Category Archives: article

A Potted History of the UK’s Cyber Economy: From Secrecy to Sector

This article, written in reaction to the DSIT Cyber Growth Action Plan 2025, traces the uneven history of the UK’s cyber economy. From CESG’s secretive assurance role to NCSC’s public authority and DSIT’s contested remit, the story is one of incremental gains but persistent churn. Programmes such as Cyber Essentials, CyberFirst, CyberASAP, Cyber Runway, and Cyber Resilience Centres have delivered value but lacked continuity, scale, and coherence. Unless the government commits to stabilisation and long-term delivery, the UK will continue to recycle initiatives rather than build a durable cyber base.

Continue reading

How to Join a Government Working Group (Without Being a Civil Servant)

Yes, you can shape UK cyber policy, even from the outside. Here’s how people get in. Government working groups in the UK might seem closed-off, formal rooms filled with civil servants, consultants, and institutional insiders. But increasingly, government departments are seeking outside voices: founders, engineers, researchers, and community leaders who bring real-world experience. Whether you’re trying to influence cyber skills policy, secure-by-design standards, or public-sector procurement, joining the right working group can amplify your voice and build visibility for your organisation or sector. This article breaks down how non-civil servants are contributing to cyber and tech policy via working groups, what types exist, and how you can get involved.

Continue reading

Databricks vs Snowflake vs Microsoft Fabric: Positioning the Future of Enterprise Data Platforms

This article extends the Databricks vs Snowflake comparison to include Microsoft Fabric, exploring the platforms’ philosophical roots, architectural approaches, and strategic trade-offs. It positions Fabric not as a direct competitor but as a consolidation play for Microsoft-centric organisations, and introduces Microsoft Purview as the governance layer that unifies divergent estates. Drawing on real enterprise patterns where Databricks underpins engineering, Fabric drives BI adoption, and functional teams risk fragmentation, the piece outlines the “Build–Consume–Govern” model and a phased transition plan. The conclusion emphasises orchestration across platforms, not choosing a single winner, as the path to a governed, AI-ready data estate.

Continue reading

From Startups to Scaleups: The UK’s Cyber Commercialisation Ladder, Explained

How Britain takes a cyber idea from academic paper to procurement-ready product, and who’s involved at each step. The UK has quietly built one of the world’s most interconnected cyber innovation ecosystems, a ladder of support that helps researchers, entrepreneurs, and early-stage companies turn ideas into commercial products, funding rounds, and contracts. But it’s not always obvious how it works, who owns which stage, or what the unwritten rules are. This article breaks down the UK’s cyber commercialisation journey, from research spinouts to public sector procurement, and highlights the critical programmes, accelerators, and gatekeepers at each level.

Continue reading

Same As It Ever Was: Microsoft’s Office 365 Trap And Why Industrial Email Users Are Being Let Down

Microsoft is undermining Outlook’s role as the backbone of professional communication by forcing heavy users through the Office 365 funnel. Add-ins like MailMaestro, Copilot, and Boomerang are locked away, the product line is fragmented across multiple Outlook clients, and serious multi-inbox management is ignored. Rivals such as Spark, Canary, Mailbird, Superhuman, and even newer “hip” tools like Hey! show more imagination. The lost promise of Google Wave reminds us that integration, not fragmentation, is the real opportunity, while Microsoft’s current short-sighted strategy leaves it weaker than ever. Email remains the killer app of the internet, so why, after all this time, is it still so shite?

Continue reading

Cyber Clusters and Regional Powerbases: Influence Beyond London

From Cheltenham to Belfast, regional ecosystems are quietly shaping the future of UK cybersecurity. When people think of UK cybersecurity, they often picture Whitehall meetings or Canary Wharf boardrooms. But real influence increasingly lies outside London, in regional clusters, civic innovation groups, and place-based partnerships that combine skills, startups, and strategy into powerful local ecosystems. These clusters aren’t just delivering training or running meetups. They are shaping national policy, securing investment, and building sovereign capabilities in collaboration with local government, academia, and industry. This article maps out the regional powerbases transforming the UK’s cybersecurity landscape, and how to engage with them.

