Knowledge base

Updated: 4 August 2026 What does GDPR require from cybersecurity? Article 32 of GDPR requires controllers and processors to implement “appropriate technical and organisational measures” to protect personal data – including encryption, resilience, the ability to restore availability quickly after an incident, and a process for regularly testing and evaluating the effectiveness of those measures. […]

Read more →

Updated: 21 July 2026 What is the NIS2 Directive and who does it cover? NIS2 (Directive (EU) 2022/2555) entered into force on 16 Jan 2023 and required Member States to transpose it by 17 Oct 2024. It is the EU’s baseline cybersecurity framework for organisations operating in 18 critical sectors – far broader than the […]

Read more →

Updated: 6 July 2026 What are AI-enhanced attacks and how do they differ from traditional threats? AI-enhanced attacks are cyberattacks in which artificial intelligence helps attackers accelerate, scale, or improve traditional methods such as phishing, social engineering, reconnaissance, or vulnerability exploitation. The key difference is that AI removes historical barriers for attackers: time, cost, language […]

Read more →

Updated: 23 June 2026 What is an AI usage policy? An AI usage policy is an operational document setting out who in an organisation may use artificial intelligence tools, what data they are allowed to put into those tools, and who is accountable for oversight. Every organisation whose staff use generative AI on company or […]

Read more →

What is modern phishing in 2026? Modern phishing is no longer defined by obvious errors – poor grammar, generic attachments, or suspicious sender addresses. It is defined by believable business context, compressed attacker preparation time, and process manipulation that targets money, identity, or approvals. According to Verizon DBIR 2024, the human element was present in […]

Read more →

What is a ransomware response playbook? It is a pre-documented sequence of decisions and actions – covering containment, authority, communications, and regulatory notification – that an organisation executes in the hours immediately following a ransomware detection. Sophos reports that average recovery costs from ransomware in 2024, excluding the ransom itself, reached USD 2.73 million, while […]

Read more →

What is Business Continuity Management (BCM) in the context of cybersecurity? BCM is the discipline of keeping critical operations running during disruption – not merely of restoring IT systems. A Business Impact Analysis (BIA) identifies which processes matter most, how long they can be down, and what dependencies they rely on. Recovery Time Objective (RTO) […]

Read more →

Updated: 27 March 2026 What do recent high-profile cybersecurity breaches have in common? In most major incidents, the decisive failure was not exotic malware. It was an ordinary weakness left unchallenged long enough to become strategic: a helpdesk identity check that did not exist, a trusted file-transfer tool that became a systemic supplier risk, a […]

Read more →

Updated: 4 July 2026 What is IT security testing? IT security testing is the set of structured activities that verify whether an organisation’s systems, networks, and applications are resilient against real-world attacks. Methods differ in approach, depth, and the questions they answer: a vulnerability scan asks “what is vulnerable?”, a penetration test asks “what can […]

Read more →

Updated: 25 May 2026 What is Atlassian’s “data contribution”? Data contribution is Atlassian’s term for the default-on policy, effective 17 Aug 2026, of collecting metadata and in-app data from Jira, Confluence, Jira Service Management and other cloud products in order to train its AI models (including Rovo and Rovo Dev). The policy affects roughly 300,000 […]

Read more →

What does a data breach cost in 2026? IBM’s Cost of a Data Breach Report 2025 put the global average total cost at USD 4.88 million – up 10% from USD 4.45 million in 2023 and the largest single-year increase since the pandemic. That headline figure is not the most useful number for a board. […]

Read more →

Updated: 22 April 2026 What is an AI-assisted cyberattack? An AI-assisted cyberattack is an offensive operation in which a threat actor uses commercial or custom-built AI platforms – such as large language models – as primary operational tools to perform reconnaissance, write exploits, escalate privileges, exfiltrate data, and automate lateral movement across victim infrastructure. The […]

Read more →