Insights
Written by the consultants who ran the engagement. No gated whitepapers, no vendor pitches.
NIS2 widens the range of organizations in scope and puts named accountability on management. Here is how to work out whether it applies to you, and what to do first.
06 Sep 2026 · L&M Cyber Security
A gap assessment tells you where you stand. It does not tell you what order to fix things in — and that ordering decides whether the programme finishes.
29 Aug 2026 · L&M Cyber Security
Industrial environments do not tolerate IT security practice applied unchanged. IEC 62443 exists because the priorities are genuinely different.
21 Aug 2026 · L&M Cyber Security
A scanner produces findings. A vulnerability management process produces fixed systems. The distance between the two is where most programmes stall.
13 Aug 2026 · L&M Cyber Security
Most organizations have a disaster recovery plan. Far fewer have tested it against a scenario where the attacker was already inside the backup infrastructure.
05 Aug 2026 · L&M Cyber Security
Segmentation between IT and OT is widely recommended and rarely finished. The obstacles are usually organizational, not technical.
27 Jul 2026 · L&M Cyber Security
Next step
Our consultants run the same investigations for clients every week. Start with a scoping conversation.