Cyber Heard

A mining CIO explains why remote sites with failing satellite links, local suppliers with no digital culture, and PLCs that can't be patched make textbook cyber resilience models fall apart, and what actually works instead.

A frontline SOC analyst explains how triage, documentation and AI actually play out day to day, and why a Cyber Essentials pass does not always mean a genuinely safer business.

A cyber security manager explains why staff quietly misuse workplace AI tools, why an ISO certificate does not prove an organisation is actually secure, and why boards care less about a single risk score than about ranges of financial and operational impact.

A practical look at running security, privacy and AI governance as a single discipline inside a fast-growing SaaS handling sensitive financial data, including where internal AI use quietly leaks data and how to tell a control engineers actually follow from one that just looks good on paper.

A CTO working across energy storage and industrial IoT explains how OT and security engineers can find common ground, why machine identity at device scale demands automation, and what it really takes to keep an always-on energy platform resilient when cloud providers fail and AI reshapes how code gets written.

A founding security engineer explains why detection as code, outcome-based scoping for AI agents and using AI to review AI-generated code matter more than chasing theoretical perfection, and why human frustration with controls is still the risk nobody wants to name.

A look inside the unusually relaxed security culture of maritime technology, from captains overriding IT policy to crew data crossing multiple stakeholders on patchy satellite links, plus a candid breakdown of how AI is changing code review without removing human safeguards.

A CTO working on post-quantum encryption explains why harvest now decrypt later is already a live threat, how crypto agility can be achieved without rebuilding systems from scratch, and what years in identity and bank risk oversight taught him about boards, zero trust and AI-generated code.

An IT manager explains why in-house support teams get starved of budget and attention, the real difference between outsourced and in-house service desks, and what day-to-day identity management, vendor reviews and compliance certifications actually look like on the ground.

A GRC leader at a fast-growing, multi-sector group explains how to set a baseline controls programme that subsidiaries can layer on top of, why cutting third-party review times means questioning what you actually ask vendors, and why he resists dressing up risk figures with more precision than they deserve.