Cyber security articles
How should charities manage volunteers' personal phones and laptops?
How charities protect data on volunteers' own phones and laptops without managing their devices: app protection, browser-only access and a simple BYOD policy.
By Kenny StevensonWhat do funders, insurers and trustees now expect from a charity's cyber security?
What OSCR, insurers, councils and funders now expect from a Scottish charity's cyber security, and a simple template for reporting it to trustees.
By Kenny StevensonWhat should a Scottish charity do in the first 72 hours after a data breach or cyber attack?
Hour-by-hour guide for Scottish charities after a data breach or cyber attack: containment, ICO reporting, OSCR, Police Scotland, insurers and funders.
By Kenny StevensonWhat do the UK's product security rules mean for installers of smart inverters, batteries and EV chargers?
What PSTI, the EV smart charge point rules and the coming energy smart appliance rules mean for installers, plus how to secure customer apps and portals.
By Kenny StevensonHow do payment diversion scams target construction firms, and how do you stop them?
How criminals divert subcontractor and supplier payments in construction, the controls that stop it, and what to do in the first hour if money has gone.
By Kenny StevensonWhat is Cyber Essentials, and what does your business need to know in 2026?
Cyber Essentials vs Plus, the five controls, the April 2026 Danzell changes, IASME fees, timescales and a readiness checklist for UK businesses.
By Kenny StevensonHow does ransomware get into a business network, and how do you recover without paying?
How ransomware enters business networks, what an attack looks like hour by hour, backups that survive it, a response plan and the UK position on paying.
By Kenny StevensonWhat is phishing, and how do you stop it hurting your business?
Phishing types, a worked example, invoice fraud, staff training that works, how to report scams in the UK and the technical controls that stop them.
By Kenny StevensonHow do you set up secure hybrid working in 2026?
Secure hybrid working for UK businesses: Intune-managed devices, home broadband, Teams Phone, VPN vs zero trust, and the policies that hold it together.
By Kenny StevensonHow should a business protect its logins in 2026: passwords, MFA or passkeys?
NCSC password advice, MFA methods compared, passkeys and Microsoft 365 security defaults vs Conditional Access, with a rollout plan for small businesses.
By Kenny Stevenson