resilience

Warehouse worker checking stock levels beside wrapped pallets, part of the UK's food supply chain, as storm clouds gather overhead

Stockpile the Tins. Audit the Supply Chain.

On Friday, the government told the country to start putting food aside. Environment Secretary Dame Angela Eagle said the UK is heading into what could be the largest El Niño event since records began in the nineteenth century, with sea temperatures in the Pacific running more than three degrees above average. The practical translation for

Stockpile the Tins. Audit the Supply Chain. Read More »

Close-up of hands adjusting a small brass gear within a larger, intricate clockwork mechanism

A Forgotten Certificate Just Broke Email for Millions. That’s the Real Story.

On Monday evening, Outlook and Exchange Online stopped working. Not for one company, for a meaningful slice of the world. People couldn’t log in. Messages sat unsent. Search returned nothing. IT teams spent hours fielding calls from colleagues who couldn’t do their jobs, because the one tool most of us touch fifty times a day

A Forgotten Certificate Just Broke Email for Millions. That’s the Real Story. Read More »

A darkened open-plan office at night, every desk empty and unlit except a single row still working under lamplight, city skyline visible through the windows.

Minimum Viable Company: What’s Actually New Here?

A term with real momentum, four different definitions, and a decade-old cousin nobody mentions. Ask four different advisers to define “Minimum Viable Company” and you’ll get four different answers, all wearing the same three letters. That’s usually the first sign a term hasn’t earned its place in the vocabulary yet — and it’s worth working

Minimum Viable Company: What’s Actually New Here? Read More »

A server room with glowing status lights in the foreground, viewed through a rain-streaked window at a lightning storm over a city skyline at night

The most predictable risk in resilience planning is also the most ignored one

Look at the last few days. Heathrow spent part of last week warning passengers off the roads after flooding closed access to two terminals. A flood warning is in force for Nelson in Lancashire, with alerts out across Merseyside and the North East, arriving straight after weeks dry enough to count as drought, and yellow

The most predictable risk in resilience planning is also the most ignored one Read More »

An upward trending graph line behind the figure $4.99 million, representing the rising average cost of a data breach.

The Real Cost of a Breach Just Went Up Again — Here’s What the Number Doesn’t Tell You

IBM published its Cost of a Data Breach Report last month, and the headline figure is the one everyone will quote: the global average cost of a breach has hit a record $4.99 million, a 12% increase on last year. In the UK specifically, that average sits at around $4.27 million (£3.13 million). Numbers like

The Real Cost of a Breach Just Went Up Again — Here’s What the Number Doesn’t Tell You Read More »

Venn diagram showing three overlapping types of risk — financial risk (ACA/ACCA), project risk (PMI/APM) and operational risk (ISO 22301) — with their small area of overlap labelled 'Risk: one word, several meanings

Risk means different things to Different People. That’s the whole problem.

I spent a chunk of last weekend scrolling through risk management job vacancies, out of nothing more than professional nosiness (and a need to avoid 24/7 football). It’s not as if the confusion over what “risk” actually means was news to me — I’ve spent the best part of two decades watching it play out

Risk means different things to Different People. That’s the whole problem. Read More »

Aerial view of a stone architectural maze with a clear navy blue path marked through it, representing navigation through complex ISO standards

ISO Spaghetti: Why the Standards Landscape Is Confusing (and What to Do About It)

The five standards worth knowing about ISO Spaghetti: Why the Standards Landscape Is Confusing (and What to Do About It) I have lost count of the number of tender documents I have reviewed that specify ISO 22301 and ISO 27001 and ISO 31000, sometimes with ISO 22361 thrown in for good measure. Occasionally all four

ISO Spaghetti: Why the Standards Landscape Is Confusing (and What to Do About It) Read More »

Aerial view of a large data centre on a flat Dutch landscape, a faint wisp of smoke rising from the building, a ferry visible on the water in the distance

A fire in the Netherlands, a ferry company in chaos, and a BIA that probably didn’t ask the right questions

A fire in the Netherlands, a ferry company in chaos, and a BIA that probably didn’t ask the right questions. The Brittany Ferries booking outage is a textbook case study in third-party dependency risk, inadequate RTOs, and what happens when your recovery plan assumes someone else has already thought about it. On the morning of

A fire in the Netherlands, a ferry company in chaos, and a BIA that probably didn’t ask the right questions Read More »