Category: Advent IM Blog

News and information from the Advent IM team.

The ICO’s Changing Tone on Cyber Security Signals a Long-Overdue Alignment

Cyber security, data protection, privacy, governance and risk management were never meant to operate as separate worlds. The ICO’s evolving stance reflects a more realistic view of how organisations actually manage risk, protect data and build trust.  There has been a noticeable shift in the ICO’s tone on cyber security, and it is a significant one.  For years, many organisations have treated cyber […]

Read More

Live Facial Recognition: A Necessary Debate That Demands Real‑World Accountability

The Home Office’s consultation on a new legal framework for live facial recognition (LFR) and broader biometric technologies is more than another policy exercise, it is, as the Biometrics and Surveillance Camera Commissioner recently described it, a “once‑in‑a‑generation opportunity” to get this right. And getting it right means placing governance, ethics, and public trust at […]

Read More

When Technology Sees Everything: Why Meta’s AI Glasses Scandal Demands a Reset in Trust, Ethics, and Governance

Having spent decades championing security, privacy, and robust governance, I’ve seen the pattern play out enough times to recognise it instantly: innovation races ahead, controls lag behind, and society ends up dealing with the fallout. The recent revelations about Meta’s Ray-Ban smart glasses should worry anyone who values ethics and public trust and they should […]

Read More

What a box of American breakfast cereal can still teach us about cyber security, OT and legacy risk

One of the most famous stories from the early days of hacking did not involve sophisticated code, advanced persistence or organised cyber crime. It involved a plastic whistle found in boxes of Cap’n Crunch, an American breakfast cereal. In the early 1970s, phone phreaks discovered that the whistle could generate a 2600 Hz tone. At […]

Read More

When No One Owns the Incident: The Risk Gap | RISK & BUSINESS PODCAST

Who really owns cyber incidents involving information — your IT team or your Information Governance team? 🤔 IT often gets treated as the default owner, but in reality, IT is essentially the filing cabinet: they store it, move it, and protect it — but they don’t own the information inside. That responsibility sits firmly with […]

Read More

Ransomware payment restrictions are coming. Your resilience plan needs to assume you can’t pay.

The UK is moving towards a tougher stance on ransomware payments, particularly for the public sector and regulated critical national infrastructure. Policy proposals have included a targeted ban for those sectors, alongside measures that increase incident reporting and introduce a notify-to-pay approach for organisations outside the ban.  This shift matters because it changes the shape […]

Read More

Complaints Handling Under the DUA Act: A Governance Test for Modern Organisations

The Data (Use and Access) Act does more than introduce new legal obligations — it quietly raises the bar on organisational accountability. By making formal data protection complaints handling a regulatory requirement, the legislation shifts responsibility firmly back to organisations to resolve issues properly before they reach the regulator. This reflects a wider move in […]

Read More

CCTV in schools in 2026 — security, safeguarding, and privacy can (and should) coexist

Schools have always had to think about site security: keeping pupils safe, keeping the premises secure, and keeping the day moving without turning reception into passport control. What’s changed is the threat landscape and the scrutiny. It’s no longer just “will CCTV deter vandalism?” It’s also “what happens when a camera system is offline?”, “who […]

Read More

© 2026 Advent IM Limited.