RISK QUANTIFICATION
Why a heat map cannot be compared with a budget request
What changes when cyber exposure is expressed as a loss distribution and the assumptions can be challenged.
PRACTITIONER INSIGHTS
Useful thinking for the people accountable.
Short, practical perspectives on regulation, risk quantification, resilience, privacy and the operating reality behind assurance.
- Editorial standard
- Evidence-led, regionally relevant and clear about what is known, assumed and still being tested.
What we will publish
This page is being prepared for the first editorial release. We will publish complete articles with authorship, sources and review dates—not empty “coming soon” cards.
REGULATORY
Seven regimes, one control set
Where GCC and UK requirements genuinely diverge, and where a mapped control model removes duplication.
RESILIENCE
Impact tolerances are not recovery time objectives
Why the distinction matters for important services, dependency mapping and scenario testing.