Thought leadership
Leadership and risk
For executives, risk committees and senior IT leaders. Good practice guides and white papers with a board summary and practical next steps.
Case studies
Automation without blind trust: testing and guarding AI before it runs the joiner, mover, leaver process
How a customer services organisation with high staff turnover put drift testing, input and output checks, guard rails and human approval around generative and agentic AI before automating onboarding and access changes.
Case study · Regulatory complianceShrinking the PCI zone: card payment compliance by isolation
How organisations taking card payments in person and by phone reached PCI DSS compliance by isolating payment equipment, keeping card data out of everyday systems and out of call recordings.
Case study · Identity and accessSecure mobilisation at scale: from the office network to cloud identity
How tens of thousands of users at a large UK financial services organisation moved to secure remote working on cloud identity, and how the approach scaled down to under 1,000 seats.
Top 10s
Identity and Access Management: Top 10 Must-Do Actions
The ten identity controls to put in place first, from MFA for everyone to testing, with the evidence for each.
Top 10 · Identity and accessIdentity and Access Management: Top 10 Common Mistakes
Ten identity mistakes that attackers rely on, the evidence for each, and how to fix it.
Good Practice Guides
White papers
Articles
Understanding Zero Trust: History, Evolution, and Controversies
History of Zero Trust from Kindervag to NIST SP 800-207, with the main criticisms and implementation approaches.
Article · Regulatory complianceUnderstanding GDPR: A Guide to Data Protection in the UK
Overview of UK GDPR, the Data Protection Act 2018, individual rights and post-Brexit data transfers.
Also in Thought Leadership
Start with a conversation
Tell us about your organisation, your regulators and what is worrying you. We will say plainly whether we can help, and how.
Book a conversation