Sign in Subscribe

ISMS

29
Jul
From Facility Management to Cyber-Physical Resilience

From Facility Management to Cyber-Physical Resilience

Cyber-physical resilience is becoming the next evolution of enterprise security. Future CISOs, Facility Managers and executive boards must govern buildings, identities, operational technology and information as one connected resilience ecosystem.
4 min read
29
Jul
Security by Design for Buildings: Why Cybersecurity Must Start Before Construction

Security by Design for Buildings: Why Cybersecurity Must Start Before Construction

The most expensive cybersecurity weakness is often created before construction begins. Security by Design and Privacy by Design must become mandatory requirements in planning, procurement and commissioning—not expensive retrofits.
4 min read
28
Jul
A Building Incident Is Now a Cyber Incident

A Building Incident Is Now a Cyber Incident

Modern building failures are increasingly caused by cyber events. Connected infrastructure demands integrated incident response, where Facility Management, the SOC and Corporate Security investigate together—not separately.
4 min read
28
Jul
Physical Access Has Become Digital Identity

Physical Access Has Become Digital Identity

Employee badges, visitor passes and contractor credentials are no longer just physical access tools. They have become security identities that require the same governance, lifecycle management and oversight as digital accounts.
5 min read
28
Jul
Why Traditional Patch Management Fails in Smart Buildings

Why Traditional Patch Management Fails in Smart Buildings

Smart buildings cannot be secured with traditional IT patching alone. Long lifecycles, vendor dependencies and operational constraints demand risk-based vulnerability management instead of patch compliance as the primary security metric.
5 min read
28
Jul
The Remote Maintenance Problem

The Remote Maintenance Problem

Remote maintenance is essential—but every supplier connection extends the attack surface. Shared accounts, forgotten VPNs and unmanaged maintenance access create governance risks that many organisations still underestimate.
5 min read
28
Jul
When Facility Management Meets Cybersecurity

When Facility Management Meets Cybersecurity

Facility management and cybersecurity rarely fail because of technology. They fail because they speak different languages, measure different risks and assume someone else owns the security responsibility. Governance—not technology—is the real integration challenge.
5 min read
28
Jul
The Invisible Infrastructure: What the ISMS Does Not See

The Invisible Infrastructure: What the ISMS Does Not See

The largest attack surface is often the one that never appears in the asset inventory. Legacy controllers, hidden interfaces, cloud services and remote maintenance create invisible cyber risk that many ISMS programmes still fail to govern.
5 min read
19
Jun
When Your ISMS Produces Documents — But Your Organization Produces Decisions

When Your ISMS Produces Documents — But Your Organization Produces Decisions

Your ISMS may be audit-ready — but is it decision-ready? A CISO perspective on why risk management fails when documented risks do not influence supplier approvals, go-lives, exceptions, and management trade-offs before decisions are made.
14 min read
17
Jun
The Most Dangerous Sentence in Information Security? “That’s Not in Scope.”

The Most Dangerous Sentence in Information Security? “That’s Not in Scope.”

The most dangerous security gap is often not a vulnerability—it is an exclusion. Why ISMS scope is not documentation, but a governance decision that determines what an organization chooses to see, govern, and ultimately protect.
6 min read