Matt Palmer on BBC News

About this site

My occasional articles here are all about connecting boards and cyber security leaders together. They talk about what I’ve learned (and am still learning) about the challenge of aligning technical delivery to business goals and outcomes, and how this can best be achieved.

Whilst I make no promises on frequency of posting, everything I write on this site is suitable for board directors and NEDs, executives, operational leaders, CISOs, and cyber security professionals.

Please bear in mind that this site is a spare-time experiment; it may come and go like a ghost in the wires. So expect nothing and be positively surprised.

If you like, you can connect with me on Linkedin.

Or stop by, leave a comment, and say hello. I’d love to know if this was useful to you, otherwise I’m just talking to myself ;-)

Regards,

Matt

P.S. Please note that all views and comments on this site and on social media are personal and do not represent any other person or organisation. I make reasonable efforts to ensure accuracy but of course this cannot be guaranteed, and in any case I do not know your specific circumstances so any suggestions or advice have no warranty of any kind. Get different perspectives, and make the best decisions you can :-)

Comment by Matt Palmer on…

Featured
Is hacktivism an acceptable choice?
Is hacktivism an acceptable choice?
Read More →
CSO30 award: thank you
CSO30 award: thank you
Read More →
Introducing Incidentally: Why We Must Embrace Risk and Learn From Incidents
Introducing Incidentally: Why We Must Embrace Risk and Learn From Incidents

Progress demands risk, and incidents are inevitable. Based on 25 years of personal experience, Incidentally will explore the role of risk in driving success, particularly in cybersecurity, and how we can manage and learn from an incident or cyber crisis.

Read More →
Breaking Down Cybersecurity: The Real Meaning Behind the Jargon
Breaking Down Cybersecurity: The Real Meaning Behind the Jargon

What really is cyber security and why doesn't the traditional CIA triad of confidentiality, integrity, and availability work?

And what's that got to do with footballs anyway?

I've written this simple breakdown of the five key cyber security terms - confidentiality, integrity, availability, authenticity and non-repudiation - with examples of what they mean in practice, and real life incidents illustrating what happens when they go wrong!

Read More →
Applying agile principles to public sector change
Jersey Cyber Security Centre
Applying agile principles to public sector change
Jersey Cyber Security Centre

Shortly after 2001, I was one of many to sign the agile manifesto for software development. This document went on to start a global movement and change how technology change is done: from grandiose projects that often failed, to iterative change that often delivered.

But agile principles can be applied in other fields too, perhaps nowhere more so than where people are most impacted: public services.

Read More →
Jersey Cyber Security Centre
Why is Jersey introducing a new Cyber Security Law?
Jersey Cyber Security Centre, cyber defence
Why is Jersey introducing a new Cyber Security Law?
Jersey Cyber Security Centre, cyber defence

under our proposed new Cyber Security Law, Jersey Cyber Security Centre (JCSC) will have no power to fine or penalise bad behaviour. We will have no power to insist, unless through adoption of our recommendations by an existing business or regulator. No power to name and shame those who don't do their bit. No power to investigate, to force compliance, or to require others to act.

We will in fact have one power, and one power only: the power to share information in confidence, and to have information shared in confidence with us.

And we will have one ability: the ability to help.

Here#s how it will work.

Read More →
Jersey Cyber Security Centre, cyber defence