Cyber Governance Code of Practice: A Board Checklist for 2026
The Cyber Governance Code of Practice sets five duties every UK board must now embed — here’s what directors need to check before the next risk report.
-
-
Cyber Essentials Plus 2026: A CISO Checklist for the New Rules
Cyber Essentials Plus 2026 changes MFA, password and patch rules from April — here is the practical checklist UK CISOs need before recertifying.
-
Cyber Resilience Testing: What UK CISOs Must Prove in 2026
Proving cyber resilience, not just compliance, is now the CISO test for 2026 — see what UK security leaders must demonstrate through incident testing.
-
CISO Burnout: What UK CISOs Must Fix to Protect Resilience
CISO burnout is now threatening cyber resilience across UK firms—here is what CISOs and boards must fix now to protect people and operations.
-
AI-Powered Cyberattacks: What UK CISOs Must Defend Now
The NCSC warns adversaries now use frontier AI to discover and exploit vulnerabilities at scale. What UK CISOs must defend against this year.
-
Cyber Resilience Pledge: What UK CISOs Must Decide Now
The UK Cyber Resilience Pledge asks CISOs to make security a board duty — here is what signing actually commits your organisation to.
-
FCA Incident Reporting Rules: What UK CISOs Must Build Now
The FCA’s PS26/2 incident reporting rules give CISOs 12 months to build reporting capability.
-
Cyber Risk Quantification: What UK CISOs Must Show the Board
Boards now expect cyber risk in pounds, not just red-amber-green. Here’s how UK CISOs should quantify exposure for 2026.
-
UK Ransomware Payment Ban: What CISOs Must Do to Prepare Now
UK ransomware payment ban legislation is advancing. CISOs in CNI and financial services must act now to build resilience that removes the payment option.
-
Zero Trust Architecture: What UK CISOs Must Build in 2026
Gartner says only 10% of large enterprises will have mature zero trust by end of 2026. UK CISOs with NCSC, DORA, and Cyber Resilience Bill obligations cannot wait.
