Rory Canavan is a co-founder and Partner of Argus Pro. He sits on ISO/IEC JTC 1/SC 7/WG 21, the standards committee responsible for ISO 19770. He founded SAM Charter, an internationally recognised SAM and ITAM consultancy. He was named ITAM Professional of the Year. His standards work informs the technical rigour of Argus Pro’s frameworks. Rory served in the Royal Navy. He writes on cyber and operational resilience, and on AI governance.
Locking the Door is a Good Start, but… On 17 February 2026, the UK Government published the fifth wave of its Cyber Security Longitudinal Survey. The findings are striking: 82% of medium and large UK businesses experienced at least one cyber incident in the past year. Phishing remains the dominant attack type. Supply […]
Summary Most firms only test resilience after an incident. Aegis Compass | CDOR™ helps you assess the strength of your defences before an incident happens, with evidence your board can trust.Remember M&S?April 2025. One supplier. One ransomware-style attack.£300 million in lost profits. Over £1 billion in market cap gone.Not because M&S dropped the ball. But […]
Summary Cyber resilience today demands more than just tech. It requires leadership, culture, and real evidence that your organisation can recover and adapt. Why Cyber Resilience Can’t Wait Cyberattacks aren’t just more frequent. They’re smarter. And regulators? They’ve caught on. In the last 12 months: Over 2.3 million UK businesses were hit by cybercrime […]
Summary Cyber events don’t just drain budgets; they damage trust, operations, and reputation. Learn what recent retail incidents teach us about being prepared. Counting the real cost of disruption When cyber attacks strike, the impact can be huge. When Marks & Spencer suffered a highly sophisticated cyberattack, it lost an estimated £1 billion in […]
Summary Europe’s digital operational resilience laws are changing fast. The UK’s Cyber Security and Resilience Bill, currently passing through Parliament, will replicate and build upon much of what DORA and NIS2 have already set out. Here’s what this means for you in simple terms. Understanding DORA and NIS2 DORA (Digital Operational Resilience Act) and […]
Summary Cyber resilience isn’t just about having the right tools. It’s about people, processes, and planning, too. Cyber resilience is everyone’s job Many organisations think cyber resilience is an IT problem. It’s not. It’s a business-wide issue. Cyber threats today are fast, clever, and can come from anywhere. Ransomware, supply chain attacks, and insider […]
