Latest posts

  • Fourteen days: what Cyber Essentials now expects your people to do

    Fourteen days: what Cyber Essentials now expects your people to do

    Cyber Essentials now fails organisations outright on patching and multi-factor authentication. Some of October’s training effort belongs with the people who run those controls. Fourteen days is how long an organisation seeking Cyber Essentials has to install a high-risk or critical security update. For assessment accounts created after 26 April 2026, answering “no” to either…

    Read more

  • What Happens If Your AI Vendor Goes Dark Tomorrow?

    What Happens If Your AI Vendor Goes Dark Tomorrow?

    Ask most technology leaders whether they know their organisation’s biggest single point of failure, and they’ll usually point to a legacy system, a key supplier, or one irreplaceable member of staff. Ask them whether that point of failure might now be an AI vendor they signed up with eighteen months ago for a pilot project,…

    Read more