Insights

Technology Governance & Security teams aren’t the “department of no.” They’re the function protecting organisations from modern supply‑chain attacks, unstructured code, and ungoverned dependencies. Recent Python ecosystem compromises…

The EU AI Act's transition period isn't a grace period — it's a preparation window. The organisations that use it well will be ahead of the curve. The…

Most organisations have one of two AI governance problems: they have no framework at all, or they have a policy document that nobody reads and nothing that embeds…

The EU AI Act isn't coming — it's here. And while most organisations are still treating it as a future concern, the compliance clock is already running. Here's…

Reflections from CSO ThreatScape 2026 in Manchester — on why the organisations winning the cyber resilience battle aren't the ones with the best tools, but the ones with…

I'm joining an exceptional panel of leaders at CSO ThreatScape Summit UK in Manchester on 19 March. Here's what's on my mind ahead of the day — and…

When AI can mine personal data at scale and craft perfectly personalised influence campaigns, the biggest vulnerability in any organisation isn't its software — it's its people. Here's…

I'm joining fellow security leaders at the CSO Security Summit in London to share cyber resilience best practices. Here's why I think resilience — not just defence —…