Skip to content
What does “identity is the security boundary” actually mean?
The office network is no longer the only route to business systems. Identity helps determine who—or what—should receive access, from which devices and under what conditions.
Cyber risk
-
-
What “good security” looks like in a 10–50 person firm
Good security in a small firm isn’t about perfection or enterprise-scale teams. It’s about clear ownership, layered protection, and regular review — quietly supporting normal work rather than getting in the way.
-
Do we really need security training if staff are sensible?
Sensible people still make decisions under pressure. Security training isn’t about fixing staff — it’s about supporting judgement when context, timing, and trust all come into play.
-
Why email is still the easiest way in
Email remains the most common entry point for cyber incidents, not because systems are weak, but because email sits at the centre of trust, timing, and everyday work.
-
Is Microsoft 365 secure enough for a small financial firm?
Microsoft 365 includes powerful security features, but using the platform doesn’t automatically mean those protections are working as intended. The gap is rarely technology — it’s management.
-
Why “we’re too small to be a target” is exactly the problem
Being small doesn’t make a firm invisible. As attacks increasingly target people rather than systems, everyday work has become the easiest way in — often without anyone realising until it’s too late.