-
Continue reading →: 612,000 UK Businesses Identified a Breach or Attack — and We’re Still Not Doing the Basics
The government’s own Cyber Security Breaches Survey for 2025/2026 was published on 30 April 2026 and, if you work in this industry, the numbers should make you uncomfortable. Not because they’re surprising, they’re not, but because they confirm what a lot of us have been saying for years and the…
-
Continue reading →: AI in Cyber Defence, Six Days On: Credit Where It’s Due
Six days ago I published a piece asking whether we were automating ourselves into a corner in CNI cyber defence. The short version, for those who missed it: yes, we probably are, for reasons that ranged from non-human identity sprawl to skills erosion to an industry-wide reluctance to measure what…
-
Continue reading →: AI in Cyber Defence: Are We Automating Ourselves Into a Corner?
I’ve spent the better part of three decades watching this industry chase the next silver bullet. Firewalls were going to solve everything. Then it was SIEM. Then zero trust. Now it’s AI. And while I’m not here to tell you AI has no place in cyber defence, it clearly does,…
-
Continue reading →: Why scaring people into security is lazy, and what to do instead
I talk to a lot of people about digital security. Too often, someone recounts their last conversation with a consultant who tried to win the work by frightening them. I have watched it happen in real life. Different bar, different badge, same routine. The pandemic briefly paused the theatre. Big events went online, then…
-
Continue reading →: Moving to Guernsey
I didn’t come to Guernsey to complain. I came because I liked how it felt to be here. On an early visit we ducked into a pub while waiting for people to land. The young woman behind the bar smiled, said “welcome to the island,” and wouldn’t let me pay. That set the tone…
-
Continue reading →: Cyber Insurance – again!
It’s interesting to see the NCSC’s recently published guidance on Cyber Insurance (https://www.ncsc.gov.uk/guidance/cyber-insurance-guidance). As you’d expect, it’s a useful “short-read” on things to consider and helpfully offers sound, constructive suggestions. While I think the article is good, it raises a really important question that remains unanswered, which is: HOW does…