Credits
Photo credits
Photographs by other authors published on the website, page by page, with the name of the photographer and a link to the original. The portrait of Simone Nogara is not included.
Services
- Cyber Due DiligencePhoto: Pavel Gromov / Unsplash
- Critical infrastructure and public sectorPhoto: Gabriele Romano / Unsplash
- Regulatory compliance: NIS2, DORA, CRA, AI ActPhoto: Fabian Kleiser / Unsplash
- Expert Witness and Digital ForensicsPhoto: Jenya Shportiak / Unsplash
- Incident ResponsePhoto: Miha Meglic / Unsplash
Sectors
- Payments and Financial ServicesPhoto: Leo_Visions / Unsplash
- Luxury and ManufacturingPhoto: Cemrecan Yurtman / Unsplash
- Public Sector and DefencePhoto: Christian Lue / Unsplash
- Retail and E-commercePhoto: Doon _MUC / Unsplash
- Law FirmsPhoto: Krists Luhaers / Unsplash
- Professional FirmsPhoto: Jakub Żerdzicki / Unsplash
Other pages
- Cyber assessmentPhoto: Christian Ladewig / Unsplash
- ContactPhoto: Kelly Sikkema / Unsplash
- Book a consultationPhoto: Benjamin Child / Unsplash
Case studies
- Mid-Size Manufacturing CompanyPhoto: Homa Appliances / Unsplash
- Buy-side cyber due diligence on a fintech targetPhoto: Israel Andrade / Unsplash
- DORA readiness for a financial entityPhoto: Andy Wang / Unsplash
- Security assessment of a financial sector group ahead of a transactionPhoto: JESHOOTS.COM / Unsplash
- Security leadership (vCISO) for an asset management companyPhoto: kate.sade / Unsplash
- OT/ICS Security for an Industrial ManufacturerPhoto: Frantisek Duris / Unsplash
- Intellectual Property and Brand Protection for a High-End BrandPhoto: Haberdoedas / Unsplash
- Supply-Chain Risk for a Manufacturing GroupPhoto: Reproductive Health Supplies Coalition / Unsplash
- Resilience Testing and Incident Readiness for a Production PlantPhoto: Simon Kadula / Unsplash
- Business Law FirmPhoto: Iñaki del Olmo / Unsplash
- Technical Expert Report in a Commercial DisputePhoto: Colin Lloyd / Unsplash
- Public Body Operating an Essential ServicePhoto: Katie Moum / Unsplash
- Ransomware Response for an Omnichannel RetailerPhoto: Albert Stoynov / Unsplash
- Business Email Compromise Fraud at a Services FirmPhoto: NORTHFOLK / Unsplash
- Incident Readiness for an Always-On E-commercePhoto: CHUTTERSNAP / Unsplash
Insights
- MFA enabled, mailbox compromised: session theftPhoto: Md Mahdi / Unsplash
- Backup and ransomware: why the firm’s NAS is not enoughPhoto: Nick / Unsplash
- Remote access to the firm: RDP, VPN and shared accountsPhoto: Craig Lovelidge / Unsplash
- Remote digital signatures: who really controls PIN and OTPPhoto: Scott Graham / Unsplash
- Microsoft 365 logs: the evidence the firm losesPhoto: Maksym Kaharlytskyi / Unsplash
- Five months of DORA at a financial entity: what matteredPhoto: Luke Caunt / Unsplash
- Who decides what: a RACI for cybersecurity decisionsPhoto: Kaleidico / Unsplash
- Quantifying cyber risk for the boardPhoto: Isaac Smith / Unsplash
- NIS2 incident notification: a process that holds upPhoto: Monty Allen / Unsplash
- Cyber risk appetite: why the board must put it in writingPhoto: Jakub Żerdzicki / Unsplash
- Sell-side readiness: preparing a target for cyber diligencePhoto: Savannah Wakefield / Unsplash
- NIS2 penalties and the personal liability of directorsPhoto: Benjamin Child / Unsplash
- NIS2 and the supply chain: what to really ask suppliersPhoto: CHUTTERSNAP / Unsplash
- What the board should really ask whoever leads securityPhoto: Dylan Gillis / Unsplash
- Cybersecurity in M&A: beyond the checklistPhoto: Kenrick Baksh / Unsplash
- The true cost of downtime (and how to measure it)Photo: X F / Unsplash
- NIS2 for the board: what decision-makers need to knowPhoto: S O C I A L . C U T / Unsplash
- The vCISO: when a part-time security lead makes sensePhoto: Fumiaki Hayashi / Unsplash
- Proportionate compliance: why ticking boxes does not protect youPhoto: Rubén García / Unsplash
- Identity and access: why IAM is the real perimeterPhoto: Igor Saikin / Unsplash
- Digital evidence with legal value: acquire, preserve, analysePhoto: Viktor Talashuk / Unsplash
- The Day 1 plan in an acquisitionPhoto: JIRAN FAMILY / Unsplash
- Cloud security: the misconfigurations that matterPhoto: Christian Ladewig / Unsplash
- Buy-side cyber due diligence: beyond the questionnairePhoto: Rodeo Project Management Software / Unsplash
- Zero Trust in practice: beyond the sloganPhoto: Petr / Unsplash
- The first 60 minutes of an incident: what to do (and what not to do)Photo: Elric Pxl / Unsplash
- From directive to board plan: decisions you can approvePhoto: Michael Fousert / Unsplash
- Ransomware: pay or don’t pay is the wrong questionPhoto: Ricardo Gomez Angel / Unsplash
- DORA for the financial sector: digital operational resiliencePhoto: Shai Pal / Unsplash
- Third-party and supply-chain risk in M&APhoto: Ali Mkumbwa / Unsplash
- OT/ICS security: protecting without stopping the processPhoto: Homa Appliances / Unsplash
- The incident response retainer: why preparation changes the outcomePhoto: Miha Meglic / Unsplash
- The Cyber Resilience Act explained: security in digital productsPhoto: ThisisEngineering / Unsplash
- NIS2 in practice: who is in scope, what changes, how to preparePhoto: Guillaume Périgois / Unsplash
- Business Email Compromise: the threat that uses no malwarePhoto: James McKinven / Unsplash