Skip to main content

Briefings

Automated decisions under the new UK GDPR rules: four safeguards a board can check
The Data (Use and Access) Act 2025 replaced the old near-ban on automated decisions with a permission and four safeguards. What counts as a significant decision, and how a board can check.
The Cyber Security and Resilience Bill reaches Lords report stage in October. What it means for IT suppliers and their customers
Lords committee stage is done and report stage is set for 26 October. The Bill brings managed service providers into regulation, with a 24-hour first report and a duty to tell affected customers.
Three checks on your cookie banner, none of which need a consultant
A consent banner is one of the few things anyone can inspect from the outside in ninety seconds. Most are unedited plugin defaults describing a business that is not yours. Three checks, and the one you may not be able to fix.
116 companies called for a defensive surge. Who in your business would answer?
More than a hundred technology companies warned this week that AI-enabled attacks are about to get much worse, and told every organisation to fix its vulnerabilities. Most UK mid-market businesses cannot act on that advice, and the reason is governance, not tooling.
Your AI assistant will not break your file permissions. That is the problem.
Microsoft says Copilot only reaches content a user is already authorised to see. That is precisely why an AI rollout turns a decade of quiet oversharing into something anyone can find by asking.
Why MFA on Corporate Email Is the Best Security Money Your Business Never Spent
MFA blocks over 99% of account-compromise attacks, and corporate email is the account attackers want most. What the Google and Microsoft studies show, and how to roll MFA out well.
Cyber attacks on UK small businesses: what the numbers show
Nearly half of UK small businesses were breached or attacked in the last year. Phishing dominates, ransomware is rare, and only 21% of micro businesses have an incident response plan.

Standards we assess against

ISO/IEC 27001:2022 · ISO/IEC 27701:2025 · ISO 9001:2015 · ISO/IEC 42001:2023 · ISO/IEC 23894:2023 (guidance) · ISO/IEC 42005:2025 (guidance)

UK Cyber-Safe is an independent assessment practice. We are not a certification body and we do not issue certificates.

United Kingdom Cyber-Safe is a trading name of Eurologix Security Holding Group Ltd, registered in England and Wales, company number 11660724. Registered office: 128 City Road, London EC1V 2NX. Operating address: 1 St Peter’s Square, Manchester M2 3AE.