Threats, Vulnerabilities, and Exposure
External Threat Management
Last Updated: March 16, 2026External threats represent the adversarial dimension of the security risk landscape that the Security Consulting function must address with the current threat intelligence, the architectural...
Internal Threat Management
Last Updated: March 16, 2026Internal threats represent the security risk category whose governance the Security Consulting function finds most consistently underinvested in relative to the actual frequency and consequence...
Remote and Mobile Working Security
Last Updated: March 16, 2026The transformation of the workplace that hybrid and remote working has produced represents one of the most significant security architecture challenges that the Security Consulting...
Removable Media Governance
Last Updated: March 16, 2026Removable media represents one of the most enduring and most consistently underestimated information security governance challenges that the Security Consulting function encounters in its advisory...
Attack Surface Management
Last Updated: March 16, 2026Attack Surface Management represents one of the most strategically important capabilities that the Security Consulting function must advise on and integrate into the organisation’s security...
Vulnerability Management
Last Updated: March 16, 2026The preceding section established the technical foundations of vulnerability management within the Security Consulting context. This section extends that foundation into the governance architecture, the...
Malware Prevention and Defence
Last Updated: March 16, 2026Malware represents one of the most consistently consequential threat categories that the Security Consulting function must advise on, because its delivery mechanisms, its execution techniques,...