News from Resilience Forward

DRJ, in partnership with the BCI, has released Version 1.0 of the ‘AI in Resilience Framework’.

When a security breach erupts into a full-blown crisis, the post-incident review rarely asks which tool missed the warning sign first. Rather, the focus is usually on the human reaction: who made the call, on what information, and why.

In a review published on 2 September, the UK Financial Conduct Authority (FCA) has warned that frontier AI is affecting cyber resilience, governance, and vulnerability management for financial firms.

Centrii has published ‘GRIDLOCK’, a risk assessment analysis of cyber-physical exposure in UK battery energy storage systems (BESS).

New report finds hybrid and multicloud complexity, persistent downtime, and cyber security pressures are driving new priorities for high availability and disaster recovery.

A SBOM can show what is inside a software product, but not necessarily whether a flagged vulnerability is exploitable. Scott Register examines how the EU Cyber Resilience Act is turning software supply-chain visibility, accurate triage, and rapid response into priorities.

Business continuity is no longer about having an internal plan; it is having a plan that reflects how the organization really works.

Reco has released The State of Agent Security 2026, a report that examines the adoption, capabilities, and security oversight of enterprise AI tools.

Building stronger cyber security means bringing more perspectives, experiences, and ways of thinking into the teams responsible for anticipating risk.

Larry Marks argues that AI should now be recognised as an operational dependency requiring the same operational resilience planning applied to other important business services.