Knowledge VaultUnderstand the risk. Find the control.
Welcome to our knowledge vault, where you will find content and insight: research, incident analysis, practical guides for protecting data and systems that should not remain continuously reachable.
Start with the issue in front of you.
Choose the problem you need to understand. We will take you straight to the most relevant analysis, guidance and controls.
What matters now
The incidents and decisions shaping cyber resilience now, selected for leaders who need the consequence as well as the headline.
PHP2Shell: critical PHP vulnerability forces websites offline worldwide
A critical vulnerability in PHP, the language behind a significant proportion of the world's websites, has forced organisations including the Office for Budget Responsibility and NHS Scotland to take sites offline while a patch is rushed out. Mark Fermor sets out the two questions every business should ask today.
State Bank of India confirms data loss after 3,897 customer records found on the dark web
State Bank of India has disclosed a data loss incident after a review of about 375,000 records found on the dark web identified 3,897 customer records containing personal information. Investigators have yet to confirm the source.
Cyberattack on cloud provider Arcadia may expose data of 125,000 Japanese police officers and staff
A cyberattack on Osaka-based cloud provider Arcadia may have exposed names and email addresses of about 125,000 officers and staff across 20 Japanese prefectural police forces, plus more than 18,000 addresses registered for crime alerts.
Find the knowledge by need
Follow the decision in front of you: understand the risk, decide what belongs offline, determine where access should stop, then evidence the governance.
What is the risk?
Breaches, threat analysis, exposure patterns and evidence explaining where connected systems fail.
Explore risk and incidentsWhat data should be offline?
Guidance on crown jewels, backups, intellectual property, personal data and long-term digital assets.
Explore #OSS guidanceWhere should access stop?
Control blueprints for networks, OT, AI, remote access and systems where a path needs to be physically governed.
Explore Control BlueprintsWhat does good governance look like?
Board, regulatory and operational guidance covering resilience, accountability, recovery and evidence.
Explore governancePlaybooks and control blueprints
The long-form work: sector playbooks and control blueprints written for the people who have to sign them off.
View all playbooks
PlaybookMotorsport: 2026 Playbook
Protect competitive data and control race-weekend, supplier and factory network access.
Read it28 pages · 20 min read
PlaybookThe Leaders' Playbook
A board-level briefing on sovereign data, succession resilience and physical protection.
Read it28 pages · 18 min read
PlaybookControl for Water: Deployment Playbook
Firebreak path control, the wider Control modules and offline recovery copies, mapped to the Purdue model for water operators.
Read it28 pages · 22 min read
PlaybookA Control Blueprint for AI: 2026 Playbook
40-page blueprint on AI infrastructure, open weights, agents and kill-switch design.
Read it40 pages · 28 min read
PlaybookClose the File. Protect the Record.
File closure, retained records and offline custody for UK law firms.
Read it28 pages · 20 min read
PlaybookA Control Blueprint for Aerospace & Aviation
Communication registers, operational states and rapid isolation for aerospace and aviation.
Read it28 pages · 22 min readLatest analysis
Search or filter above to narrow the library by the question you need to answer.
Threat AnalysisPHP2Shell: critical PHP vulnerability forces websites offline worldwideA critical vulnerability in PHP, the language behind a significant proportion of the world's websites, has forced organisations including the Office for Budget Responsibility and NHS Scotland to take sites offline while a patch is rushed out. Mark Fermor sets out the two questions every business should ask today.22 Oct 2026 · 3 minBreach AnalysisData TheftState Bank of India confirms data loss after 3,897 customer records found on the dark webState Bank of India has disclosed a data loss incident after a review of about 375,000 records found on the dark web identified 3,897 customer records containing personal information. Investigators have yet to confirm the source.21 Oct 2026 · 3 minBreach AnalysisData TheftCyber DisruptionCyberattack on cloud provider Arcadia may expose data of 125,000 Japanese police officers and staffA cyberattack on Osaka-based cloud provider Arcadia may have exposed names and email addresses of about 125,000 officers and staff across 20 Japanese prefectural police forces, plus more than 18,000 addresses registered for crime alerts.21 Oct 2026 · 3 min
RegulationFraud & FinesICO reprimands Data Cymru and Ogi after "Password1" test account exposed data of 3,300 people, mostly childrenThe ICO has reprimanded Wales' local government data unit Data Cymru and its IT provider Ogi Networks after attackers used a 12-year-old test account protected by "Password1" to reach the data of 3,300 people, most of them children.20 Oct 2026 · 3 min
Threat IntelligenceGhostAction returns: about 1,900 GitHub accounts used to target more than 30,000 repositoriesA renewed GhostAction wave pushed malicious GitHub Actions workflows to more than 30,000 repositories and tried to extract 3,174 secrets. Old, unrotated credentials did much of the work.16 Oct 2026 · 4 min
Breach AnalysisData TheftThird-Party RiskEY data breach: client tax records exposed through a support platformClient tax documents held in EY support tickets were downloaded by an unauthorised third party. Later reports link the exposure to Goldman Sachs, Man Group and Tishman Speyer.15 Oct 2026 · 7 min
InsightCEOs now rank cyber as the top risk to growth. What should they buy first?KPMG's 2026 Global CEO Outlook finds 31 per cent of 1,400 CEOs name cyber and data security as the greatest risk to growth, and 45 per cent have increased investment. The harder question is where that money should go.15 Oct 2026 · 4 min
Breach AnalysisData TheftASOS data breach: stolen customer profiles and a hijacked app notificationASOS confirms customer-data exposure after attackers hijacked its app notifications. What happened, what was taken and why a stolen login can put more than contact details at risk.12 Oct 2026 · 14 min
Turn research into resilience
You have read the evidence. Now see how offline secure storage protects your most critical data from every threat analysed above.
From £360 a month including VAT. 36-month commitment. First payment at checkout.