Category
3 articles
Cloned voices and fabricated video calls have moved invoice fraud beyond the phishing email. For UK finance teams, the practical question is no longer whether staff would notice, but whether the payment process would stop the transfer anyway. Here are the scenarios, the controls and the first-hour actions that matter.
Shadow AI is not merely a policy exception; it is an unmanaged data transfer that can become a reportable incident. UK boards need a proportionate governance model covering acceptable use, data classification, approved tools, monitoring and reporting.
A serious cyber incident is a governance event before it is a technical one. This boardroom playbook sets out calm decision-making for the first 72 hours, from command and legal privilege to ICO reporting and communications discipline.