Field notes from running and securing the IT around production. No vendor hype — just the thinking that determines whether technology actually works for a business over time.
ThinkingPrivacy malfunction where you least expect it.
Read the piece →
ThinkingMost of what has been written about NIS2 reporting, including some of what we published in this series' early days, treats 24 hours as the whole story. It is a third of it. Here is the full clock, and the uncomfortable assumption ticking underneath it.
ThinkingScope has rules: establishment, sector and size. The honest test for whether Europe's cybersecurity directive reaches your business, directly or through your customers.
ThinkingYou are not responsible for a supplier's compliance. You are responsible for having managed the risk of relying on them. Where the line actually sits.
ThinkingThe demand will come from your biggest customer before it comes from any regulator. Here is what their questionnaire will find.
ThinkingThe wand is real. The demos work. But between owning a wand and knowing how to make one sits all the work nobody talks about: the factory behind the magic.
ThinkingYour office and your factory grew onto one network nobody designed — and the question is now arriving from outside, in writing. Fixing it starts with seeing, not changing.
ThinkingSame scales, same data. Change how you record it and everything changes.
FounderA hack, pots of paint, green dots on a whiteboard. Why understanding comes before tech.
FounderA business that sold for hundreds of millions of pounds. The part of the story nobody talks about, and why IT was the first thing they invested in, before finance, before HR, before everything else.
Field StoriesThe gap between your office systems and your production systems is where downtime hides.
ThinkingMost businesses try to automate too early. The problem isn't ambition, it's sequence.
ThinkingThe difference between security that looks right and security that actually works.
GuidesThe invisible system that controls where your emails are delivered, whether your website loads, and how the outside world finds you online — and most businesses have no idea who manages it.
GuidesA piece of legislation moving through Parliament — the Cyber Security and Resilience Bill — will change how businesses think about IT security, and most business owners have never heard of it.
Thirty minutes on the alignment between your strategy and your technology. Not a sales pitch.