UK Cyber Security and Resilience Bill: What CISOs Must Build Now
The UK Cyber Security and Resilience Bill expands NIS to MSPs and data centres, with 24-hour reporting and £17m penalties. Your CISO action plan.
-
-
Deepfake Executive Fraud: The UK CISO’s Action Plan for 2026
UK CISOs face a Tier 1 NCSC threat: deepfake executive fraud causing seven-figure losses. This action plan covers technical controls, staff training and regulatory obligations for 2026.
-
UK Incident Reporting Rules: What UK CISOs Must Build by 2027
FCA and PRA rules require UK financial firms to report operational incidents and third-party dependencies from March 2027 — here is the CISO action plan.
-
UK Ransomware Payment Ban: What UK CISOs Must Do Before the Law Changes
The UK government has confirmed a ransomware payment ban for public sector and CNI, plus mandatory reporting for all. Here’s the CISO action plan.
-
Identity Attacks in the AI Age: What UK CISOs Must Do Now
AI-powered identity attacks are the UK CISO’s most urgent threat vector in 2026 — adversaries now exploit legitimate credentials rather than breach perimeters, making zero trust essential.
-
NIS2 in 2026: What UK CISOs with EU Operations Must Now Demonstrate
NIS2 enforcement is now active in the EU, directly affecting UK businesses with EU operations. Here is the UK CISO compliance action plan for 2026 — scope, controls, notification and fines.
-
DORA Compliance 2026: What UK Financial Services CISOs Must Own Now
DORA entered enforcement maturity in 2026 — regulators are now actively assessing ICT resilience. Here’s what UK financial services CISOs must own to stay compliant.
-
Operational Resilience 2026: What UK Boards Must Prove to Regulators Now
FCA and PRA have shifted from compliance checks to active scrutiny. UK boards must now prove operational resilience with evidence, not just frameworks.
-
FCA Operational Incident Rules: What UK Boards Must Do Now
FCA PS26/2 introduces mandatory operational incident and third-party reporting rules from March 2027. Here’s what UK boards and senior executives must action now.
-
UK Cyber Resilience Pledge: What Every Board Must Do Now
The UK Cyber Resilience Pledge makes cybersecurity a formal board obligation for FTSE 350 firms. Here’s what senior executives must act on before summer 2026.
