Cycubix

Risk management sits at the heart of any effective Information Security Management System (ISMS).

But identifying risks is only part of the challenge. Organisations also need a structured, repeatable process for assessing, evaluating and treating those risks in a way that aligns with their business objectives.

In Part 5 of our ISO 27001 Roadmap series, we explore how ISO 27005 provides practical guidance for building a robust information security risk management process—from establishing context through to monitoring and continual improvement.

Whether you're implementing ISO 27001 for the first time or refining an existing ISMS, this guide explains the principles behind effective risk management.

Read Part 5 here:
https://www.cycubix.com/cybersecurity-insights/iso-27001-roadmap-part-5-risk-management-process-iso-27005

Thank you to everyone who attended Fabio Cerullo's Web Application Security Essentials training at OWASP Global AppSec EU this week.

It was a pleasure to spend three days exploring web application vulnerabilities, understanding how exploitation works, and assessing potential impact with such an engaged group of security professionals and developers.

Enjoy the rest of the event, Vienna! 🇦🇹

AI tools like Claude for Teams are helping organisations improve productivity, collaboration and efficiency. But as adoption grows, so does the need to understand the associated security and governance considerations.

Before rolling out AI across your workforce, it's important to ask the right questions about data handling, access controls, risk management and responsible use.

In our latest video, we take a closer look at Claude for Teams and explore some of the key cybersecurity considerations organisations should keep in mind when adopting AI technologies.

🎥 Watch the video:
https://www.youtube.com/watch?v=SZGVd8ATuuQ

Claude Team Plan Security: 7 Risks Every CISO Must Fix Claude Team Plan looks safe out of the box. It isn't.In this CISO-grade walkthrough, Fabio Cerullo (CISSP, CCSP, CSSLP — Cycubix) breaks down the 7 security ...

A theme dominated Infosecurity Europe in London this week: AI is reshaping the security landscape, but are organisations moving fast enough to do it safely?

From sessions on securing agentic AI inside a UK bank to the updated OWASP Top 10 for LLMs, the programme made one thing clear: the risks of AI adoption are real, present, and evolving quickly.

The session "If your AI could blackmail your company, would it?" was a genuine eye-opener. Companies are racing to adopt AI tools. This could be driven by competitive pressure and a "fix it later" mindset. But this approach carries serious implications.

We need to apply the same security principles we've always championed. Before deploying any AI tool, organisations should establish a proper "Know Your AI App" framework:

🔍 What does it actually do?
👥 Who is it sharing your data with?
🔒 Which security and privacy settings must you enable or disable?
📍 Where will your data be stored?
🚪 What happens to your data if you decommission or move away from the tool?

Speed without security isn't a competitive advantage, it's a liability waiting to surface.
It's encouraging to see the industry having these conversations. Now it's time to act on them.