Author

Tom Miller

Head of Assurance

Secure on Paper: Why Certifications Don’t Equal Security

The gap between having certifications and policies and actually being secure is where most breaches happen. Here's what our Head of Assurance learned by working with organisations that looked secure on paper - but weren't.

Why GRC Fails – and What a Framework That Actually Works Looks Like

Most GRC programs fail not because the framework is wrong, but because it's built to satisfy auditors, not protect businesses. Here's what that costs you – and how to do it differently.
Dark red storm scene with a building silhouette and lightning, overlaid with terminal code text, representing the threat landscape in GRC and cybersecurity risk management

What Is GRC? Governance, Risk, and Compliance Explained

GRC connects governance, risk, and compliance into a single decision-making system. Here's what each pillar means, how they interact, and how businesses apply them in practice.

Cyber Security Model v4: How MOD Suppliers Can Prepare for Stricter Cyber Rules

Learn how MOD suppliers can prepare for CSMv4 with support from a DCC Level 1 certified company.