Identity & Access Governance: Closing Unmonitored Digital Doors Across Corporate Systems...
Who Owns That Account? We Checked Our Own Estate First
read more
Risk Management
Is Anything You Don’t Use Still Switched On?
Every port, protocol and feature left running has to be patched, monitored and defended. Here is the one question to ask your IT provider, what to switch off on a firewall, and the one exception we keep on purpose.
Passing Cyber Essentials Plus: What the Audit Involves
Cyber Essentials Plus isn’t a longer questionnaire; it’s an auditor checking that your controls are real. Here is what our independent audit tested, how long preparation took, and what a small UK business should expect to spend.
Finding the Vulnerability Was Never the Hard Part
Detection was never where the time went. Geordie Hogarth explains how Si Futures turned vulnerability management from hours of client-by-client navigation into a single fleet-wide board, and why the question to ask your provider is not “do you scan?” but “show me what you decided, and when.”
Ask Your Landlord This Before You Sign the Lease
wo connections only protect you if they reach your premises by different routes, and the building can decide some of that for you. Charles Cannon explains why one question to the landlord before you sign the lease can save you from a backup line that shares a cable with your main one.
Why We’re Moving Clients Off SSL VPN Before They’re Forced To
Fortinet has removed SSL VPN tunnel mode from FortiOS 7.6.3, and an unplanned upgrade can leave remote staff without a connection. Jacques van der Merwe explains why Si Futures is migrating clients to IPsec VPN roughly a year ahead, how running both side by side protects users, and what to check before you upgrade.
What Your Contract Doesn’t Tell You About Your Data
Most businesses only think about their contracts when something goes wrong. Geordie Hogarth on why UK data transfer compliance and GDPR compliance for UK SMEs belong in every agreement.
What Cyber Essentials Taught Us About Security Discipline
A Sunday-night assessor query forced a full resubmission of our Cyber Essentials certification. This piece looks at why rebuilding the evidence properly, rather than patching it, was the only real option.
What To Do When Your Email Account Is Compromised
A quiet email account compromise can run for weeks before anyone notices. This piece walks through the practical, ordered steps that limit damage and stop attackers finding a second way back in.