Security questions worth asking.

People & Cyber Awareness

A familiar supplier has changed their bank details. What happens next?

What to do when a familiar supplier requests a change of bank details: independent verification, approvals and a practical team exercise.

Oct 19, 2026 · 5 min read

AI & Workplace Security

How to write an AI usage policy employees will actually follow

A practical employee AI acceptable-use policy structure, with example wording and a lightweight approval process.

Oct 12, 2026 · 5 min read

AI & Workplace Security

The project ended six months ago. Why does the contractor still have access?

A practical contractor offboarding and cloud-sharing audit for Google Workspace, Microsoft 365 and other SaaS tools.

Oct 5, 2026 · 5 min read

Compliance, Explained

SOC 2 vs ISO 27001: which one does your business actually need?

Decide between SOC 2 and ISO 27001 based on customer requirements, scope, business operations and the evidence you can maintain.

Sep 28, 2026 · 5 min read

AI & Workplace Security

AI-generated code works. But who checked whether it’s secure?

What to check before accepting AI-generated code, including authorisation, dependencies, secrets and deployment controls.

Sep 21, 2026 · 5 min read

People & Cyber Awareness

How often should employees complete cybersecurity awareness training?

A realistic training cadence for UK teams, combining onboarding, scenario exercises, refreshers and short lessons.

Sep 14, 2026 · 5 min read

Compliance, Explained

Cyber Essentials in 2026: what UK businesses need to check before applying

Cyber Essentials 2026 readiness guide: scope, the five controls, cloud services, evidence and the checks to make before applying.

Sep 7, 2026 · 6 min read

AI & Workplace Security

Your employees are already using ChatGPT at work. What should they never paste into it?

A practical guide to what staff should and should not enter into workplace AI tools, from client documents to source code.

Aug 31, 2026 · 6 min read

Cybersecurity

The Browser Extension You Installed Six Months Ago Is Still Watching You

Apr 17, 2026 · 4 min read

Cybersecurity

You're Not Gullible. That's Exactly Why You Almost Fell For It.

Apr 17, 2026 · 3 min read

Cybersecurity

The Real-World Risks Behind the Next.js CVE-2025-29927 Vulnerability

Apr 11, 2025 · 3 min read