08 / field notes

What we've learned running other people's systems

No vendor press releases and no fear-selling. These are the things we end up explaining on calls often enough that they were worth writing down properly.

  1. 8 min read

    Your CFO's voice is now an attack surface

    What AI voice cloning means for your business, and the controls that actually stop it. The fix is mostly process, not product.

    • security
    • email fraud
    • controls
    • ai
  2. 4 min read

    The wire transfer that almost happened

    Email fraud against small businesses doesn't involve malware or hacking. It involves a convincing email about changed bank details, and a controls gap you can close this month.

    • security
    • email fraud
    • controls
  3. 3 min read

    A backup you have never restored is a hypothesis

    Most businesses find out their backups don't work on the worst day of the year. Here is the drill we run instead, and what it costs to run it.

    • backups
    • continuity
    • security

next step

Reading this because something on the list worries you?

If one of these describes your business (untested backups, a payment process a phone call could bypass, an upgrade nobody will approve), that is exactly what the 20-minute review is for.