Elsewhere

So What Even Is Threat Modelling? A Practitioner's Guide

Threat modelling is frequently discussed as if it were a singular, monolithic exercise. In reality, applying a one-size-fits-all methodology

Applied Insights from the NCC Annual Research Report

A brief logging event to mark a significant professional milestone. I was incredibly honored to be shortlisted as a finalist for the Outstan

So, You Now Have Crypto… Planning for Third-Party Security Assurance

When a supplier delivers a component implementing complex cryptographic functions, a standard black-box penetration test is entirely insuffi

Euro 7, Anti-Tampering, and the Expanding Cybersecurity Landscape

While the Euro 7 standard is widely discussed in the media as a final tightening of automotive tailpipe emissions, its implications for soft

Legacy Technology in Transport (More Than “Old Tech”)

I’ve published a new article for NCC Group’s Research Blog titled “Legacy Technology in Transport: More Than ‘Old Tech’”. You can read it he

Goal-based Regulation

I’ve written a new piece for NCC Group’s Research Blog on how goal-based regulation is changing the way we think about cybersecurity assuran