Insights in Category: Converged Security Archives

Is cybersecurity’s primary attack surface people?

Technology alone cannot stop today’s cyber threats. While organisations continue to invest in advanced security tools, attackers increasingly target the people behind them. In this interview, Peter Connolly, CEO of Toro Solutions, explains why human behaviour has become the primary attack surface in modern security, how criminals exploit trust through social engineering and AI-powered attacks, and why building a culture of resilience is critical to protecting organisations. He also explores the convergence of cyber, physical and human security, and the leadership capabilities needed to stay ahead of an evolving threat landscape.

The biggest security risks facing financial institutions in 2026

Discover the biggest security risks facing financial institutions in 2026, including AI threats, insider risk, supply chain vulnerabilities and resilience challenges.

Five Signs Your Organisation Is Ready For Red Team Testing

Discover the indicators that your organisation is ready for Red Team testing and how realistic adversary simulations can help strengthen resilience across cyber, physical and human security.

Resilience as readiness not reassurance

Senior risk, resilience and security leaders gathered at the National Liberal Club to discuss what organisational resilience looks like in practice, covering decision-making under pressure, governance, recovery planning, supply chain vulnerabilities, AI, culture and crisis preparedness.

7 Signs Your Organisation Needs a Converged Security Approach

Converged security connects cyber, physical and human risks. Improve visibility, coordination and resilience by addressing security gaps across your organisation.

Supply chain resilience is about managing persistent uncertainty – and needs active governance

In this piece, Gavin Wilson argues that supply chains can no longer be treated as purely commercial functions but must be managed as core risk systems. With geopolitical tension, regulation, climate disruption and hidden dependencies all shaping outcomes, disruption is now constant rather than exceptional. He highlights how many organisations remain exposed due to limited visibility and fragmented ownership, often reacting only once issues arise. His focus is on active governance, deeper supplier insight and earlier involvement of risk functions, ensuring resilience is built in before disruption hits rather than after.

Converged Risk in Practice

Our second converged security session hosted in partnership with Mitie brought together senior leaders from security, risk and resilience to explore a practical question: what does convergence look like when it works and why does it remain so difficult to achieve? The session was designed to focus on practice rather than theory. Each panellist was asked to share an example of where convergence is

Why supply chain resilience now sits at the centre of organisational risk

Why supply chains must be treated as risk systems. Explore geopolitical risk, climate disruption and resilience in modern supply chain governance.

Secure by design: embedding protection before systems go live

Toro works with organisations to integrate Secure by Design principles across facilities, digital infrastructure, operational processes, and workforce environments.

Red Team engagements: seeing your organisation the way an attacker does

Rather than testing isolated controls, a red team engagement replicates how real adversaries combine cyber, physical and human attack vectors to achieve defined objectives.

Business continuity planning: preparing organisations to operate through disruption

At Toro, business continuity is treated as an operational capability rather than a compliance document.

If a black swan event happened tomorrow, would your organisation be ready?

At a Corps Security and Toro roundtable, industry leaders examined how organisations build resilience amid geopolitical tension, digital interconnectivity and misinformation and why real preparedness depends on people, communication and tested response plans, not just documented strategies.