Oct 5, 2022STS (Securing the Simple)Elias Ennebt So you just found out that your details have been breached, you’re hurt and furious. “How could this happen?” “Were they being cheap? Do they not care about me and my data?” The reality is that computers and the systems we rely on are extremely complex and fragile…2 min read2 min read
Apr 10, 2022What happens when PII is left on an MFD?Naima Hassen Staff are generally expected to use company equipment such as scanners, printers and even fax machines for exclusively work-related activities; however, that might not always be the case. I’ve been guilty of using staff equipment for personal reasons such as scanning government documents or printing out things for…2 min read2 min read
Jan 28, 2022Do you advertise or not advertise your clients in cybersecurity?Edward Farrell Earlier this year we had a bit of an interesting predicament; A client had advertised that they’d used our services as a demonstration of their cyber security requirements. Whilst I am humbled by their gratitude towards our services, openly advertising our clients is not something we do. …Cybersecurity2 min readCybersecurity2 min read
Nov 21, 2021Insights: why threat model?Edward Farrell Cybersecurity fundamentally boils down to one thing- the protection of systems (weather they are physical, digital or social) from loss, disclosure, disruption, theft, unauthorised access, modification and a raft of other concerns that impact organisations or our environments at large. …Cybersecurity2 min readCybersecurity2 min read
Nov 18, 2021For the Lulz: The risk of free domains (or why your old DNS provider needs to keep stuff registered)Edward Farrell Our “for the lulz” series focuses on entertaining anecdotes with hopefully a serious lesson at the end. A good friend of mine who owns a small financial services firm called me a few months ago asking for a security assessment (at mates rates of course… everyone in IT…2 min read2 min read
Nov 8, 2021Business Excellence (Part 4): The art of operationalisationEdward Farrell The following “business excellence” series of articles are focused on the day to day operations and non-technical considerations of modern day cyber security practices. …3 min read3 min read
Oct 31, 2021For the Lulz: Getting certified as a dolphin trainer (and why decent certification and qualifications matter)Edward Farrell Our “for the lulz” series focuses on entertaining anecdotes with hopefully a serious lesson at the end. I’ve been entertaining the occasional LinkedIn message from multiple individuals if I wanted to get certified. My response has gone through a number of iterations but thanks to the inspiration of…3 min read3 min read
Oct 24, 2021Insights: Audits are useless, but the act of auditing is invaluableEdward Farrell Late last week I was empathising with a client about the fact they were about to undergo yet another cyber security audit. Lamenting at the constant product generated from this process and ongoing questioning, it had sparked two trains of thought: It’s actual outcome, the production of reports…2 min read2 min read
Oct 5, 2021Business Excellence (Part 3): Roles, skills shortages, intermediaries and disparitiesEdward Farrell Several weeks ago a job advertisement for a role that we’re also on a government panel for came out. A job was advertised with a $130–160K for a salaried role by a company that sounded as a copy-paste of the very role presented. Given our own access to…3 min read3 min read
Sep 29, 2021Business Excellence (Part 2): Selling a cyber security businessEdward Farrell The following “business excellence” series of articles are focused on the day to day operations and non-technical considerations of modern day cyber security practices. …2 min read2 min read
