No articles in this category yet. Check back soon.
Preparing a sports technology provider for larger clients
How technical testing and a security plan helped a sports technology provider prepare for larger clients and their security requirements.
Read case studyGiving leaders a clearer view of cyber risk
How a CAF assessment, technical assurance and incident exercises gave leaders of an organisation with a public function a clearer view of its cyber position.
Read case studyFinding the vulnerabilities the reports missed
How a review uncovered gaps in asset coverage, clarified who owned remediation and gave leaders a more accurate view of vulnerability risk.
Read case studyMaking cyber risk visible to the board
How CISO leadership gave a public sector organisation clearer cyber risk reporting, funded improvements and stronger board oversight.
Read case studySecurity assurance on major transformation programmes: where it usually goes wrong
Why security assurance often reaches major programmes too late, and how to connect evidence, suppliers and risk decisions to the delivery plan.
Read articleWhen should a prime contractor use a specialist cyber SME?
A practical guide to using specialist cyber SMEs for surge capacity, cleared delivery, bid support and ownership of defined security workstreams.
Read articleBuilding a security function when you do not need a permanent CISO team
How to give security clear ownership, regular decisions and specialist support when a permanent CISO team would be too much for the work required.
Read articleWuluf becomes a Bloom Accredited Supplier
Wuluf is now a Bloom Accredited Supplier, giving public sector organisations an established route to engage us for cyber security and related professional services.
Read articleThe problem with cyber assurance becoming a paperwork exercise
The problem is not that cyber assurance creates paperwork. It is that paperwork can create the appearance of assurance without changing a single decision.
Read articleSecure by Design in UK Government: what good actually looks like in delivery
Secure by Design becomes an operating model when leaders sponsor it, delivery teams expect it and security is part of everyday decisions, not when new templates are applied to old delivery behaviours.
Read articleWhy hiring a Cyber Security Manager will not fix programme security
A named security lead gives a programme a focal point. It does not, on its own, create accountability, authority or a functioning operating model.
Read articleWhat is a DNS lookup? A guide to A, MX, TXT, CNAME and NS records
DNS is more than the internet's phone book. Here's what each record type actually reveals, the mistakes that commonly hide inside them, and how to interpret a lookup result safely.
Read articleSPF vs DKIM vs DMARC: what does each one protect?
Three email-authentication controls, three different jobs. Here's exactly what each one checks, where each falls short on its own, and why organisations need all three.
Read articleHow to check SPF and DMARC records, and fix common problems
Most companies treat a passing SPF or DMARC check as job done. Here's what the records actually test, the mistakes that leave domains open to impersonation, and how to fix them properly.
Read article