Sign in Subscribe

riskmanagement

05
Aug
Black Hat USA 2026: Cybersecurity Is Entering the Age of Autonomous Trust

Black Hat USA 2026: Cybersecurity Is Entering the Age of Autonomous Trust

Black Hat USA 2026 signals a fundamental shift in cybersecurity. AI agents, software supply chains and digital trust are becoming the new enterprise attack surface. The challenge for CISOs is no longer protecting infrastructure—but governing autonomous systems.
4 min read
29
Jul
From Facility Management to Cyber-Physical Resilience

From Facility Management to Cyber-Physical Resilience

Cyber-physical resilience is becoming the next evolution of enterprise security. Future CISOs, Facility Managers and executive boards must govern buildings, identities, operational technology and information as one connected resilience ecosystem.
4 min read
29
Jul
Security by Design for Buildings: Why Cybersecurity Must Start Before Construction

Security by Design for Buildings: Why Cybersecurity Must Start Before Construction

The most expensive cybersecurity weakness is often created before construction begins. Security by Design and Privacy by Design must become mandatory requirements in planning, procurement and commissioning—not expensive retrofits.
4 min read
28
Jul
Why Traditional Patch Management Fails in Smart Buildings

Why Traditional Patch Management Fails in Smart Buildings

Smart buildings cannot be secured with traditional IT patching alone. Long lifecycles, vendor dependencies and operational constraints demand risk-based vulnerability management instead of patch compliance as the primary security metric.
5 min read
28
Jul
When Facility Management Meets Cybersecurity

When Facility Management Meets Cybersecurity

Facility management and cybersecurity rarely fail because of technology. They fail because they speak different languages, measure different risks and assume someone else owns the security responsibility. Governance—not technology—is the real integration challenge.
5 min read
28
Jul
The Invisible Infrastructure: What the ISMS Does Not See

The Invisible Infrastructure: What the ISMS Does Not See

The largest attack surface is often the one that never appears in the asset inventory. Legacy controllers, hidden interfaces, cloud services and remote maintenance create invisible cyber risk that many ISMS programmes still fail to govern.
5 min read
28
Jul
The Building Is Now Part of the Attack Surface

The Building Is Now Part of the Attack Surface

Modern buildings are cyber-physical systems. Access control, automation, sensors and remote maintenance expand the attack surface. This article explains why facility management must become part of the ISMS.
8 min read