GCS Insights: Leadership https://garzoncybersolutions.com/insights.html Leadership briefings from Garzon Cyber Solutions. Threat briefings and market analysis from Garzon Cyber Solutions. Cyber security incidents, regulatory change and what both mean commercially for organisations operating in the UK, the EU and the Americas. en-gb Garzon Cyber Solutions jonathan@garzoncybersolutions.com (Jonathan Garzon) jonathan@garzoncybersolutions.com (Jonathan Garzon) Fri, 09 Oct 2026 05:27:01 +0000 Tue, 12 May 2026 09:00:00 +0100 GCS RSS generator April in Review: Four Series, Thirteen Articles, and the Question That Connects Them All https://garzoncybersolutions.com/april-2026-recap/ https://garzoncybersolutions.com/april-2026-recap/ 13 articles across AI governance, cybersecurity talent, boardroom leadership, and NIS2 compliance. One pattern: organisations that treat security, governance, and talent as separate problems are the most exposed. Tue, 12 May 2026 09:00:00 +0100 GCS Insights Jonathan Garzon The CTO’s Evolving Security Mandate: Why Technology Strategy and Security Governance Are No Longer Separate Conversations https://garzoncybersolutions.com/cto-security-mandate/ https://garzoncybersolutions.com/cto-security-mandate/ 64% of CISOs report into IT. 78% share joint accountability with the CTO for security risk. 63% of organisations have no AI governance policies. The boundary between building technology and securing it has dissolved. Mon, 27 Apr 2026 09:00:00 +0100 Leadership Jonathan Garzon The Speed Paradox: When Velocity Becomes Vulnerability https://garzoncybersolutions.com/speed-paradox/ https://garzoncybersolutions.com/speed-paradox/ 80% of employees use unsanctioned applications. Attackers move laterally in 29 minutes. Third party breaches have doubled to 30%. Shadow AI incidents add $670,000 to the average breach cost. Sat, 25 Apr 2026 09:00:00 +0100 Leadership Jonathan Garzon The CISO’s Dilemma: Accountability Without Authority, Regulation Without Capacity https://garzoncybersolutions.com/cisos-dilemma/ https://garzoncybersolutions.com/cisos-dilemma/ 89% of CISOs report being stretched thin or understaffed. Only 47% received a budget increase this year. Average security budget growth has dropped to a five year low. Thu, 23 Apr 2026 09:00:00 +0100 Leadership Jonathan Garzon The Board’s Blind Spot: Why Cyber Risk Is a Governance Failure, Not a Technology Problem https://garzoncybersolutions.com/boards-blind-spot/ https://garzoncybersolutions.com/boards-blind-spot/ Only 27% of UK businesses have a board member responsible for cybersecurity. That figure has fallen from 38% in 2021. NIS2 now embeds personal liability at board level. Wed, 22 Apr 2026 09:00:00 +0100 Leadership Jonathan Garzon Tools Are Not Architecture: The Six Pillars of a Mature Security Framework https://garzoncybersolutions.com/security-framework-six-pillars/ https://garzoncybersolutions.com/security-framework-six-pillars/ Most UK businesses are not unprotected. They hold endpoint tools, firewalls, cloud security products and an incident response plan nobody has updated. What they do not hold is a framework that connects those parts into something documented, tested and defensible when a regulator, an acquirer or a major customer asks. The six pillars that turn a collection of products into a security architecture, and the order in which to build them. Wed, 25 Feb 2026 09:00:00 +0100 Security Architecture Jonathan Garzon The CISO's Biggest Problem Isn't Technical. It's Language https://garzoncybersolutions.com/ciso-board-language/ https://garzoncybersolutions.com/ciso-board-language/ Most CISOs can articulate risk to their security teams. Far fewer can translate that risk into the commercial, regulatory, and strategic language that moves a board to act. Mon, 05 Jan 2026 09:00:00 +0100 Leadership Jonathan Garzon