Ransomware Response: A UK CISO’s 72-Hour Reporting Checklist
New UK rules give CISOs just 24 hours to notify regulators after a ransomware attack. Here is the 72-hour incident response checklist to prepare now.
-
-
APP Fraud Reimbursement: A UK CFO’s 2026 Action Checklist
APP fraud reimbursement rules now shift real liability onto UK businesses — here’s what CFOs must verify before the 2026/27 PSR review lands.
-
How UK CIOs Should Fix Data Governance Before Scaling AI
How should UK CIOs fix data governance before scaling AI? A practical 2026 framework for data quality, ownership, lineage and accountability.
-
How UK CISOs Should Prepare for the Cyber Assessment Framework
How UK CISOs should prepare for the NCSC’s Cyber Assessment Framework before the Cyber Security and Resilience Bill makes it statutory in 2026.
-
How UK CEOs Should Turn Industrial Strategy Into Company Strategy
How UK CEOs should align corporate strategy with the Modern Industrial Strategy — IS-8 sectors, £79bn in investment, and new board expectations for 2026.
-
Is Your Audit Committee Ready for DORA Oversight in 2026?
How should UK audit committees oversee DORA compliance in 2026? Board-level ICT risk oversight now demands independent assurance, not just a CISO report.
-
Post-Quantum Cryptography: A UK CIO Migration Checklist
How should UK CIOs prepare for post-quantum cryptography migration? NCSC sets 2028 discovery and 2035 deadlines — here is the CIO checklist.
-
Is Your Cyber Insurance Ready for the UK Ransomware Ban?
UK CISOs must reassess cyber insurance cover now as the ransomware payment ban reshapes claims, underwriting and incident response for 2026.
-
Is Your Board Ready for an Activist Investor Campaign in 2026?
How should UK boards prepare for activist investor campaigns as UK-targeted shareholder activism hits a multi-year high in 2026, up 30% year on year?
-
Cyber Governance Code of Practice: A Board Checklist for 2026
The Cyber Governance Code of Practice sets five duties every UK board must now embed — here’s what directors need to check before the next risk report.
