Category: Miscellaneous

The Complexity of Security: Finding Balance with Tools and Processes

Control room with numerous monitors showing world maps and data analytics

Security tooling has become one of the primary ways organisation try to improve security posture. New platforms promise better visibility, faster detection, and more control. Budgets are allocated, tools are deployed, and dashboards begin to fill with data. On the surface, it looks like progress. But in many environments, the reality is different. More tools … Continue reading The Complexity of Security: Finding Balance with Tools and Processes →

Why Security Best Practices May Fail in Reality

Balance scale with piles of policy documents on one side and computer servers on the other in an office

It's been a little while since my last post. I went back to university in January, so things have been busy - but it's good to be back. One thing that's stood out to me recently is how much of the security advice we rely on is built around "best practices". On paper, they make … Continue reading Why Security Best Practices May Fail in Reality →

Living with Security Debt

Most organisations are carrying more security debt than they realise. It’s not just old severs and unpatched systems, but years of shortcuts,exceptions and 'temporary' decisions that never quite got unwound. On paper controls exist. In reality, there are seams, overlaps, and blind spots that only become visible when something goes wrong. Security debt is the … Continue reading Living with Security Debt →

From Firefighting to Forward‑Looking: Building a High‑Impact Security Team

Most security teams are busy. That's a given. There is always another project, audit or incident competing for attention. In that environment, it is dangerously easy to confuse activity with impact. Everyone is working hard, but it is not always clear whether the organisation is genuinely safer or simply more exhausted. A high‑impact security team … Continue reading From Firefighting to Forward‑Looking: Building a High‑Impact Security Team →

When Shared Responsibility Means No Responsibility

Modern security environments are built on shared responsibility. Cloud providers, third-parties, internal teams, and business leaders all play a role in managing risk. In theory, this model enables scale and flexibility. In practice, it often creates gaps. Many security failures are not caused by a lack of controls or awareness, but by uncertainty over who … Continue reading When Shared Responsibility Means No Responsibility →

Transforming Security: From Blocker to Business Enabler

Security teams are often seen as the function that slows work down, adds extra steps, or blocks ideas at the last minute. That perception does not just impact team relationships; it directly affect how early people involve security and how willing they are to act on advice. Shifting security from "blocker" to "business enabler" is … Continue reading Transforming Security: From Blocker to Business Enabler →

Enhancing Incident Response Through Effective Communication

When a security incident occurs, technical response often becomes the immediate focus - isolating systems, analysing logs, restoring services. However, the effectiveness of an incident response also depends on how well teams communicate under time pressure and uncertainty. Clear, structured communication helps people understand priorities, coordinate activity, and avoidable delays. Communication will not remove risk … Continue reading Enhancing Incident Response Through Effective Communication →

AI-Enhanced Phishing: New Challenges for Cybersecurity

With the rise of AI, phishing scams have evolved from obvious traps to highly sophisticated communications that blend seamlessly into inboxes. Attackers utilise large language models, voice cloning, and deepfakes, making phishing more difficult to detect. To combat these threats, companies must enhance technical controls, provide awareness training, and establish verification protocols.

Cyber Security Careers: Find Your Ideal Role Today

So, you're thinking about cyber security? Maybe you're curious about career-switching, just starting out, or trying to figure out why everyone keeps saying 'blue team' like it's a Marvel squad. Either way, welcome to the chaotic good side of tech. The truth? Cyber security is not just one job. It's a whole universe of roles, … Continue reading Cyber Security Careers: Find Your Ideal Role Today →

The Dangers of BYOD: Risks Every Company Must Address

Bring Your Own Device (BYOD) has become increasingly common in today's digital workplace. This trend is particularly noticeable with the rise of remote and hybrid working. BYOD refers to the policy of allowing employees to use their personal devices - such as smartphones, tablets, and laptops - for work purposes (NIST, 2020). However, in my … Continue reading The Dangers of BYOD: Risks Every Company Must Address →