AI sandbox escape: OpenAI and Hugging Face
OpenAI's models escaped their sandbox and hacked Hugging Face to cheat on a test. What this AI sandbox escape means for any business now deploying AI agents.
OpenAI's models escaped their sandbox and hacked Hugging Face to cheat on a test. What this AI sandbox escape means for any business now deploying AI agents.
IT risk management for SMEs made practical: build a simple risk register, score priorities and connect technology risks to defensible budget decisions.
Business continuity plan template for UK SMEs with copyable roles, contact cascade, impact summary, recovery procedures, messages and test records.
ICT supplier risk management for UK SMEs: assess cloud, SaaS and managed providers without needing an enterprise procurement or security team.
A practical business continuity plan starts with the service you must keep running, then tests the people, systems and workarounds needed to deliver it.
Work out what cyber insurance needs to cover, verify your security declarations and compare policy conditions before choosing a premium.
Help staff verify unusual requests, handle information safely and report concerns through training connected to real procedures and usable controls.
Build an incident response plan for your SME with clear containment authority, UK breach reporting decisions, tested recovery and practical exercises.
IT governance frameworks give UK SMEs a structured way to make better technology decisions, reduce risk, and align IT investment with business goals.
Use this post-quantum cryptography implementation checklist to inventory encryption, prioritise sensitive data, test compatibility and assess vendor readiness.
A practical IT due diligence checklist for M&A. Review infrastructure, security, compliance and integration risk before closing a deal.
Most IT risk registers fail because they are written for auditors, not decision-makers. Here is how to build one executives will actually read and act on.
Vendor failures cost businesses millions. A practical framework for IT leaders to assess, onboard, and manage technology vendors before things go wrong.
A practical ransomware response playbook for IT leaders covering detection and recovery, with clear actions for each phase of an attack on UK systems.
Cyber insurance guide for IT leaders covering governance, control evidence, policy obligations and renewal readiness throughout the policy term.
A practical guide to third party vendor risk management. Learn how IT leaders can assess, monitor, and mitigate supply chain risk across their estate.
Build an IT disaster recovery plan with agreed recovery targets, dependency maps and safe restoration tests that show whether critical services can recover.
Part 6 of 7: Only 32% of organisations have formal AI controls. Define data handling rules, output checks and approval processes proportionate to each AI use case.
From supply chain attacks to cloud outages, key lessons from the biggest IT incidents of 2025 and how to prepare your organisation for what comes next.