Clear Path Security
External input cannot be trusted: input validation and encoding strategies
Any data that enters your system from outside a trust boundary should be treated as untrusted until[…]
Implementing Detect and Respond functions in NIST CSF
Implementing Detect and Respond functions in NIST CSF For many UK SMEs, the hardest part of cybersecurity[…]
Achieving centralised visibility across endpoints, identity, and network
Achieving centralised visibility across endpoints, identity, and network For many UK SMEs, the challenge is not a[…]
Zero Trust network access and microsegmentation design for UK SMEs
Zero Trust network access and microsegmentation are often discussed together, but they solve different problems. Zero Trust[…]
What security logs you actually need and why
What security logs you actually need and why Many small businesses collect far more data than they[…]
Designing Integrated Network Detection and Response (NDR) for UK SMEs
Designing Integrated Network Detection and Response (NDR) for UK SMEs Network Detection and Response, or NDR, is[…]
Automating ISO 27001 evidence collection using GRC tools
Automating ISO 27001 evidence collection using GRC tools For many UK SMEs, the hardest part of running[…]
Reducing attack surface using system hardening techniques for UK SMEs
Reducing attack surface is one of the most reliable ways to improve defensive security without adding unnecessary[…]
Applying data-flow diagrams to security threat modelling
Applying data-flow diagrams to security threat modelling Data-flow diagrams, often shortened to DFDs, are one of the[…]
Testing systems for high load and denial-of-service conditions
Why high-load and denial-of-service testing belongs in security architecture Availability is a security property. If a service[…]