Cyber Security

ai security engineering problem agent stack a ai security toolbox with a top handle

AI Security Is an Engineering Problem — How to Solve It at Every Layer of the Agent Stack

NVIDIA’s chief security officer argues that AI security is an engineering problem requiring defined requirements, enforceable controls, named owners and evidence that protections work. This piece takes each of those four against measured practice: a survey of 750 senior technology leaders in the UK and US found 7.2% have a formally accountable individual, 48% of production agents running unsecured, 54% already hit by an incident, and confidence in visibility rising nine points while monitoring coverage stayed flat. It walks the three-layer model of models, harnesses and runtimes, the worked prompt-injection case NVIDIA uses, the tooling now attached to each layer, and the structural test for telling a real boundary from a guardrail.

Read more
frontier ai access uk national security a solid toggle switch lever

Frontier AI Access Is a Growing National Security Question for the UK

A University of Surrey white paper published on 27 August 2026 argues that frontier AI access has become part of UK national cyber defence — and that the June 2026 US export-control order, which forced Anthropic to disable Claude Fable 5 and Mythos 5 for every customer worldwide until 1 July, proved that access can be withdrawn without warning. This breakdown covers what Professor Alan Woodward and Dr Andrew Rogoyski actually argue, the NCSC’s measurement of a £65 automated attack, AISI’s 4.7-month capability doubling time, the five recommendations the paper sets out, why open-weight models are a weaker fallback than they look, and what UK organisations should put on their own risk registers.

Read more
private ai for uk businesses a cube vault single doorway

Private AI for UK Businesses: How to Use LLMs Without Exposing Company Data

The general, all-sector answer to the question every UK business is now asking: how do you get the benefit of large language models without feeding them things you are paid to protect? This guide defines what private AI actually means, maps the five deployment levels from business-tier chatbots to fully self-hosted open-weight models, sets the UK GDPR and confidentiality position, prices a 20-person worked example across all four buyable routes, covers RAG without exposure, the NCSC and OWASP security layer, vendor due diligence in eight questions, and finishes with a 90-day rollout plan.

Read more
it support for financial services a bank building pediment four columns

IT Support for Financial Services Firms: FCA, Security & Microsoft 365

What a UK financial services firm actually needs from an IT partner, counted rather than described: the Companies House register downloaded and analysed to show that 86.53% of the 64,708 operating UK financial services companies file as small companies and more than half the sector on paper is a holding shell, the FCA rulebook mapped obligation by obligation onto technology deliverables, PS26/2’s 24-hour incident clock and annual third party register explained before they bite in March 2027, the July 2026 Critical Third Party designations put in context, retention clocks from three years to seven set side by side, and Microsoft 365 priced at published UK list rates. Ends with a twelve-question provider test, a hundred-point scorecard and a 90-day plan.

Read more
it support for schools a mortarboard square board domed cap

IT Support for Schools & Multi-Academy Trusts: Complete UK Guide

What a UK school or multi-academy trust actually needs from an IT partner, counted rather than described: the DfE’s Get Information About Schools register downloaded and analysed to show that 89.81% of multi-academy trusts run a separate web domain for every school and half of them cross a local authority boundary, the Cyber Security Breaches Survey education strand read properly so the primary-to-secondary gap is visible, the six core digital and technology standards and their 2030 deadline mapped to deliverables, retention clocks running from a six-month DBS record to a forty-year insurance certificate, Cyber Essentials costed trust-wide against school-by-school, and what the Academy Trust Handbook demands of trustees. Ends with a weighted hundred-point scorecard, indicative UK pricing and a 90-day plan.

Read more
it support for charities a beehive four stacked domed rings

IT Support for Charities UK: Microsoft 365, Cybersecurity & Costs

What a UK charity actually needs from an IT partner, counted rather than described: the Charity Commission register downloaded and analysed to show that 90.59% of charities sit under £500,000 of income and 37.04% still publish a free consumer webmail address as their official contact, the Microsoft 365 nonprofit grant costed three ways for a 68-account charity, the Cyber Security Breaches Survey read properly so the sector’s lower breach rate is understood as under-detection rather than safety, retention clocks running from a DBS certificate destroyed on decision to a seventy-five-year safeguarding horizon, and what the Charity Commission, the ICO and HMRC each demand of the IT estate. Ends with a weighted hundred-point buyer’s scorecard, indicative UK pricing and a 90-day plan.

Read more
it support for dental practices a water tower round tank four legs

IT Support for Dental Practices UK: Security, Backup & Compliance

What a UK dental practice actually needs from an IT partner, counted rather than described: the practice management system and its vendor support boundary, the cone beam imaging curve sized against an eleven-year retention floor, the Data Security and Protection Toolkit broken down to the 45 mandatory evidence items a dentist carries against a GP practice’s 29, NHSmail and secure referral, backup and restore targets set per system, Microsoft 365 licensing costed three ways for a four-practice group, identity control in a room where four people share one screen, and what CQC Regulation 17, UK GDPR and IR(ME)R 2017 each demand of the IT estate. Ends with a weighted hundred-point buyer’s scorecard, a 90-day plan and a pass mark of 70.

Read more
it support for recruitment agencies a turnstile three arms central post

IT Support for Recruitment Agencies UK: CRM, Microsoft 365 & Cybersecurity

What a UK recruitment or staffing business actually needs from an IT partner, counted rather than described: three systems of record instead of one, the CRM and ATS integration surface nobody owns, Microsoft 365 licensing split between consultant desks and back office with the annual cost of each shape worked out, email deliverability treated as a revenue system including Microsoft’s tenant-wide external recipient ceiling, identity and export controls for the consultant who leaves with the database, pay-run continuity for a weekly deadline that cannot move, the five statutory clocks the software has to carry, candidate data retention and the DUAA line on automated screening, and the April 2026 umbrella PAYE liability. Ends with a weighted hundred-point buyer’s scorecard and a pass mark of 70.

Read more
it support for construction companies a i beam girder flat top flange

IT Support for Construction Companies UK: Security, Sites & Microsoft 365

What a UK contractor actually needs from an IT partner, counted rather than described: six computing environments instead of one office, cellular-first site connectivity measured against Ofcom’s real coverage figures, Microsoft 365 licensing split between office and site with the annual cost of each shape worked out, identity and Conditional Access for a workforce that changes weekly, the eight golden thread attributes the Building Safety Act now requires and the IT control that delivers each, the statutory payment and adjudication clocks that email has to carry, CIS deduction arithmetic, invoice fraud controls, and a fifteen-year retention floor that most backup policies quietly miss. Ends with a weighted hundred-point scorecard and a pass mark of 70.

Read more
iso 27001 consultancy cost uk a compass round case short needle

ISO 27001 Consultancy Cost UK: Timeline, Pricing & Preparation

ISO 27001 consultancy is the largest controllable line in most UK certification budgets, and the one buyers understand least. This guide prices it properly: 2026 UK day rates by consultant type, fixed-price bands by headcount, the day count behind each deliverable, five engagement models compared, a month-by-month timeline from scoping call to certificate, ten preparation steps that remove billable days from the quote, and a full three-year cost of ownership worked through one 45-person business.

Read more
CHAT