-
The Quiet Risk Behind the AI Rush
We’ll Pick That Up in the Next Release Mid-career. An operational system going live. “We’ll pick that up in the next release.” The controls weren’t forgotten. They were scheduled. That’s a different problem. Forgotten means oversight. Scheduled means someone looked at the risk, decided the timeline mattered more, and moved on. The downside still felt…
-
When Defence Spending Becomes a Cyber Security Problem
The UK government wants to hit 3% of GDP on defence by 2029, several years earlier than originally planned. That’s an additional £17.3 billion a year by 2029/30 on the OBR-based estimate that’s been widely cited. No formal decision has been taken yet and the Treasury is reportedly cautious, but the direction is clear. At…
Acceptable Risk (Documented)
Because "documented" isn't a mitigation strategy
