The Plan You Hope You Never Need

Here is a number that should be on the agenda at your next leadership meeting. 72% of senior managers say cyber security is a top priority for their organisation. Only 29% have a formal incident response plan in place. The two figures come from the UK government’s latest cyber security breach survey. They were mentioned […]
Phishing: The Attack Hidden in Plain Sight

You get an email from HMRC. There is a tax refund waiting – over £700. There is a reference number, a paragraph lifted directly from the HMRC website, and a helpful link to start your claim. You are busy. It looks exactly right. You click. Gordy McDonald demonstrated this scenario in Aviemore. He walked through […]
It Can Happen to You: Ken Ross’s Story

Ken Ross does not have to be here. He is a well-respected business leader in the built environment sector, holds an OBE and a Deputy Lieutenancy, and runs a company with 30 years of client relationships. He could have stayed quiet about what happened in 2022. Most people in his position do. As he said […]
Ransomware: When Your Business Simply Stops

Christmas Eve 2020. Six in the morning. The Scottish Environment Protection Agency discovered its entire system had been encrypted overnight. Every file. Every database. Every communication channel. Gone. SEPA is a Category 1 responder. They issue flood warnings. They protect communities. And they could not access anything. Mark Gallagher was in the Gold Group response […]
The Threat Already Inside Your Organisation

Not every cyber threat comes from outside. Gordy McDonald was careful about how he framed this in Aviemore, because it is a subject that can create the wrong kind of anxiety in a team. The point is not that your people cannot be trusted. The point is that some of your most significant vulnerabilities involve […]