UK cyber security

The headline cost of a data breach UK figure is real, but it describes a different kind of business than most readers run. Here’s the number that actually matters, and …

A practical checklist for writing a vulnerability disclosure policy: what to include, what UK product security law now requires, and how it differs from a bug bounty programme or a …

Cyber Essentials does not require a penetration test, and CE+ uses vulnerability scanning rather than adversarial testing. A side-by-side guide to what each certification covers, what it misses, and when …

The UK government has introduced a historic UK ransomware ban targeting public sector organisations and critical infrastructure operators. This groundbreaking legislation marks the first comprehensive attempt to disrupt cybercriminal business …