Menu
Home/Blog
CyberKainos insights
Welcome to CyberKainos GRC Intel.
Find insight, practical guidance, and recommendations from our vCISO team on the ever changing world governance, risk, and compliance. Use it to help shape your security programmes, from DORA and ISO 27001, to nascent AI governance and cyber insurance. If you would like to talk more, reach out to our team at any time.
Search by topic
All articles
Latest posts
20 articles
5 October 2026 · AI governanceBuilding an AI Acceptable Use Policy: A Practical Template for SMEsIf your organisation doesn’t have a documented AI acceptable use policy yet, you’re not alone. Here’s a practical template you can adapt…Read more →
22 September 2026 · Cyber insuranceCyber Insurance: How AI Changed the RulesAt some point since your last renewal, your cyber insurer has probably (and quietly) rewritten the rules. Here is what insurers are now asking for…Read more →
13 September 2026 · AI governanceAI Governance: Three Key Frameworks ExplainedNIST AI RMF. ISO 42001. The EU AI Act. They get used interchangeably as if they’re competing options to choose between. They aren’t. They’re three different AI…Read more →
5 September 2026 · AI riskAI risk: Who Owns It When You Don’t Have a CISO?Ask your leadership team a simple question about AI risk: if an AI tool caused a data breach or a compliance failure tomorrow, whose job would it be to have seen it…Read more →
28 August 2026 · AI riskShadow AI: A Rapidly Growing Risk Inside Your OrganisationSomewhere in your organisation right now, an employee is probably pasting a document or chat thread from Slack into ChatGPT to get a quick summary, or dropping…Read more →
18 August 2026 · ComplianceEmbedding Compliance in Culture, Not Just DocumentationMost organisations actually possess pretty good compliance documentation. Detailed policies. Comprehensive frameworks. Annual training modules with completion…Read more →
9 August 2026 · RegulationThe New Operational Incident Reporting Regime: What Firms Need to DoThere is a date that every operational resilience, compliance, and risk team in UK financial services needs to have in their calendar: 18 March 2027.Read more →
3 August 2026 · AI governanceAI Governance: Why One-Time Approval Is No Longer EnoughThis is advice that has been shared by Nick Prescot, CEO at CyberKainos to more than a few clients over the past few months.Read more →
24 July 2026 · AI governanceOpenAI Hugging Face: What it means for your governance frameworkOpenAI has confirmed what the industry had long warned was theoretically possible, but hoped would never actually happen.Read more →
19 July 2026 · Third-party riskWhat The UK–EU MoU on Critical Third Parties Means for Vendor ProgramsLast week, HM Treasury quietly made history. Amazon Web Services, Google Cloud, Microsoft, and Oracle became the first firms to be formally designated as Critical Third…Read more →
10 July 2026 · Board governanceProvision 29: What Boards Need to Do Right NowIt sounds simple. Boards of UK-listed companies must now make a formal declaration that their material internal controls are effective. One statement. In the annual…Read more →
1 July 2026 · DORAHave questions on whether DORA applies to your organisation? Read on…We are back with more insight and advice for UK organisations wrestling with their ever evolving regulatory compliance and cybersecurity risk positioning. This week..…Read more →
26 June 2026 · ISO 27001 & SOC 2ISO 27001… or SOC 2…or bothYou have already gone to considerable effort and cost to demonstrate your commitment to information security, and are operating a proper Information Security Management…Read more →
15 May 2026 · AI regulationAI is Now a Compliance risk. Most Organisations Are Not ReadyRegulators on both sides of the Atlantic treating AI governance as an operational risk priority, the window for a relaxed approach has closed. The question is no longer…Read more →
18 August 2025 · ISO 27001Everything you need to know about: ISO 27001ISO 27001 is the international standard for Information Security Management Systems (ISMS). It outlines a series of controls to help organisations manage sensitive…Read more →
25 July 2025 · Cyber EssentialsAll you need to know about: Cyber EssentialsCyber Essentials is a security accreditation program developed by the National Cyber Security Centre and backed by the UK government. Its objective is to help…Read more →
23 June 2025 · RansomwareHow are the costs of a ransomware attack broken down?Last month, Marks & Spencer announced that a recent ransomware attack might hit its operating profit by about £300 million this year. For context that is just over…Read more →
16 May 2025 · Cyber governanceThe new Cyber Governance Code of Practice is crucial for the UKIn April, the UK’s National Cyber Security Centre (NCSC) introduced the Cyber Governance Code of Practice. This Code aims to improve the cyber resilience of UK…Read more →
15 April 2025 · ComplianceCore Considerations For Achieving Cyber Security ComplianceInformation security compliance standards help protect organisations from cyber attacks. They also give customers confidence that their personal data is being handled…Read more →
25 March 2025 · Small business securityCybersecurity essentials for small businessesToday’s small businesses are more connected than ever. From online sales to remote working, technology drives growth and opportunity. But with that connectivity comes…Read more →Talk to a vCISO
Need help turning these insights into action? Talk to our team.