Invoice fraud: How to verify changed bank details
An invoice with new bank details needs a separate approval. A practical process for checking changes before money reaches the wrong account.
Knowledge.
Articles on attacks, security controls and security assessments.
Invoice fraud: How to verify changed bank details
An invoice with new bank details needs a separate approval. A practical process for checking changes before money reaches the wrong account.
Read article- Bank details changed
- Call a known contact number
- Record the approval
All articles
Ransomware: Test backup restoration and business recovery
How quickly could your business work again after an IT outage? A recovery test reveals missing data, access and dependencies before they block the restart.
Protecting your email domain: SPF, DKIM and DMARC
What the three mechanisms check and the practical brief you can give your IT provider.
External attack surface: inventory your domains and services
An old campaign page, a test portal, a former supplier: a useful inventory connects publicly visible technology with responsibility and business purpose.
Preparing a security assessment for a small business
Half an hour for domains, providers and responsibilities: prepare an external security assessment that produces something your business can act on.
Security check or penetration test: Which assessment fits?
An external security assessment and a penetration test answer different questions. Choose the appropriate depth and compare proposals by the decisions their results support.
Testing access control and tenant isolation
A customer portal must assign data and functions to the right people. Prepare meaningful authorisation testing for software products, managed systems and business applications.
Reading a security report: Turn findings into action
A security report should make decisions easier. Assess the evidence, choose what to address first and establish when a change has actually been verified.
DNS migration checklist: move your website without breaking email
A DNS migration checklist and CSV template for MX, SPF, DKIM, DMARC and DNSSEC, with a troubleshooting sequence for email problems after a nameserver change.
Assessing dark web and leak findings
Assess dark web findings by source, recency and relevance to the affected systems.
Passkeys, sessions and access rights
Passkeys, sessions and permissions answer different security questions. An assessment should keep them separate.
Testing and documenting security controls
Define security requirements, select suitable tests and assess the results.
Pentest, BAS or cyber range?
Differences between penetration testing, breach and attack simulation, and a cyber range.
Monitoring does not automatically mean a SOC.
Separate assessment frequency, detection and response.
What belongs in a useful assessment brief.
Define systems, objectives, permissions and exclusions for a security assessment.
Executing a test is not proof of effective detection.
Execution, prevention, logging and alert delivery are four different outcomes.
CVSS, EPSS, KEV: What should be fixed first?
Severity, exploitation probability and known exploitation answer different questions.
There is no matching article in this selection yet.