3 related insights
Use this topic page to move quickly through the most relevant Attomus thinking without losing the wider context across the full insights section.
Insights Topic
Cybersecurity
Browse Attomus insight related to cybersecurity, with a focus on programme delivery, operational judgement, and professional execution in demanding environments.
The Cybersecurity Paradox: Investing in What Organisations Hope to Never Need
A peculiar tension plays out in boardrooms across every sector: cybersecurity represents one of the most critical investments an organisation can make, yet it delivers none of the excitement that typically drives corporate spending decisions. This paradox has become a defining challenge for modern corporate governance, particularly as cyber threats continue to escalate in sophistication and frequency. When a company invests in product development, marketing infrastructure or operational technology, stakeholders can point to tangible outcomes — new features customers will value, expanded market reach, or efficiency gains that boost the bottom line. These investments generate enthusiasm amongst executive teams and shareholders alike because they promise growth, competitive advantage, and visible returns. Cybersecurity, by contrast, promises only that things will continue to function as they currently do. There are no new capabilities to demonstrate, no flashy innovations for the next AGM, no features that will delight customers or differentiate the organisation from its competitors.
Read articleGood Simply Isn’t Enough
The Hidden Costs of Poor Cybersecurity Measures for Small Businesses Cybersecurity measures for small businesses is a major topic as we head into 2021. It comes as no surprise, given the pandemic, the increasing number of attacks, and various high-profile companies making the news. Zoom came to the forefront of cybersecurity issues when it became known that they didn’t provide end-to-end encryption of customer’s communication. The company reached a settlement with the US Federal Trade Commission for misrepresenting its security features.
Read articleA live malware infection - a real life study
We recently assisted a client that was aggressively hit with a phishing campaign. Following a couple of successful compromises they found themselves faced with an escalation with the malware attempting to impersonate staff, both emailing their customers and pivoting to attack the admin users in a secondary phishing attack. What made things a little more interesting than the usual kiddy attack was that the initial malware was not carrying a particularly nefarious payload, which meant that it escaped the usual malware detection that the client had deployed.
Read article