THINKING
Where we stand.
Plain-English views on security, regulation, and the widening gap between the two. Everything here is something we'd defend in front of your board.
THINKING
Plain-English views on security, regulation, and the widening gap between the two. Everything here is something we'd defend in front of your board.
Firms treating DORA as a compliance-mapping exercise are building a paper fortress. It's really a test of how your firm behaves under stress, and most operating models fail that long before the ICT register does.
Length isn't rigour. When a control takes forty pages to explain, the document isn't describing it — it's hiding the fact that nobody ever agreed what it was for.
The red-amber-green matrix is the most successful piece of assurance theatre ever staged. What to put in the board pack instead, and why your NEDs will thank you for it.
The next position, in your inbox. One email a month. No funnel.
Subscribe