Insights for Information Security
The gap you haven’t mapped is the one an attacker finds first. Expert insights on information security for the teams who need confidence that what matters is protected - and their obligations are met.
InfoSec
What is IT Risk Management?
What does IT risk management actually cover? A practical guide to the scope of technology risk, the main frameworks, and a programme boards can rely on.
InfoSec
Cyber Risk vs IT Risk
What's the difference between cyber risk and IT risk? How the two relate, where they overlap, why it matters for governance, and how to cover both.
InfoSec
How to Build a Cyber Risk Register
A step-by-step guide to building a cyber risk register that works. From asset and threat mapping to scoring, control gaps, ownership and keeping it current.
InfoSec
DORA IT Risk Requirements
What DORA's ICT risk rules require of financial entities around technology risk governance, and how they differ from general information security.
InfoSec
NIS2 and Information Security
What does NIS2 require of information security teams? A clear walkthrough of the ten Article 21 measures, management liability, and implementation priorities.
