Reviews
Security compliance training controls: general guidance
Security compliance training controls: what HIPAA, PCI DSS, ISO 27001 and CMMC require, the cadence and records to keep, and the checks that show they work.
Archive
October 2026
Reviews
Reading security compliance training with a sceptical eye
Security compliance training does two jobs: habits staff will keep, and records an insurer or customer will ask for. How to design for each separately.
Industry
Cloud security comparison: the parts worth your attention
Cloud arrangements compared by where responsibility sits: hosted software or rented machines, native or added tooling, one provider or several, and what never moves.
Costs
Four jobs cloud security software has to do before you pay for more
How to evaluate cloud security tooling: the four jobs it has to do, why the platform you already pay for goes first, and the trial that exposes the gaps.
Rules
Cloud security: what the experienced already know
Cloud security for a small business: what stays yours when software runs elsewhere, from sharing settings and connected applications to forgotten subscriptions.
Features
Phishing defense comparison: Five layers
A phishing defense comparison of five layers—gateway, mailbox, browser, identity, and payment process—showing what each can see and where it falls short.
Rules
Phishing defense software: three jobs, one buying order
Phishing defense software does three jobs: filtering, post-delivery response and awareness. Here is the buying order, the tests, and what to do first.
Reviews
Where phishing defense actually starts: MFA on email, not training
Phishing defense that does not rely on spotting the message: stronger second factors, mail settings worth changing, blameless reporting, a payment rule.
Maintenance
Security control troubleshooting, one change at a time
How to troubleshoot a security control that blocks real work: ask what changed, sort the fault, change one thing at a time, know when to stop and escalate.
Guides
Security foundations controls: signal versus noise
Security foundations controls written so they can be checked: configured against effective, coverage as a fraction, exceptions with expiry dates, and ownership.
Rules
Security foundations compared: prevention, detection and recovery
Security foundations compared by approach rather than product: prevention against recovery, in-house against managed, and what you own against something new.
Maintenance
Best security foundations software 2027: an unranked guide
Best security foundations software 2027, grouped by job, not ranked. Compare functions, fit, and billing models; use trial and contract questions before buying.
Guides
Security foundations: accounts, backups and third parties
Security foundations for a small business: the account risks that matter, the three backup properties that hold up, and the third-party access worth reviewing.
Maintenance
Network security comparison: the architecture forks and the products on each side
A network security comparison by architecture fork, from flat or segmented to VPN or proxy, naming the products on each side and the failure each prevents.
Reviews
Network security troubleshooting: first principles
Ten common office network faults after segmentation, each with the first check, the likely cause, the fix that keeps the protection and the fix you should refuse.
Guides
7 takeaways on network security migration
A network security migration needs a dependency list, bench build, week of parallel running, clear cutover steps, and a firm rollback deadline.