Continue reading

It’s the End of the Internet and I Feel Fine

Every few years the internet collectively rediscovers an old conspiracy theory. This month it has been the so-called “Dead Internet Theory”. The idea, put simply, is that most of what we now encounter online is no longer produced by humans but by bots, scripts, and automated systems. Sam Altman, CEO of OpenAI, recently hinted that he thought there might be something in it, which was enough to trigger a storm of hot takes across Twitter. So what exactly does this “death” mean, and is there anything to it?

Continue reading

A Comprehensive Comparative Guide to Kebabs: From Nargis to Shami and Beyond

I quite like a kebab, and it turns out I’m not alone. From Turkish shish to Indian shami, from Mughal nargis (possibly a forerunner of the noble Scotch egg) to Iranian chelow, kebabs are a culinary tradition that has travelled, transformed, and taken root in dozens of cultures. This article explores their history, compares famous types, and shows how a single cooking method, grilling or shaping seasoned meat, became a global family of dishes spanning empires, migrations, and modern street food.

Continue reading

UK Cyber Skills Landscape: The Real Gatekeepers of Talent and Training

Beyond bootcamps and degrees, who actually shapes how the UK finds, trains, and qualifies its cyber workforce? The UK cyber skills gap is well known, but less discussed is who actually defines what “skilled” means, who sets the standards, and who controls the flow of talent into real jobs. From formal certifying bodies to regional academies, neurodivergent networks to employer-led bootcamps, this article maps out the real gatekeepers of UK cyber skills and training, the organisations, programmes, and influencers that determine who gets hired, funded, or fast-tracked.

Continue reading

Gartner’s 2025 Hype Cycle for Enterprise Architecture: A Critical Review

Gartner’s 2025 Hype Cycle for Enterprise Architecture catalogues trends and buzzwords but fails to grapple with core challenges. It overstates AI as the answer to everything, recycles old concepts under new names, and sidesteps long-standing fundamentals like bi-modal IT, plumbing vs business enablement, and the EA reputation problem. A better hype cycle would cut the noise, confront EA’s accountability gap, and ground guidance in practical playbooks, cost discipline, and measurable business outcomes.

Continue reading

From Policy to Procurement: How Standards Bodies Influence UK Cyber Buying Cycles

It’s not just what’s secure, it’s what’s accepted, assured, and approved. Here’s how standards quietly determine what gets bought in cybersecurity. In cybersecurity, buying decisions are rarely made on features alone. Especially in the UK public sector and regulated industries, procurement is often shaped by frameworks, certifications, and official guidance issued (or heavily influenced) by standards bodies. These organisations, from NCSC and NIST to IASME, ISO, and CIISec, may not sell products, but they define the guardrails within which procurement happens. They help determine what “good” looks like, what qualifies as “secure enough,” and what’s required to win a bid. This article breaks down how standards bodies and frameworks influence what UK organisations actually buy, adopt, and fund when it comes to cybersecurity.

Continue reading

The Shadow Ecosystem: Alumni Networks, Closed Groups, and Whisper Influence in Cyber

Beyond public policy and LinkedIn posts lies a quiet web of influence, trusted groups, off-book referrals, and unseen signals that shape who gets funded, hired, or heard in UK cybersecurity. Cybersecurity in the UK has a formal face: policy frameworks, standards bodies, public panels, and professional networks. But beneath that, there exists a shadow ecosystem, informal, invitation-only, and often more influential than any official organisation. This is where reputations are made (or unmade), where partnerships are brokered before anyone sees a press release, and where quiet nods matter more than job titles. This article explores the informal infrastructure of UK cyber influence, the alumni groups, private chat channels, Slack collectives, and backchannel referrals that quietly shape decisions in hiring, procurement, investment, and policy.

Continue reading

What CISOs Really Read: Reports, Forums, and Signals That Shape Decisions

Forget the vendor hype. Here’s what makes it to the top table when security leaders plan, buy, and act. Chief Information Security Officers (CISOs) are drowning in noise. Every week brings new whitepapers, vendor webinars, analyst reports, and threat briefings, but only a handful cut through and shape decisions at the enterprise level. So, what do CISOs trust? What do they read, bookmark, cite, and share internally when building strategy or justifying spend? This article examines the forums, publications, briefings, and individuals that significantly influence CISO thinking in the UK, beyond vendor brochures.

