La continuidad de la misión antes que el cumplimiento
Empieza por la operación que debe continuar y pregunta qué pruebas respaldan esa confianza.
Leer →Cyber Policy Review
Publicaciones
Una primera colección sobre continuidad de misión, responsabilidad del riesgo y seguridad operativa.
¿Quién es responsable del riesgo cibernético en entornos de alta exigencia?
Documento de política · Separar asesoramiento, responsabilidad operativa y aceptación del riesgo residual.
Leer →Lista de seguridad para viajes de alto riesgo
Guía práctica · Decisiones para personal que viaja con información de su organización.
Leer →When Security Gets in the Way: Users, Friction and Mission Assurance
Why defensive controls frustrate users, how to distinguish necessary constraints from poor design, and how to build shared responsibility through practical exercises.
Pegasus and Spain’s Government: Executive Security Beyond Diplomatic Trust
What the Spanish Pegasus case establishes, what remains unproven, and how a CISO should protect senior officials before, during and after travel.
A US Presidential Visit to Russia: Communications Assurance Under Diplomatic Pressure
A public-source scenario analysis of presidential communications, host-country dependencies and the security decisions that civilian organisations can adopt.
China’s State Visits to Europe: Shared Venues, Separate Security Responsibilities
Using Xi Jinping’s May 2024 visit to France to examine delegation security, supplier access, meeting technology and the limits of public evidence.
Telecommunications Interception While Travelling: Where Encryption Helps—and Where It Stops
A layered analysis of hotel Wi-Fi, mobile roaming, telecom infrastructure, cloud services and endpoint compromise, with practical protection choices.
Official Devices Abroad: Airports, Hotel Rooms and the Break in Custody
A practical CISO playbook for work phones and laptops: travel kits, border inspections, device management, hotel use and evidence-led return to service.
MITRE ATT&CK: From Adversary Behaviour to Defensible Security Decisions
A CISO guide to prioritisation, detection evidence and the limits of a coverage matrix.
Human Pressure, Trusted Access and Insider Risk in Deployed Operations
How to protect people and systems when fatigue, prolonged separation and privileged access meet.