Insights & research
Clear thinking for
complex risk.
Opinion, research and practical guidance on cyber resilience, identity, cloud security and governance.
Opinion · 14 August 2026
Dealing with Insider Risk
Organisations spend heavily defending against external threats, but some of their greatest risks may already be inside. Insider threats are not always malicious employees. They can emerge from excessive privileges, weak processes, poor segregation of duties, human error, or a culture where internal risk is overlooked. Effective cybersecurity therefore goes beyond building stronger walls. It requires organisations to protect the trust they place in their people, processes and access—and ensure that trust cannot be easily exploited.
Research · 18 November 2024
Managing Security Risks of Public Cloud Computing
Cloud risk is manageable when organisations own their responsibilities, close knowledge gaps and apply established control frameworks.
Originally published externallyOpinion · 25 April 2024
Enemy Within: Insider Fraud and the Battle for Corporate Security
Insider fraud demands a layered response spanning human factors, identity governance, process design and technical control.
Originally published externally