Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What is the UK Cybersecurity & Resilience Bill (CSRB), and why should organisations be paying attention now? In Part 1 of this 6-part series, Dean Roberts explains why the Cybersecurity & Resilience Bill is one of the biggest changes to UK cyber regulation in recent years—and why it's about much more than compliance.

If you configure to a CIS Benchmark, auditors will check the box and move on. Phil White explains why trying to define your own standards isn't worth it.

Golden images: start hardened, then build on top and re-check. Phil White (CIS) on best practice for provisioning secure servers.

CMMC Phase 2 enforcement lands in November 2026, and C3PAOs are already warning about assessment capacity. If your configuration management domain isn't audit-ready, this is the walkthrough to fix that. Roy Ludmir breaks down what changed in enforced CMMC as of November 2025, what auditors actually test versus what they just ask about, and where most organizations get stuck below full compliance — plus which security baselines to standardize on and how to build an evidence package that holds up under a real assessment.