 2019 · 2 min read
Application security
Application security basics
As applications move onto more networks and into the cloud, the surface area for attack grows with them. Here's where security needs to be built in, not bolted on.
17 May 2018 · 2 min read
Training
What an information security manager actually does
A look at the competencies behind the information security manager role — from compliance and audit to vulnerability management and staff awareness.
8 July 2025 · 3 min read
Training
What a cloud architect needs to know beyond the technical
Designing resilient, secure, cost-optimised cloud architecture is only half the role. The other half is translating between technical and non-technical stakeholders.
8 July 2025 · 2 min read