Cyber Insurance Is Pricing Assurance - Not Controls

Simon Sharp

Cyber insurance has changed.

What Regulators Mean by “Ongoing” Cyber Assurance

Simon Sharp

Regulators rarely define requirements in technical terms. Instead, they use words like reasonable,...

From “Are We Secure?” to “Can We Prove It?”

Simon Sharp

“Are we secure?” is the wrong question.

What “Good” Cyber Governance Actually Looks Like in 2025 (And How Regulators Will Test It)

Simon Sharp

Why Traditional vCISO Models Still Leave Boards Exposed

Simon Sharp

Cyber Insurance Is Now a Governance Audit in Disguise

Simon Sharp

Cyber insurance is no longer a safety net.

DORA: Why Cyber Risk Is Now a Financial and Operational Stability Issue

Simon Sharp

The EU’s Digital Operational Resilience Act (DORA) marks a fundamental shift in how cyber risk is...

Why ISO 27001 Alone No Longer Delivers Regulatory or Board Assurance

Simon Sharp

Cyber Risk Has Formally Entered the Boardroom - The Regulatory Evidence Is Now Overwhelming

Simon Sharp

UK Cyber Incident Reporting Is About to Get Much Tougher – What Boards Need to Know Now

Simon Sharp

For years, cyber incident reporting in the UK has been fragmented, reactive, and often...