There is a quiet assumption in many organisations that software risk is primarily a function of what their own developers produce. Secure coding practices, internal… Read More »Understanding the hidden risks in modern software dependencies.
Artificial intelligence is increasingly embedded in systems that influence high impact decisions. In security operations, fraud detection, threat triage, identity verification, and investigative analytics, AI… Read More »If you deploy AI without addressing bias, you are creating a governance risk.
Artificial intelligence is now firmly embedded in many of the systems organisations rely on to assess risk, prioritise action, and allocate resources. In cyber security,… Read More »When AI informs decisions, bias becomes a leadership issue, not a technical one.
Insider threats remain one of the most underestimated risks in enterprise security. Unlike external attackers, insiders often operate with legitimate access, contextual knowledge, and trusted… Read More »What Mature Organisations Get Right About Insider Threat
At The-C2 this year, managed security services came up in more than one breakout room, corridor chat and follow-up conversation. There was general agreement that… Read More »Procured, Not Protected? What to Watch When Outsourcing Cyber Security
One of the more thought-provoking discussions I had recently started during The-C2 conference and continued in a meeting shortly after with a delegate I’d connected… Read More »From Unexpected Outputs to Real-World Risk: A Practical Look at AI Behaviour
Among the many sessions at The-C2 this year, one particular breakout took a surprising turn. What started as a conversation about digital identity and reputation… Read More »It’s Not a Data Breach. But It Might Be Worse.
After attending The-C2 Conference 2025, I have taken time to reflect on the pivotal discussions around measuring cyber risk. In today’s technology-driven environment, the threats… Read More »Cyber Risk Measurement: A Practical Guide for Business Leaders