Cyber Value at Risk (CVaR) is a powerful methodology adapted from financial Value at Risk (VaR) models, designed to estimate the maximum potential loss from cyber incidents within a given confidence interval. CVaR focuses on worst-case scenarios, helping organisations understand the potential financial consequences of cyber threats and guiding strategic decision-making.
Continue reading
“Digital transformation” is the corporate catchphrase of the decade, hailed as the key to unlocking innovation, agility, and competitiveness. From boardrooms to tech conferences, companies proudly proclaim their digital transformation journeys, often without a clear understanding of what the term actually means.
Continue reading
Romantic relationships between autistic and ADHD individuals are more common than many realise. Shared understanding, complementary traits, and the rise of neurodivergent communities all contribute to these increasingly visible partnerships. This article explores why these pairings work and what they can teach us about connection, communication, and neurodiversity.
Continue reading
The Common Vulnerability Scoring System (CVSS) is a widely used framework for evaluating and communicating the severity of software vulnerabilities. First introduced in 1999, CVSS has become the standard scoring method for organisations to prioritise security efforts and manage vulnerabilities systematically. By assigning numerical scores to vulnerabilities based on their characteristics, CVSS enables teams to assess risks and allocate resources effectively.
Continue reading
Linode has long been a reliable platform for hosting production infrastructure, but frequent changes to the linode-cli are repeatedly breaking SSL certificate renewals via Let’s Encrypt. This article outlines the operational impact, the frustration, and what Akamai/Linode could do to restore developer trust.
The Factor Analysis of Information Risk (FAIR) framework has emerged as a cornerstone in cyber risk quantification, enabling organisations to measure and communicate risk in financial terms. FAIR’s evolution represents a shift from traditional qualitative assessments to a structured, quantitative model that aligns cybersecurity strategies with business objectives. By breaking down risk into probability and impact components, FAIR provides decision-makers with actionable insights to prioritise investments and mitigate threats effectively.
Continue reading
What’s that you say? Thomas Pynchon announces a new book to be released in October 2025? No frigging way, Dude. Will it be multi-episodic, akin to Gravity’s Rainbow? Mason and Dixon, Against the Day? V even? Or more accessible, Inherent Vice, Vineland, or Bleeding Edge? Am I buying a copy? Of course I am.
Continue reading
For me, and for many neurodivergent people, the way we interact with technology isn’t just a matter of preference. It’s about accessibility, functionality, and ease-of-use in a world that too often ignores our needs. People like me who aren’t great at coordination or balance, and who have Autism, ADHD, Asperger’s, or Dyspraxia, struggle to use “simplified” products.
Continue reading
If you’ve followed cybersecurity headlines, you’ve probably heard about the “skills gap.” The narrative goes like this: organisations are under constant attack from cybercriminals, but there just aren’t enough qualified professionals to protect them. This shortage, we’re told, is a dire crisis threatening businesses and governments alike.
Continue reading
Plato famously (and controversially) argued that all democracies inevitably collapse into tyranny. For a modern reader, raised on ideals of popular sovereignty, civil rights, and universal suffrage, this sounds alarmist or even offensive. But to dismiss Plato’s warning outright would be to miss a deeper meditation on the fragility of political systems and human nature itself.
Continue reading
As Chair of the West Midlands Cyber Working Group, I’ve helped lead DSIT’s Cyber Local steering group for the region over the past two years. Working alongside regional experts, I’ve supported the selection of projects that strengthen cyber resilience on the ground, including Aston University’s powerful work on cyber violence against women and girls. This experience has reinforced just how critical locally informed funding is to building practical, inclusive, and impactful cyber capability.
Continue reading
Oh Birmingham, my Birmingham. How did it come to this? Once proud. Once industrial. Once ambitious. Now, we stand at a low point: streets lined not with opportunity but with black bin bags and broken promises. Today, a major incident has been declared. Not for flood, nor fire, nor terror. But for rubbish.
Continue reading
The diverse landscape of cyber risk methodologies, ranging from technical scoring systems like CVSS to financial quantification frameworks like FAIR—offers organisations multiple tools to manage threats. However, these tools often operate in isolation, creating challenges when aligning technical, operational, and financial risk perspectives. Mapping between these approaches bridges the gaps, enabling organisations to unify risk management strategies and enhance decision-making.
Continue reading
So Monday we said goodbye to Anne Marie, sadly taken from us and her loving family too quickly.
Sorry I wasn’t always there, Anne. I’ll see you on the other side.
Thanks to Nick and Teresa and Grace and all Anne’s family and friends. Bless you all.
Continue reading
I recently attended the CyberASAP Year 9 Kickoff as a mentor, and also took the opportunity to experience the first two days alongside the academic teams to better understand what they go through. This blog captures my reflections from all three days, covering IP, value propositions, stakeholder mapping, and some of the truly impressive innovations coming from UK universities. It also looks at the history and purpose of the programme and why it continues to matter in bridging the gap between research and real-world impact.
Continue reading
Cyber risk scoring is a critical tool for organisations to measure their cybersecurity posture, prioritise risk mitigation efforts, and communicate threats effectively. Unlike broader risk quantification methods, which often involve financial modelling and probability analysis, cyber risk scoring assigns a numerical or categorical value to risks based on their severity, likelihood, and potential impact.
Continue reading
What began as an exploration of two strange non-songs, “Apes Ma” and “Fitter Happier”, quickly unfolded into something larger: a meditation on memory, loss, defiance, and the strange work of sound in the spaces where meaning breaks down.
This tetralogy gathers three connected essays and the one you are reading now, not as conclusions, but as echoes. Not as closures, but as signals still carrying across time.
Continue reading
A quiet manifesto for memory, resistance, and the voices that refuse to vanish. From whispered warnings to machine-read prophecies, this piece explores how songs like “Apes Ma”, “Fitter Happier”, “Trans Am”, and “Can’t Put Your Arms Around a Memory” carry defiance through static, grief through silence, and presence through time.
Continue reading
Some works don’t end. They echo. “Apes Ma” and “Fitter Happier” gave us the edge of language, the moment just after sense unravels. But what follows? What lingers in the silence after the static? What shapes itself in the quiet? Memory. Not the nostalgic kind. Not warmth. Something stranger. Something inherited. Every time I hear “New Rose”, Dave, I salute you, brother.
Some works scream. Others whisper. “Apes Ma” and “Fitter Happier” do both in a frequency that bypasses the conscious brain. What remains is a residue. A shape. A hush at the end of language. An old lover kisses slow, dayglo blue scorpions.
Continue reading