Skip to content
Do we really need security training if staff are sensible?
Sensible people still make decisions under pressure. Security training isn’t about fixing staff — it’s about supporting judgement when context, timing, and trust all come into play.
Cyber Risk & Resilience
-
-
Why email is still the easiest way in
Email remains the most common entry point for cyber incidents, not because systems are weak, but because email sits at the centre of trust, timing, and everyday work.
-
What actually happens when a small firm gets hit.
Cyber incidents don’t always look dramatic. In small firms, they often unfold either very quickly or very quietly — with reputational damage and human judgement playing a bigger role than technical failure.
-
Why “we’re too small to be a target” is exactly the problem
Being small doesn’t make a firm invisible. As attacks increasingly target people rather than systems, everyday work has become the easiest way in — often without anyone realising until it’s too late.