Insights

Practical thinking for security leaders and architects

Short, practitioner-written articles on cybersecurity strategy, operating and governance models, security architecture, investment cases, assurance and the deadlines that keep a security function honest.

Cybersecurity Strategy

How to Build a Cybersecurity Strategy a Board Will Approve

A practical five-phase method for a cybersecurity strategy: context, assessment, analysis, formulation and a costed roadmap your board will approve.

Read · 3 minCybersecurity Operating Model

Designing a Cybersecurity Operating Model: Services, Sourcing and Sizing

What a cybersecurity target operating model is, its seven components, and how to design services, sourcing, sizing and funding that hold together.

Read · 3 minCybersecurity Governance Model

Building a Cybersecurity Governance Model Anchored to ISO/IEC 27014

Design cybersecurity governance that decides: consolidated requirements, decision rights, RACI, policies and measures, aligned to ISO/IEC 27014.

Read · 3 minSABSA Unlocked

The SABSA Business Attributes Profile, in Practice

How security architects build a SABSA-style business attributes profile: from business drivers to measurable attributes and control objectives.

Read · 3 minTRACE Framework

Justifying Security Spend: Trace Every Line Back to a Business Driver

Why security budgets get trimmed, and how tracing each line from business driver to risk, initiative and outcome makes the case defensible.

Read · 3 minNorthX

One Assessment, Many Frameworks: Harmonising Cyber and Regulatory Assurance

Assess ISO 27001, NIST CSF and regional regulations at once: harmonise into one control set, score maturity and risk, build a prioritised roadmap.

Read · 3 minDueline

Never Miss a Compliance Deadline: Managing Recurring Security Obligations

How security teams track recurring obligations — access reviews, audits, certificate renewals, policy reviews, DR tests — with owners and reminders.

Read · 3 minPULSE Framework

Bid and Presales Governance: Decision Gates from Lead to Delivery

Govern presales, bids and contracts with decision gates: lead readiness, go/no-go, solution baseline, commitment, contract and delivery handover.

Read · 3 min