Most data loss is not theft, and why DLP deployments fail

The majority of data leaves an organisation through ordinary work, not malice — which is exactly why so many DLP rollouts get switched off.

What an encrypted phone actually protects — and what it does not

Encryption defends a narrower set of things than the marketing implies. Here is where the real line sits.

Getting systems running again and establishing what was taken are different problems, and only one of them has a deadline set by law.

Public schedules, fixed locations and a known face produce a specific kind of exposure.

Most freight is not taken at gunpoint. It is taken quietly, on paperwork, in a yard.

What actually happens in gated communities and HOA neighbourhoods, and the authority a private patrol does and does not have.

Metal, tooling, contractors and shift change — where industrial sites actually lose material and control.

Crowds, alcohol, public schedules and temporary infrastructure produce a specific and fairly predictable set of problems.

Workplace violence, EMTALA, the Joint Commission and HIPAA all shape what a hospital security programme is allowed to look like.

Why utilities, water and energy sites carry a different risk profile, and the standards that govern how they are protected.