-
The Defence Supply Chain Risk Nobody Priced In
Every prospective defence supplier who calls me wants roughly the same thing: help understanding what the MOD actually requires, so they can get into the supply chain and start earning from it. Nobody opens the conversation asking what they’re taking on. They open it asking how to get in. One of them, a small manufacturer…
-
The Danzell Problem Nobody in the Supply Chain Has Fixed Yet
In July, I was running an assurance review with a defence supplier just as their annual SAQ renewal came up. Everything on their end was spotless. Cyber Essentials reissued under the new Danzell requirements? Done in June. Cloud-wide MFA, tighter patch windows, and social media brought into scope? All checked off. It was a textbook…
-
Your Risk Appetite Doesn’t Matter When You Inherit Theirs
I got a call from a client after their MSP went dark. Not a courtesy call. A crisis call. The service had been breached. Everything dependent on it had stopped. They were buying laptops, actual laptops, from a shop, just to keep people working. The breach lasted over a month. When I arrived, the first…
-
The Risk Register Nobody Looks At
Someone asked a simple question in a quarterly risk review last month. “What’s actually different in the business since last quarter?” The register was updated. RAG statuses were current. Actions had owners. Nobody could answer. That’s a large manufacturing client. Well-governed on paper. But the register had been maintained religiously while the business ran in…
-
When Defence Spending Becomes a Cyber Security Problem
The UK government wants to hit 3% of GDP on defence by 2029, several years earlier than originally planned. That’s an additional £17.3 billion a year by 2029/30 on the OBR-based estimate that’s been widely cited. No formal decision has been taken yet and the Treasury is reportedly cautious, but the direction is clear. At…