Business Email Compromise: What to Do in the First 24 Hours
A practical first-day response to business email compromise: contact the bank, secure email access, preserve evidence and coordinate business decisions.
Read articleBlog
Articles on cybersecurity, intelligence, incident response and AI.
Digital Forensics: How to Preserve Evidence After a Cyber Incident
How business, security and legal teams can preserve useful digital evidence after an incident, from volatile data and cloud logs to custody and integrity.
Read article
AI Agent Security: A Practical Checklist Before Deployment
A practical AI agent security checklist covering permissions, prompt injection, approvals, testing and shutdown controls before production deployment.
Read article
Cybersecurity Due Diligence: What to Check Before an Acquisition
What to examine in cybersecurity due diligence before an acquisition: access, incident history, recovery evidence, dependencies and integration risks.
Read article
NIS2 and DORA: What Boards Actually Need to Do
NIS2 and DORA move cyber risk from a periodic briefing item to a direct responsibility of the management body. Here is what that means in practice, beyond the policy binders and certificates.
Read article
What Happens in the First 72 Hours of a Ransomware Incident
The first three days of a ransomware incident decide whether an organisation recovers in an orderly way or compounds the damage. This is how I structure those hours, from containment and forensics to regulatory reporting and recovery.
Read article
Insider Threats in Telecoms: Lessons from the Field
Telecom operators put extraordinary capability in the hands of frontline staff, contractors and engineers. Drawing on investigations across several markets, I explain how insider threats really manifest and what actually reduces them.
Read article
Agentic AI in Security Operations: What Works and What Doesn't
Agentic AI can genuinely transform security operations, but it is easy to deploy badly and it introduces new risks of its own. This is my assessment, from hands-on work, of where it delivers value and where it still falls short.
Read article