Featured1 min read
What a tabletop incident response exercise actually looks like
A step-by-step walkthrough of the two-hour exercise we run with clients, including the scenario we use and where teams usually get stuck.
5 articles
Topic
Cybersecurity
Defending real organisations: email, identity, incident response and the boring controls that work.
Most read
Research1 min read
The phishing simulation email that got the best (and worst) results
We ran the same simulation across 40 client companies. The results changed how we design every simulation since.
Guide1 min read
The five email security controls that stop 90% of incidents
Ranked by the incidents we have actually responded to, not by how they are usually marketed.
Featured1 min read
Detecting phishing before it reaches your employees
Most phishing that gets through is not sophisticated. It is fast. A practical layered setup for a 50-person company.
Latest
Analysis1 min read
Why your MFA rollout probably has a gap
We have audited over 60 companies that believed MFA was fully enforced. Fewer than ten actually were.