Articles & white papers
On
Haidar’s Radar
Longer-form thinking on cyber assurance, risk and resilience — grounded in practice and written for people.
What is “On Haidar’s Radar”? This is where I share what I’m paying attention to in cyber security right now — my own articles and white papers on assurance, risk and resilience, plus the ideas and conversations I think more people should be having. No jargon, no fear-mongering: just practical thinking drawn from real work, written for boards, teams and anyone building a more secure organisation.
Article · November 2026
GovAssure is a conversation, not a score
What GovAssure asks of departments, where I see teams struggle with the Cyber Assessment Framework, and how to turn the process into real improvement.
Read itArticle · October 2026
AI is already in your organisation. Govern it like it is.
Why AI risk is a governance problem before it is a technical one, and the five questions I would ask any leadership team this quarter.
Read itArticle · September 2026
People are the control that matters most
Why effective assurance begins with the people making decisions, and what changes when you write for them instead of for the audit file.
Read itWhite paper · September 2026
Making cyber risk useful in the boardroom
Five moves that take a board from receiving cyber updates to making cyber decisions, with the reporting structure and cadence to support them.
Read itArticle · September 2026
Community resilience is national resilience
What voluntary-sector and education work has taught me about where national cyber resilience is actually thinnest, and what genuinely helps.
Read itArticle · September 2026
What a good Security Management Plan actually does
A practitioner's view of the document at the centre of government and enterprise assurance — why most disappoint, and the structure that makes them work.
Read itI’ll add new writing here as it’s published.
Privacy