SOC maturity is not a fixed state. It is a continual process of aligning people, processes, and technology to the organization’s risk appetite, operational needs, and strategic objectives.
News from Resilience Forward
All the latest resilience and risk management news from around the world.
Martin Reynolds looks ahead to AI-related developments in 2026 and makes three key predictions for changes to the risk and security landscape.
Gartner, Inc has highlighted a number of critical blind spots stemming from overlooked risks and unintended consequences of generative AI (GenAI) adoption.
Systems thinking is transformational when it comes to organizational resilience, surfacing hidden risks and enabling a shift from prescriptive plans to adaptive capacity. Helen Lipscombe FBCI explains…
AI-powered cyber attacks are a key emerging risk, and this will reach a new level in 2026 as agentic AI attacks reach the real world, says Jimmy Astle.
On 18th November, a configuration change in a Cloudflare database resulted in widespread unavailability of websites and web-based services. Benjamin Schilz says that this is yet…
The BCI has released its annual 2025 Horizon Scan Report, a long-running series examining emerging risks and practitioner concerns across the global resilience profession.
As global economic pressures increase and budgets across both public and private sectors are cut, Anthony Young, CEO at Bridewell, is warning of a critical inflection point for 2026, where organizations are facing more cyber threats with fewer resources to defend against them.
The Cloud Security Alliance (CSA) has published a new framework, the Capabilities-Based Risk Assessment (CBRA) for AI systems. This is a structured, scalable approach to evaluating AI risk in enterprise environments.
The European Supervisory Authorities (EBA, EIOPA, and ESMA – the ESAs) have published a list of designated critical ICT third-party providers (CTPPs) under the Digital Operational Resilience Act (DORA).