How do you demonstrate the value of security when nothing happens?
Why security budgets remain reactive and how to build a stronger business case by linking security investment to resilience, commercial outcomes and business value.
Insights Tagged: Cyber resilience
Openai Hugging face what happened and what does it mean for UK cisos
Katie Barnett, Toro’s Director of Cyber Security, was quoted in SC Media UK following incidents involving AI models from OpenAI and Anthropic during security testing. The article looks beyond the “rogue AI” headlines to examine what the incidents mean for CISOs, including agent permissions, sandboxing, monitoring and the need for greater visibility over how AI agents are being used.
Security on a reactive budget
Security budgets often increase after something has gone wrong. Katie Barnett looks at how CISOs can move away from reactive spending by making the case for security in terms the wider business already understands, from resilience and prioritisation to deals, downtime and risk.
How to build the case for security investment before an incident happens
Why do security budgets increase after an incident? Learn how to prioritise security investment, demonstrate value and build a stronger business case.
Is cybersecurity’s primary attack surface people?
Technology alone cannot stop today’s cyber threats. While organisations continue to invest in advanced security tools, attackers increasingly target the people behind them. In this interview, Peter Connolly, CEO of Toro Solutions, explains why human behaviour has become the primary attack surface in modern security, how criminals exploit trust through social engineering and AI-powered attacks, and why building a culture of resilience is critical to protecting organisations. He also explores the convergence of cyber, physical and human security, and the leadership capabilities needed to stay ahead of an evolving threat landscape.
Control of your inbox is often enough
Your inbox is more than a place for messages – it’s the key to your digital identity. From banking and payroll to healthcare and legal services, control of your email account can give cybercriminals access to almost every aspect of your life. In this practical guide, Katie Barnett, Director of Cyber Security at Toro Solutions, explains why your inbox is one of your most valuable assets and outlines the simple steps that can dramatically reduce your risk, from enabling passkeys and multi-factor authentication to using password managers and separating email accounts by purpose.
The biggest security risks facing financial institutions in 2026
Discover the biggest security risks facing financial institutions in 2026, including AI threats, insider risk, supply chain vulnerabilities and resilience challenges.
5 cyber security questions every organisation should ask its MSP
Before trusting an MSP with privileged access to your systems and data, ask these five essential cyber security questions. Learn how to assess access controls, governance, endpoint security, incident response and supplier risk to make more informed decisions.
What World Cup scams tell us about modern security threats – Toro Solutions
From ticket fraud to credential theft, explore how World Cup 2026 scams blur the lines between cyber, physical and people security risks.
Resilience as readiness not reassurance
Senior risk, resilience and security leaders gathered at the National Liberal Club to discuss what organisational resilience looks like in practice, covering decision-making under pressure, governance, recovery planning, supply chain vulnerabilities, AI, culture and crisis preparedness.
Cyber security audits – what leaders should know
Cyber security audits give executives clarity on risks, compliance, and resilience helping protect reputation, revenue, and investor confidence.