Missionserfüllung vor Compliance
Ausgangspunkt ist der Betrieb, der weiterlaufen muss, und die Evidenz für diese Zuversicht.
Lesen →Cyber Policy Review
Publikationen
Eine erste Sammlung zu Einsatzfähigkeit, Risikoverantwortung und operativer Sicherheit.
Wer trägt Cyberrisiken in besonders schutzbedürftigen Umgebungen?
Policy Brief · Beratung, operative Verantwortung und Risikoakzeptanz trennen.
Lesen →Sicherheitscheckliste für Reisen mit erhöhtem Risiko
Praxisleitfaden · Entscheidungen für Beschäftigte mit Organisationsinformationen.
Lesen →When Security Gets in the Way: Users, Friction and Mission Assurance
Why defensive controls frustrate users, how to distinguish necessary constraints from poor design, and how to build shared responsibility through practical exercises.
Pegasus and Spain’s Government: Executive Security Beyond Diplomatic Trust
What the Spanish Pegasus case establishes, what remains unproven, and how a CISO should protect senior officials before, during and after travel.
A US Presidential Visit to Russia: Communications Assurance Under Diplomatic Pressure
A public-source scenario analysis of presidential communications, host-country dependencies and the security decisions that civilian organisations can adopt.
China’s State Visits to Europe: Shared Venues, Separate Security Responsibilities
Using Xi Jinping’s May 2024 visit to France to examine delegation security, supplier access, meeting technology and the limits of public evidence.
Telecommunications Interception While Travelling: Where Encryption Helps—and Where It Stops
A layered analysis of hotel Wi-Fi, mobile roaming, telecom infrastructure, cloud services and endpoint compromise, with practical protection choices.
Official Devices Abroad: Airports, Hotel Rooms and the Break in Custody
A practical CISO playbook for work phones and laptops: travel kits, border inspections, device management, hotel use and evidence-led return to service.
MITRE ATT&CK: From Adversary Behaviour to Defensible Security Decisions
A CISO guide to prioritisation, detection evidence and the limits of a coverage matrix.
Human Pressure, Trusted Access and Insider Risk in Deployed Operations
How to protect people and systems when fatigue, prolonged separation and privileged access meet.