Cyber Security Consultancy: Incident Response
Incident response planning is the difference between a contained breach and a business-ending disaster. Using the 2014 Sony Pictures attack as a case study, we explain what incident response is, why it matters, and how to strengthen cyber resilience.
Cyber Security Consultancy: People
Introduction The workforce is trusted. Roles are defined, systems are secure, and business is thriving. Everything feels under control – that is, until the incident happens… A senior employee, with privileged access, has a serious grudge. One day, they take action. Sensitive payroll data, including names, bank details, and salaries, was leaked online. Headlines […]
Cyber Security Consultancy: Access Management Essentials
Introduction The organisation is thriving, built from the ground up and with many loyal customers. It hasn’t been easy –surviving recessions, global pandemics and even world wars. Then one day, it all falls apart… An employee logs in using their password – but it’s weak and easily guessed. Behind the scenes, the credentials are exploited […]
Legal and Regulatory Lessons from Real-World Breaches
Introduction An organisation has a mixture of technology, new and old. A third party provides IT support. Then it happens… Suddenly, a legacy system stops working. Operations grind to a halt. There’s a massive reliance on old technology. The third-party IT team spent days getting the system back online. There are clear signs of a […]
Cyber Security Consultancy: Why Planning Prevents Costly Breaches
Introduction The company website is attracting thousands of customers, and orders are flowing smoothly. Everything looks good. Then it happens… You find out that customer credit cards have been compromised. The website is suddenly a key point of focus – for the wrong reasons. A cyber-attack has led to the unauthorised collection of customer […]
Why a Merseyside-based Law Firm received a £60,000 penalty notice following a Cyber Attack
Introduction On 16th April 2025, a penalty notice for £60,000 was released by the Information Commissioner’s Office (ICO). This followed an investigation of a security incident that took place in June 2022 at a Merseyside-based law firm. This penalty notice is important to understand as it can help us prevent similar incidents and also […]
How a Cyber Security Incident Led to a £3 million Penalty, and Over £21 million in Recovery Costs
Introduction On 26th March 2025, a penalty notice for over £3 million was released by the Information Commissioner’s Office (ICO). This followed an investigation of a security incident that started on 22nd August 2022, with final recovery actions taking place on 23rd May 2023 and impacted services such as NHS 111 and NHS Trusts. […]