Heimir Fannar Gunnlaugsson’s Post

Cyber recovery testing ensures that you have more than proof of your capability to recover, it means your team are prepared and know their roles when the worst happens. Calm heads and clear processes are what will save your business.

If your organisation was hit by a cyber attack, could it keep operating, and could you prove it today? In this weekend’s Business Post, our Director of Cyber Recovery, Michelle Harris, makes the case that the real test of cyber resilience is no longer whether you can keep every attacker out, but whether you can keep running when one gets through. And proof of that capability matters more than ever. Not a recovery plan filed away once a year, but recovery tested every 12 weeks, so you are never far from a proven recovery point. And not only the technology, but the human reality of an incident that can run  across days and weeks, where teams need backup personnel, rest rotations and clear decision paths. The article looks at why cyber recovery has become a front-line issue for operational resilience, from board-level evidence and regulatory expectations to isolated critical data, clean recovery and what happens after systems come back online.   Read the article >> https://hubs.ly/Q04nVqvB0 #CyberRecovery #OperationalResilience #BusinessContinuity #DORA #CyberSecurity #TriangleTechnologyServices

Cyber resilience is no longer measured by how well you prevent attacks, but by how quickly and confidently you can recover from them. A great piece from Michelle Harris highlighting why recovery testing, operational resilience, and board-level accountability are becoming critical components of every organisation's cyber strategy. Well worth a read. #CyberRecovery #OperationalResilience #CyberSecurity #TriangeTechnologyServices

I am proud, but nervous now that Ireland has taken on the EU presidency. The country is at a heightened level of alert and expects a significant immenent increase in Cyber attack activity. Have you actually put your operational resilience strategy to the test and practiced critical business service recovery in the last 12 weeks?, If you haven't how ready are you for your next unplanned outage?. People and Practice are the two most important things to consider in those plans.

⏳ 45 days. That's how long businesses selling connected products into the EU have before the Cyber Resilience Act's reporting clock starts ticking. From 11 September 2026, manufacturers must report actively exploited vulnerabilities within 24 hours, and severe incidents within 72. Not next year — six weeks from now. Here's what most teams miss: you can't report what you can't detect, and you can't detect what you've never tested. Reporting deadlines are really a resilience test in disguise — they expose whether your detection, escalation and communication chains hold up under real pressure, not just on paper. Our advice: don't wait for the deadline to find the gaps. Run the drill now, while there's still time to fix what breaks. 🔍 If you're unsure where your organisation stands, we're always glad to talk it through: https://sumerianaxiom.com Is your team ready to report a live incident within 24 hours? #CyberResilience #CyberSecurity #BusinessContinuity #CyberResilienceAct #IncidentResponse

What does "improving digital resilience" actually look like? It's not just about protecting businesses from cyber threats. It's about helping people understand the risks, build confidence and create lasting resilience. That's why feedback like this means so much to us. Our client understood that they needed Cyber Essentials but didn't understand the process or where to start. Our team were able to educate them about Cyber Essentials, whilst making the process smooth and not too overwhelming. Knowing we've made a genuine difference for our customers is what drives us every day. #CustomerReview #Problem #Solution #DigitalResilience

🛡️ 45% of SMBs got hacked last year. But here's the wild part: most of them thought they were safe. The ESET SMB Cyber Readiness Index 2026 dropped some sobering numbers. Nearly half of all small and medium businesses experienced a cyber incident in the past 12 months. Yet 68% still say they're confident they can prevent attacks. That's a gap you could drive a truck through. It's the confidence trap : and it's why we tell our clients: "It's not about being paranoid. It's about having a Digital Lookout." 👀 Think of us as your friendly lookout : scanning the horizon for the stuff you can't see. Dark web chatter? We're there. Suspicious logins at 3am? We've got eyes on it. Dodgy emails? We've seen them before. 🔒 Quick wins to close the gap: - Turn on MFA (seriously, do this today) - Run a vulnerability scan : you'd be surprised what's lurking - Get a second pair of eyes on your setup Fancy a chat? We provide expert support across London, Essex, and the Southeast. No jargon, no pressure : just honest advice. Give us a shout! 👇 #SMB #CyberSecurity #LondonBusiness #DigitalLookout #ESET #CyberReadiness #CLITCS #MSP #SmallBusiness

The ASD ACSC Annual Cyber Threat Report 2024–25 landed in October 2025. If you haven't read it, here's what it means for your business. Notifications of potentially malicious cyber activity to Australian entities increased by 83% year-on-year. The ACSC responded to over 1,200 incidents — up 11% — and received more than 84,700 cybercrime reports: one every six minutes (ASD ACSC, 2025). But the number that should concern every Australian SMB is this: 39% of ransomware incidents last year were detected by the ACSC itself — not by the business that was hit. Those organisations didn't know they had a problem until a government agency told them. That is a detection gap, and it's systemic. The report's four key recommendations for businesses are: implement best-practice event logging, replace legacy IT systems, manage third-party risk effectively, and begin planning for post-quantum cryptography. The first two are achievable for most SMBs right now without significant spend. Our take: the businesses that will weather the next wave of attacks are the ones that treat detection as seriously as prevention. An attacker inside your network for 30 days causes far more damage than one who is caught at the door. What would you do if this happened to your business tomorrow? Tell us below. #CyberSecurity #RapidResponse #AustralianBusiness #InfoSec #CyberResilience

Managing a service desk in IT, you quickly realise that many cyber incidents don't start with sophisticated hackers, they start with everyday mistakes. - A missed software update. - A weak password. - A suspicious email that looked convincing. The UK's new Cyber Resilience Pledge is a good reminder that cyber security isn't just about reacting when something goes wrong. It's about building good habits that reduce risk every day. Some of the simplest things make the biggest difference: 🔹 Keeping devices updated 🔹 Using Multi-Factor Authentication 🔹 Reporting suspicious emails 🔹 Making sure backups are working 🔹 Asking questions when something doesn't look right Helping customers stay secure isn't just about fixing issues, it's about preventing them in the first place. Sometimes, the best support ticket is the one that never has to be logged. #CyberResilience #ServiceDesk #ManagedITSupport #CyberSecurity #SMEs #ITSupport https://lnkd.in/eiPNhpA4