https://epitechnic.com/briefings Practical briefings on cyber risk, governance, resilience and regulation for the people accountable for them. en-gb Thu, 22 Oct 2026 09:00:00 GMT https://epitechnic.com/logo.png https://epitechnic.com/briefings https://epitechnic.com/briefings/php2shell-vulnerabilities-what-boards-need-management-to-confirm https://epitechnic.com/briefings/php2shell-vulnerabilities-what-boards-need-management-to-confirm Thu, 22 Oct 2026 09:00:00 GMT Paul Walker Resilience Supply Chain Two critical flaws in PHP, the language behind a large share of the web, can let an attacker take control of a web server with a single request. This article explains the risk in business terms, what the NCSC advises and what boards should ask management this week. https://epitechnic.com/briefings/cyber-security-and-resilience-bill-penalty-regime https://epitechnic.com/briefings/cyber-security-and-resilience-bill-penalty-regime Wed, 21 Oct 2026 09:00:00 GMT Paul Walker Regulation Resilience The Bill would give UK cyber regulators turnover-based fines of up to £17 million or 4% of worldwide turnover. This article explains what is changing, who comes into scope and what boards should ask management now. https://epitechnic.com/briefings/follow-the-chain-who-really-keeps-your-services-running https://epitechnic.com/briefings/follow-the-chain-who-really-keeps-your-services-running Tue, 20 Oct 2026 09:00:00 GMT Dom Reid Supply Chain Resilience Today's Google Cloud outage reached banks, courts and parcel deliveries several links away from a power event in London. Mapping the chain behind each critical service, and rehearsing the loss of a link, gives leadership the evidence that resilience and supply chain obligations ask for. https://epitechnic.com/briefings/ai-risk-in-business-terms-what-the-board-needs-to-understand https://epitechnic.com/briefings/ai-risk-in-business-terms-what-the-board-needs-to-understand Sun, 04 Oct 2026 09:00:00 GMT Marcin Pajdzik AI Governance AI failures can interrupt services, cause financial loss, expose confidential information or harm customers and employees. Leadership can examine the risk through what AI produces, what it can access or change and what it depends on, within an appetite the board approves. https://epitechnic.com/briefings/limiting-the-damage-zero-trust-lessons-from-three-uk-breaches https://epitechnic.com/briefings/limiting-the-damage-zero-trust-lessons-from-three-uk-breaches Wed, 23 Sep 2026 09:00:00 GMT Dom Reid Zero Trust Recent UK breaches show that a breach is rarely the expensive part. The cost comes from how far attackers can reach once inside and how long recovery takes, which is what a sequenced Zero Trust programme is built to limit. https://epitechnic.com/briefings/ransomware-and-the-board-preparing-defensible-decisions https://epitechnic.com/briefings/ransomware-and-the-board-preparing-defensible-decisions Wed, 05 Aug 2026 09:00:00 GMT Paul Walker Resilience Regulation Ransomware can force decisions on shutdown, engagement and payment within hours. This article explains what the evidence shows, what regulation expects of leadership, and how boards can prepare those decisions and the investment behind them in advance. https://epitechnic.com/briefings/scaling-ai-safely-what-leadership-should-expect https://epitechnic.com/briefings/scaling-ai-safely-what-leadership-should-expect Tue, 30 Jun 2026 09:00:00 GMT Marcin Pajdzik AI Governance Regulation A shared capability for assessing, delivering and operating AI under common governance helps leadership fund the use cases that deliver value, see what AI is doing in the business and keep people in control where it matters. https://epitechnic.com/briefings/why-zero-trust-programmes-stall https://epitechnic.com/briefings/why-zero-trust-programmes-stall Wed, 10 Jun 2026 09:00:00 GMT Joseph Caxton Zero Trust Cloud Security A Zero Trust programme can stall, or deliver new tools without reducing risk, when it starts from technology, skips discovery or ignores systems that cannot adopt the model. This article explains what a risk-led approach requires and the questions leadership should put to management. https://epitechnic.com/briefings/cyber-resilience-preparing-to-recover-from-disruption https://epitechnic.com/briefings/cyber-resilience-preparing-to-recover-from-disruption Wed, 15 Apr 2026 09:00:00 GMT Paul Walker Resilience UK and EU regulation now expects organisations to plan for severe but plausible disruption and show they can recover within defined limits. This article explains how boards can apply that approach to cyber risk, including