Cyber Security

frontier ai access uk national security a solid toggle switch lever

Frontier AI Access Is a Growing National Security Question for the UK

A University of Surrey white paper published on 27 August 2026 argues that frontier AI access has become part of UK national cyber defence — and that the June 2026 US export-control order, which forced Anthropic to disable Claude Fable 5 and Mythos 5 for every customer worldwide until 1 July, proved that access can be withdrawn without warning. This breakdown covers what Professor Alan Woodward and Dr Andrew Rogoyski actually argue, the NCSC’s measurement of a £65 automated attack, AISI’s 4.7-month capability doubling time, the five recommendations the paper sets out, why open-weight models are a weaker fallback than they look, and what UK organisations should put on their own risk registers.

Read more
visa vulnerability agentic harness ai patching a upright shield pointed base

Visa Ships a Security AI That Patches Your Code Before Any Human Reviews It

Visa has open-sourced the Visa Vulnerability Agentic Harness, the tooling it used to hunt for bugs across its own payment network, and its documentation contains a line worth pausing on: “A plain scan edits your code.” In its default configuration the harness runs discovery, remediation and validation end to end, writing candidate fixes straight into source files before any person has looked at the finding or the patch. Nothing reaches production without a human, but nobody approves the patch before it is written. This breakdown covers the four-phase, eleven-stage pipeline, exactly where the “no human review” claim holds and where it collapses, what Visa itself says about oversight, and the independent evidence that only 26% of AI-generated security patches fix the flaw without changing what the software does.

Read more
cyber insurance requirements uk it controls a umbrella above cube

Cyber Insurance Requirements UK: What IT Controls Do Insurers Expect?

UK cyber insurers no longer take your word for it. This guide sets out the IT controls behind almost every proposal form — MFA on all remote access and admin accounts, EDR, offline or immutable tested backups, 14-day patching, no end-of-life software, privileged access management and a rehearsed incident response plan — with the Marsh and Coalition claims data behind each one, what the Insurance Act 2015 does to a careless answer, how Cyber Essentials and its included £25,000 cover fit in, 2026 premium benchmarks for SMEs, and a 90-day plan to become insurable at a sensible price.

Read more
iso 27001 consultancy cost uk a compass round case short needle

ISO 27001 Consultancy Cost UK: Timeline, Pricing & Preparation

ISO 27001 consultancy is the largest controllable line in most UK certification budgets, and the one buyers understand least. This guide prices it properly: 2026 UK day rates by consultant type, fixed-price bands by headcount, the day count behind each deliverable, five engagement models compared, a month-by-month timeline from scoping call to certificate, ten preparation steps that remove billable days from the quote, and a full three-year cost of ownership worked through one 45-person business.

Read more
vulnerability assessment vs penetration testing a seesaw plank triangular fulcrum

Vulnerability Assessment vs Penetration Testing: Which Does Your Business Need?

Vulnerability assessment and penetration testing are not alternatives. One is a broad, repeatable sweep that tells you what is known to be wrong across everything you own; the other is a narrow, manual, adversarial exercise that proves what an attacker could do with it. This guide defines both in the NCSC’s own terms, sets out the five differences that decide the buying order, maps what each instrument finds and misses, prices both against 2026 UK market rates, and costs one 60-person business four different ways.

Read more
cyber security audit cost uk what smes pay a tape measure case blade tongue

Cybersecurity Audit Cost UK: What SMEs Should Expect to Pay

Cyber security audit” is not one product in the UK — it is five, priced between roughly £400 and £25,000, and most overspending comes from buying a level of assurance nobody asked for. This guide prices Cyber Essentials, Cyber Essentials Plus, posture reviews, vulnerability assessments and ISO 27001 certification side by side, explains the day-rate arithmetic behind every quote, shows exactly which scope decisions move the number, and costs one 40-person firm five different ways.

Read more
sharepoint for accountancy firms secure client document management a document wallet raised tab

SharePoint for Accountancy Firms: Secure Client Document Management

How a UK accountancy practice should design and secure client documents in SharePoint Online — the seven-site architecture that replaces one site per client, the metadata columns that replace folder trees, a group-based permission model with restricted access control on anti-money laundering evidence, the four external sharing settings and why Anyone links break your device policies, sensitivity labels and data loss prevention for client data, retention to Regulation 40 of the Money Laundering Regulations 2017, version limits and the 93-day recycle bin, Copilot oversharing controls, Microsoft’s own hard limits, UK licence costs with a worked forty-one person example, and a thirty-day build calendar.

Read more
CHAT