Continue reading

Brothers Against the Day: Dostoevsky, Derrida, Pynchon and Baudrillard at the End of the Sign

This article weaves together the philosophical contours of Derridean deconstruction, Baudrillardian hyperreality, and semiotic theory to interrogate the literary universes of Fyodor Dostoevsky and Thomas Pynchon. A Semiotic Descent into Hyperreality, Paranoia, and the Collapse of Meaning

Continue reading

The Quiet Power Players of UK Cybersecurity: Who Really Shapes the Agenda?

Behind the acronyms and front-facing roles lies a network of advisors, committees, and convenors quietly setting the pace for cyber strategy in Britain. When we talk about power in UK cybersecurity, we often mention the big institutions… NCSC, DSIT, UK Cyber Security Council, or heavyweight companies like BT, BAE Systems, and Microsoft. But step closer and a more nuanced picture emerges: one shaped less by job titles and more by trust, networks, and proximity to policy formation. This article explores the real power players… not always in the spotlight, but instrumental in influencing policy, procurement, public guidance, and funding flows. These are the advisors, secondments, committee members, and convenors who quietly shape the UK’s cyber agenda.

Continue reading

Entropy and the Implosion of Meaning: Pynchon in the Age of Baudrillard’s Hyperreality

This essay explores the work of Thomas Pynchon through the critical apparatus of Jean Baudrillard, with particular focus on the concepts of simulation, hyperreality, and the implosion of the real. Rather than offering a totalising reading, this essay stages a dialogue between two elusive figures, Pynchon, the postmodern novelist of paranoia and systems, and Baudrillard, the post-Marxist theorist of simulacra and the symbolic collapse of the real.

Continue reading

Cyber and Academia Worldwide: Where Research Meets Real-World Impact

From Singapore to São Paulo, academic institutions are becoming key players in the global cybersecurity landscape. While the US, UK, and EU often dominate discussions of academic cybersecurity, universities and research institutions across Asia, Africa, Latin America, and Oceania are rapidly gaining ground, shaping national policy, developing sovereign cyber capabilities, and launching novel technologies tailored to regional challenges. This article explores how academia across the world is influencing cybersecurity practice, producing talent, and collaborating across borders to tackle today’s most pressing digital threats.

Continue reading

Unravelling the Double: Dostoevsky Through the Lens of Derrida

This article explores Fyodor Dostoevsky’s literary and philosophical contributions through a deconstructive lens, guided by the thought of Jacques Derrida. The aim is not to superimpose Derrida upon Dostoevsky as if one were merely a tool to decode the other, but rather to explore the dialogic potential of their proximity, where the one haunts, and is haunted by, the other.

Continue reading

Reviewing the 2025 DSIT Code of Practice for Enterprise Connected Device Security: A Critical and Constructive Analysis

This article provides a comprehensive analysis of the UK Government’s proposed 2025 Code of Practice for Enterprise Connected Device Security, published by the Department for Science, Innovation and Technology (DSIT). It unpacks the structure, rationale, and policy intent behind the Code, outlines its 11 lifecycle-aware security principles, and evaluates its strengths and limitations. Drawing on lessons from the earlier NCSC Cyber Resilience Testing (CRT) programme, it offers a set of practical, actionable recommendations to improve uptake, scalability, and long-term impact. This is a roadmap for policymakers, manufacturers, and enterprise buyers navigating the emerging landscape of connected device security in organisational settings.

Continue reading

Cyber and Academia in the US: Ivy League Labs to Federal Research Programmes

In the United States, academic institutions are deeply embedded in the architecture of national cybersecurity. Universities and colleges serve as research engines, policy advisors, workforce pipelines, and launchpads for venture-backed startups. From federally funded research to deep partnerships with DARPA, NIST, and the Department of Defense, U.S. academia drives both innovation and influence in cybersecurity.

Continue reading