Cyber Security Isn't an IT Problem

Cyber security continues to climb the boardroom agenda, and rightly so. This week I had a conversation with a client who experienced a ransomware incident last year. What struck me wasn't the technical details of the attack — it was the organisational impact. Decision-making paralysed for weeks, customer trust damaged, and regulatory scrutiny intensified. The lesson for every organisation: cyber security isn't an IT problem, it's a business risk. The organisations that handle incidents well are the ones that have practised their response, know their communication protocols, and have leadership that understands the stakes. Preparation isn't glamorous, but it's the difference between a contained incident and a crisis.

I learnt this week that the best way to understand a complex organisation is to follow the data. Not the org chart, not the strategy document — the actual flow of information through the business. Where data gets stuck, duplicated, or lost tells you more about how an organisation really works than any number of stakeholder interviews.

January is nearly done and I'm pleased to report the morning reading habit has stuck. Currently working through a book on systems thinking that's changing how I approach problem diagnosis. The principle of looking at interconnections rather than isolated components is something I apply daily in consulting work, but seeing it formalised is sharpening my thinking.

Excalidraw — a free, open-source virtual whiteboard for sketching diagrams. It has a hand-drawn aesthetic that makes diagrams feel less formal and more collaborative. I've been using it for quick architecture sketches and process flows during client conversations. The low-fidelity style actually encourages better discussion because it doesn't look 'finished'.

This week's challenge: draw the data flow for one key process in your organisation. Not the official documentation — the actual flow as it happens today. Where does data enter? Where does it get transformed? Where does it get stuck? You'll likely discover things that surprise you.