suppliers and cloud services, and what to ask management. https://epitechnic.com/briefings/answering-the-nis2-scope-question https://epitechnic.com/briefings/answering-the-nis2-scope-question Fri, 20 Mar 2026 09:00:00 GMT Marcin Pajdzik NIS2 Regulation A five-day NIS2 Readiness Diagnostic establishes a provisional scope position, assesses governance readiness and identifies priority gaps, giving the management body an evidenced basis for programme decisions. https://epitechnic.com/briefings/zero-trust-starts-with-discovery https://epitechnic.com/briefings/zero-trust-starts-with-discovery Wed, 14 Jan 2026 09:00:00 GMT Marcin Pajdzik Zero Trust Discovery establishes the organisation's Zero Trust maturity and identifies where change will reduce business risk, giving leadership a basis for priorities, ownership and investment. https://epitechnic.com/briefings/software-supply-chain-risk-what-the-board-needs-to-oversee https://epitechnic.com/briefings/software-supply-chain-risk-what-the-board-needs-to-oversee Sat, 25 Oct 2025 09:00:00 GMT Marcin Pajdzik Supply Chain Resilience Business services depend on software built, updated and operated by others. Overseeing that dependency means clear ownership, assurance over suppliers and the ability to recover when a supplier fails. https://epitechnic.com/briefings/supply-chain-cyber-risk-jaguar-land-rover-shutdown https://epitechnic.com/briefings/supply-chain-cyber-risk-jaguar-land-rover-shutdown Wed, 24 Sep 2025 09:00:00 GMT Paul Walker Supply Chain Resilience The cyber incident at Jaguar Land Rover has halted production for more than three weeks and put pressure on hundreds of suppliers. This article sets out what is on the public record and what boards should expect management to do about supply chain cyber risk. https://epitechnic.com/briefings/recovering-from-a-cyber-attack-lessons-from-knp-logistics https://epitechnic.com/briefings/recovering-from-a-cyber-attack-lessons-from-knp-logistics Mon, 28 Jul 2025 09:00:00 GMT Paul Walker Resilience A 158-year-old UK transport company went into administration after a ransomware attack reportedly began with a guessed password. This article sets out the public record and what boards should expect management to do about access security and recovery. https://epitechnic.com/briefings/cloud-incident-detection-what-boards-should-ask https://epitechnic.com/briefings/cloud-incident-detection-what-boards-should-ask Thu, 12 Jun 2025 09:00:00 GMT Paul Walker Cloud Security Resilience A new industry survey suggests few organisations detect cloud security incidents quickly. This article explains why detection and response time matter to the business, where responsibility sits in the cloud, and what boards should expect from management. https://epitechnic.com/briefings/secure-software-development-what-boards-should-expect https://epitechnic.com/briefings/secure-software-development-what-boards-should-expect Wed, 28 May 2025 09:00:00 GMT Paul Walker Cloud Security Regulation Security leaders are planning more investment in cloud security and support building security into software development. This article explains what that means in business terms, the UK and EU rules now shaping it, and the questions boards can ask about the software their organisation builds and buys. https://epitechnic.com/briefings/zero-trust-security-on-the-cloud https://epitechnic.com/briefings/zero-trust-security-on-the-cloud Sun, 11 May 2025 09:00:00 GMT Marcin Pajdzik Zero Trust Cloud Security Cloud platforms provide many of the capabilities a Zero Trust strategy needs. Business priorities, access policy and continuing governance determine how well they are used. https://epitechnic.com/briefings/ai-security-what-the-board-needs-to-oversee https://epitechnic.com/briefings/ai-security-what-the-board-needs-to-oversee Wed, 19 Feb 2025 09:00:00 GMT Joseph Caxton AI Governance AI systems can be manipulated through their inputs, corrupted through their data and made to reveal information users should not see. This article explains those risks, the standards that help manage them and what the board should require of management. https://epitechnic.com/briefings/cloud-growth-needs-a-governed-foundation https://epitechnic.com/briefings/cloud-growth-needs-a-governed-foundation Mon, 02 Dec 2024 09:00:00 GMT Marcin Pajdzik Cloud Security Resilience A landing zone is a shared foundation that sets rules for who can access cloud services, how activity is monitored, how environments connect and who owns the costs. It helps the organisation maintain visibility, control and recoverability as the estate grows.