Changing the Dynamics Around Cybersecurity Awareness
We have been doing cybersecurity awareness the wrong way for the last two decades “People are the weakest link” … That’s what countless security…
Holding Leadership Accountable Around Cybersecurity
The role of the Board has to go beyond oversight given the criticality the subject has acquired This interesting piece in the HBR reflects on…
Debunking Three Cliches Deeply Entrenched in the Cybersecurity Industry Echo Chamber
I have been writing about cybersecurity leadership, management and governance issues since 2015. What drove me to writing, was primarily the dramatically low level of…
Still Fighting the Wrong Fight? The CISO Paradox in 2025
Why Most CISOs Still Miss the Point—and What Needs to Change The CISO Report 2025 from Splunk has received widespread comments from online cybersecurity media.…
Why Are Security Vendors So Obsessed with Board Attention?
The Board needs to take an elevated view on cybersecurity, looking for cross-functional governance matters beyond the mere technical horizon As I was looking back…
Using AI to Talk to the Board about Cyber: Clever Ploy or False Good Idea?
CISOs must avoid the repeat of some historical situations where cybersecurity might have been seen at odds with business needs For the past two years,…
The Fluid Cyber Edge: Navigating the New Frontier of Cyber Security
It is a rapidly evolving digital landscape, and the traditional fortress-like approach to cybersecurity is no longer enough. The shift from centralised, heavily fortified networks…
Generative AI and Cybersecurity: The Big Untold Problem
Hype and FOMO around generative AI are hijacking crucial discussions around cybersecurity in many firms Everybody is talking about generative AI. You must have been…
Looking Back at the Role of the Virtual CISO and the Reality of Small Firms
Many small firms would often benefit from looking internally first, before jumping to externalised cybersecurity solutions Many small firms have been struggling with cyber-attacks over…
Cybersecurity is Not Working: Time to Try Something Else
The bottom-up approaches most have been pushing for 20 years around cybersecurity have simply failed I think it is time to accept that the role…
Back to Basics around OT Security
Data may be “the new oil” for the manufacturing world but it cannot be taken for granted This interesting piece in the Journal of Petroleum…
Don’t Expect Cybersecurity to Work in Firms where Nothing Does
You cannot expect the CISO on their own, bottom-up, to reverse widespread business dynamics, where short-termism prevails everywhere across the business. I have written at…