Critical Third Parties: A UK Risk Committee Checklist for 2026
UK risk committees must now oversee Critical Third Parties like AWS, Google and Microsoft under BoE, PRA and FCA rules live since July 2026.
-
-
Cyber Due Diligence: A UK CISO’s M&A Checklist for 2026
Cyber due diligence failures sink UK deals post-close. This CISO checklist surfaces security risk before signing, not after integration begins.
-
Only 40% of UK CISOs Trust Their Incident Response Plan
How should UK CISOs evaluate incident response retainers? Before a breach, not during one — a practical, board-ready framework for 2026.
-
Ransomware Response: A UK CISO’s 72-Hour Reporting Checklist
New UK rules give CISOs just 24 hours to notify regulators after a ransomware attack. Here is the 72-hour incident response checklist to prepare now.
-
How UK CISOs Should Prepare for the Cyber Assessment Framework
How UK CISOs should prepare for the NCSC’s Cyber Assessment Framework before the Cyber Security and Resilience Bill makes it statutory in 2026.
-
Is Your Audit Committee Ready for DORA Oversight in 2026?
How should UK audit committees oversee DORA compliance in 2026? Board-level ICT risk oversight now demands independent assurance, not just a CISO report.
-
Is Your Cyber Insurance Ready for the UK Ransomware Ban?
UK CISOs must reassess cyber insurance cover now as the ransomware payment ban reshapes claims, underwriting and incident response for 2026.
-
Cyber Essentials Plus 2026: A CISO Checklist for the New Rules
Cyber Essentials Plus 2026 changes MFA, password and patch rules from April — here is the practical checklist UK CISOs need before recertifying.
-
Cyber Resilience Testing: What UK CISOs Must Prove in 2026
Proving cyber resilience, not just compliance, is now the CISO test for 2026 — see what UK security leaders must demonstrate through incident testing.
-
CISO Burnout: What UK CISOs Must Fix to Protect Resilience
CISO burnout is now threatening cyber resilience across UK firms—here is what CISOs and boards must fix now to protect people and operations.
