Mission Assurance Before Compliance
Start with the operation that must continue, then ask what evidence supports that confidence.
Read →Cyber Policy Review
Publications
A first collection on mission continuity, risk ownership and operational security.
Who Owns Cyber Risk in High-Assurance Environments?
Policy brief · Separate advice, operational ownership and the authority to accept residual risk.
Read →Security Checklist for High-Risk Travel
Practical guide · A decision checklist for staff carrying organisational information.
Read →When Security Gets in the Way: Users, Friction and Mission Assurance
Why defensive controls frustrate users, how to distinguish necessary constraints from poor design, and how to build shared responsibility through practical exercises.
Pegasus and Spain’s Government: Executive Security Beyond Diplomatic Trust
What the Spanish Pegasus case establishes, what remains unproven, and how a CISO should protect senior officials before, during and after travel.
A US Presidential Visit to Russia: Communications Assurance Under Diplomatic Pressure
A public-source scenario analysis of presidential communications, host-country dependencies and the security decisions that civilian organisations can adopt.
China’s State Visits to Europe: Shared Venues, Separate Security Responsibilities
Using Xi Jinping’s May 2024 visit to France to examine delegation security, supplier access, meeting technology and the limits of public evidence.
Telecommunications Interception While Travelling: Where Encryption Helps—and Where It Stops
A layered analysis of hotel Wi-Fi, mobile roaming, telecom infrastructure, cloud services and endpoint compromise, with practical protection choices.
Official Devices Abroad: Airports, Hotel Rooms and the Break in Custody
A practical CISO playbook for work phones and laptops: travel kits, border inspections, device management, hotel use and evidence-led return to service.
MITRE ATT&CK: From Adversary Behaviour to Defensible Security Decisions
A CISO guide to prioritisation, detection evidence and the limits of a coverage matrix.
Human Pressure, Trusted Access and Insider Risk in Deployed Operations
How to protect people and systems when fatigue, prolonged separation and privileged access meet.