There is no shortage of cyber security events. Most promise insight. Most deliver information. Very few create the conditions for clear thinking. For senior leaders… Read More »Why The-C2 matters now more than ever for cyber security leaders
Senior executives responsible for cyber security are increasingly expected to explain, justify, and defend the state of their organisation’s cyber maturity. Boards want assurance. Regulators… Read More »What cyber security maturity really means, and why executives must define it for themselves.
For all the investment organisations have made in cyber security over the past decade, one uncomfortable truth remains. The single most common way attackers gain… Read More »Why passwords are still failing your organisation and what leaders should do next.
When organisations prepare for cyber incidents, the focus is usually on technology, containment, and recovery timelines. These are essential considerations, but they are not the… Read More »Cyber incidents are human crises first. Treat them that way.
I found myself standing in the middle of a small group over coffee at The‑C2, listening in as someone asked, “Has anyone actually turned off… Read More »If Not Now, When? Reflections on Retiring the VPN in a Zero Trust World
There was a conversation at The-C2 this year that caught me off guard, not because the topic was unfamiliar, but because of how honest it… Read More »When the Culture’s Off, the Security Follows