What “Good” Cyber Risk Assurance Looks Like in 2026

Simon Sharp

Good cyber risk assurance is:

Why Boards Need Assurance Dashboards - Not Security Dashboards

Simon Sharp

Security dashboards overwhelm boards.

Cyber Insurance Is Pricing Assurance - Not Controls

Simon Sharp

Cyber insurance has changed.

What Regulators Mean by “Ongoing” Cyber Assurance

Simon Sharp

Regulators rarely define requirements in technical terms. Instead, they use words like reasonable,...

From “Are We Secure?” to “Can We Prove It?”

Simon Sharp

“Are we secure?” is the wrong question.

What “Good” Cyber Governance Actually Looks Like in 2025 (And How Regulators Will Test It)

Simon Sharp

Why Traditional vCISO Models Still Leave Boards Exposed

Simon Sharp

Cyber Insurance Is Now a Governance Audit in Disguise

Simon Sharp

Cyber insurance is no longer a safety net.

DORA: Why Cyber Risk Is Now a Financial and Operational Stability Issue

Simon Sharp

The EU’s Digital Operational Resilience Act (DORA) marks a fundamental shift in how cyber risk is...

Why ISO 27001 Alone No Longer Delivers Regulatory or Board Assurance

Simon Sharp