Cybersecurity metrics: how do you measure what never happened?
There is a conversation that repeats every year in budget committees and that almost nobody talks about. The head of technology presents the annual security report. There were no breaches, no outages, no ransom to pay. And someone at the table, with no ill intent, asks the question that undoes it all: if […]
What is third-party risk and why do almost half of attacks come in that way?
Third-party risk is the exposure a company inherits from its suppliers, cloud services and contractors. What it is, how many types there are and how it is managed.
Shadow AI: the artificial intelligence your company already uses (and nobody approved)
20% of breaches already involve shadow AI: the AI your employees use without approval. Why banning it does not work and how to govern it.
Cloud security: how to protect your company when migrating to AWS, Azure or GCP?
For almost any company, the question is no longer whether to migrate to the cloud, but how to do it without opening the door to new risks. As Chief Innovation Officer, I have seen that the greatest danger usually does not lie in the provider's technology, but in a misunderstanding: believing that, by moving everything to AWS, Azure or […]