Managing third-party risks: approaches and best practices

by Kat McCrabb | Mar 11, 2025 | Governance

Third-party relationships introduce significant risks across cyber security, procurement, legal, privacy, data governance, and HR. Organisations must adopt structured approaches to mitigate these risks while maintaining operational efficiency. This table summarises...

Tactics of leading cybercriminal groups against the MITRE ATT&CK framework

by Kat McCrabb | Mar 4, 2025 | Compliance Resilience

Cybercriminal groups continue to refine their tactics, techniques, and procedures (TTPs), many of which align with the MITRE ATT&CK framework—a globally recognised model for understanding adversary behaviour. To counter these evolving threats, organisations need...

Legal, Contractual and Cyber Risks of Unsupported Operating Systems

by Kat McCrabb | Feb 25, 2025 | Compliance Governance Resilience Uplift

With Windows 10 reaching end of support, organisations face growing cyber security threats and compliance risks. Unsupported systems no longer receive security patches, making them vulnerable to exploits. Businesses operating in regulated industries must also consider...

Preparing organisations for AI: data governance, security, and privacy

by Kat McCrabb | Feb 18, 2025 | AI Privacy Uplift

Artificial intelligence (AI) presents significant opportunities for organisations, but without the right foundations, risks related to data quality, security, and privacy can outweigh the benefits. Poor data governance can lead to inaccurate insights, security gaps...

Strengthening cyber resilience: Flame Tree Cyber’s response to proposed cyber security regulations

by Kat McCrabb | Feb 12, 2025 | Governance Resilience Uplift

Cyber security regulations introduce important protections. Flame Tree Cyber welcomes the opportunity to contribute expert insights into new subordinate legislation under the Cyber Security Act and Security of Critical Infrastructure Act 2018 (SOCI Act) This post...