Notes on CAF, ISO 27001, Cyber Essentials and Cyber Insurance, written for the small and medium businesses actually navigating them.
More UK procurement teams are disqualifying bids that can't demonstrate CAF alignment before a human ever reviews them. What the NCSC Cyber Assessment Framework actually requires, and how small businesses can meet it without months of manual drafting.
Read More →
Cyber InsuranceUnderwriting guidelines have tightened sharply, and "compliance erosion" can see a legitimate claim denied. Why insurers now expect proof of active, continuous documentation maintenance, not a static policy folder.
Read More →
ISO 27001ISO 27001 and its 93 controls used to be reserved for corporate giants with dedicated compliance departments. How SMEs can build a real, live Statement of Applicability without the traditional cost or timeline.
Read More →