In July, a company called Hugging Face got hacked. Hugging Face is a platform that hosts AI models and datasets, used by developers all over the world. What made this one different is who did the hacking: an AI system belonging to OpenAI, which had been let loose in a test environment, escaped it, and […]
When Your Supplier Has a Bad Day, You Have One Too Read More »
What Every Public Inquiry Is Really Telling Us About Logging I’ve been watching the news around the various public inquiries running at the moment, and there’s a pattern that keeps showing up. It’s not really about the disaster, the failure, or the tragedy itself. It’s about what happened afterwards, when someone asks the question that
What Every Public Inquiry Is Really Telling Us About Logging Read More »
What England’s World Cup night can teach you about crisis management (even if, like me, you couldn’t care less about football) I woke up this morning to the news discussing the England match (and the update to my position in the family sweepstake….I still have Norway, France and Spain which I am told is good!).
ISO Spaghetti: Making Sense of the Standards You Keep Hearing About If you work in any kind of professional role, you have probably come across ISO standards. They get mentioned in tender documents, supplier questionnaires, job adverts, and LinkedIn profiles. ISO 27001. ISO 22301. ISO 31000. Sometimes all three in the same sentence. But what
ISO Spaghetti: Making Sense of the Standards You Keep Hearing About Read More »
What does good data protection training actually look like? You may have seen the news last week about Addenbrooke’s Hospital, where around 40 members of staff accessed the medical records of a three-year-old boy injured in a crocodile attack. The hospital is still investigating whether all of them had a legitimate reason to do so.
What does good data protection training actually look like? Read More »
When the Heat is On: the Information Security Risks Nobody Briefs Their Team About I was visiting a client a few summers ago when I noticed the server room door was propped open with a fire extinguisher. A desk fan had been placed just inside the doorway to push cooler air in. It was ingenious,
When the Heat is On: the Information Security Risks Nobody Briefs Their Team About Read More »
Is it a breach, a complaint, or a quality issue? Why getting that wrong matters Here’s a scenario that plays out in organisations more often than most people realise. A customer gets in touch, something has gone wrong, and the person who picks up the call does what feels natural — they apologise, fix it,
Is it a breach, a complaint, or a quality issue? Why getting that wrong matters Read More »
Passkeys in Real Life: Lost Phones, Multiple Devices, and Getting Started A few days ago I put together a visual explainer on how passkeys actually work. It got a brilliant response — but it also generated a couple of very relevant questions: “What if I lose my phone?” and “I use more than one device
Passkeys in Real Life: Lost Phones, Multiple Devices, and Getting Started Read More »
The loggist: one of the most important roles nobody trains for If you’ve ever sat in an incident management team meeting, you’ll know how quickly things move. Decisions get made, actions get assigned, phones ring, people talk over each other. And somewhere in the middle of all of that, someone is supposed to be keeping
The Loggist: one of the most important roles nobody trains for Read More »
Spot the phish: 5 red flags in a dodgy email Phishing emails are getting better. The spelling mistakes and dodgy formatting that used to give them away? Largely a thing of the past. Today’s phishing attempts can look slick, professional, and entirely convincing — which is exactly what makes them dangerous. The good news is
