Cyber Security and Resilience Bill: The UK CISO’s 24-Hour Test
How should UK CISOs prepare for the Cyber Security and Resilience Bill? Learn the 24-hour reporting clock, supplier scope and board actions now.
-
-
Machine Identities Outnumber Staff 109:1: A CISO Action Plan
Non-human identities now outnumber UK staff 109:1, and half of firms have had a breach tied to one. Here’s how CISOs should govern the risk in 2026.
-
Insider Threats Up Sevenfold: A UK CISO Checklist for 2026
How should UK CISOs respond as insider threat incidents rise sevenfold in 2026? A practical detection and access-control checklist for boards.
-
How UK CISOs Should Prepare for the EU’s New SBOM Deadline
UK CISOs must prepare for the EU Cyber Resilience Act’s 11 September vulnerability reporting deadline, even though the UK SBOM rules stay voluntary.
-
Cyber Due Diligence: A UK CISO’s M&A Checklist for 2026
Cyber due diligence failures sink UK deals post-close. This CISO checklist surfaces security risk before signing, not after integration begins.
-
Cloud Misconfiguration Breaches Are Up 50%: The UK CISO Response
Cloud misconfiguration now causes 14% of breaches, Verizon finds, and UK CISOs face ICO fines of up to £17.5m for slow remediation in 2026.
-
AI-Generated Code: A UK CIO Governance Checklist for 2026
AI now writes nearly half of enterprise code, but 81% of CIOs can’t see where it runs across the SDLC. A 2026 governance checklist for UK CIOs.
-
Ransomware Response: A UK CISO’s 72-Hour Reporting Checklist
New UK rules give CISOs just 24 hours to notify regulators after a ransomware attack. Here is the 72-hour incident response checklist to prepare now.
-
How UK CISOs Should Prepare for the Cyber Assessment Framework
How UK CISOs should prepare for the NCSC’s Cyber Assessment Framework before the Cyber Security and Resilience Bill makes it statutory in 2026.
-
Cyber Governance Code of Practice: A Board Checklist for 2026
The Cyber Governance Code of Practice sets five duties every UK board must now embed — here’s what directors need to check before the next risk report.
