One of the more interesting threads that ran through conversations at The-C2 this year was not a new idea, but a reframing of something many… Read More »Cyber security has quietly become a geopolitical risk function inside modern organisations.
There is no shortage of cyber security events. Most promise insight. Most deliver information. Very few create the conditions for clear thinking. For senior leaders… Read More »Why The-C2 matters now more than ever for cyber security leaders
Artificial intelligence has moved from research laboratories into everyday business operations with remarkable speed. Since the public release of large language models and other generative… Read More »Artificial intelligence is transforming cyber security, but leadership responsibility is growing just as quickly.
In almost every major cyber incident I have examined, there is a moment when the conversation shifts. It moves from technical containment to strategic consequence.… Read More »Cyber security is not an IT problem. It is a board level judgement call.
Artificial intelligence is now firmly embedded in many of the systems organisations rely on to assess risk, prioritise action, and allocate resources. In cyber security,… Read More »When AI informs decisions, bias becomes a leadership issue, not a technical one.
Senior executives responsible for cyber security are increasingly expected to explain, justify, and defend the state of their organisation’s cyber maturity. Boards want assurance. Regulators… Read More »What cyber security maturity really means, and why executives must define it for themselves.
Most senior leaders now accept that cyber attacks are inevitable. That realisation, however uncomfortable, is progress. The harder question is what happens next. Too many… Read More »Resilience at scale is a leadership discipline, not a technical feature
When senior leaders talk about cyber risk, the conversation often gravitates towards ransomware, data breaches, or the resilience of their own internal systems. These are… Read More »Your supply chain is part of your attack surface. It is time to treat it that way.
There was a time when ransomware was considered a discrete threat category, an attack that encrypted files and demanded payment for their release. That time… Read More »The Business of Extortion Has Outgrown Ransomware
The old image of cybercrime: lone actors, dark basements, isolated exploits, no longer holds. Today, cybercrime behaves more like a functioning market. It is coordinated,… Read More »Cybercrime is an Economy Not an Event