Latest Insights
Insights | CAF | Cyber Evidence | Responsible AI |
Visit SIFTR →
Practical thinking on cyber evidence, the NCSC Cyber Assessment Framework and responsible AI.
-
A notification from ASOS. A threat instead of an offer.
ASOS security alert: what customers need to know Updated: 6 October 2026. The investigation is ongoing. Imagine checking your phone and seeing a notification from ASOS. You’re expecting a discount, perhaps an update on something you’ve ordered. Instead, it says: “ASOS HACKED.” That’s what customers saw on 6 October. The message claimed attackers had accessed…
-
What if the cyber attack gets through?
We spend a lot of time talking about how to stop cyber attacks. Passwords. Patching. Phishing. Firewalls. Access controls. Vulnerabilities. All incredibly important. But a conversation I had recently made me think about the problem slightly differently. What happens when an attack gets through anyway? Because however good an organisation’s defences are, there probably isn’t…
-
What is the NCSC Cyber Assessment Framework?
Cyber resilience is not simply about having security controls in place. Organisations also need to understand whether those controls are working, whether risks are being managed effectively, and whether they can demonstrate this with evidence. The NCSC Cyber Assessment Framework (CAF) provides a structured way of doing this. Developed by the UK’s National Cyber Security…
