TBDCyber co-founder Graeme Payne's new book is available Every major breach of the last decade followed the same sequence. A risk was acknowledged. A control was inadequately implemented. The gap was deprioritized. An attacker found it. SolarWinds. Colonial Pipeline. MGM. The technology changes. The human and organizational conditions that turn threats into catastrophes do not. That pattern is the subject of The Human Error: Why Cybersecurity Failures Are Never Just a Technol

Most organizations run tabletop exercises. Far fewer run effective ones. There's a significant distinction between merely ticking off the compliance box and truly testing your capability to respond effectively when issues arise. Having conducted IR exercises across various industries for years, we've observed everything from sessions that identify crucial gaps and lead to substantial change, to exercises that produce a refined after-action report that remains unaddressed. Wha