11/09/2026
How do you remediate a critical vulnerability without disrupting the business? 👨💻
Thrive CISO Ian Bowell spoke to International Security Journal about the difficult decision organisations face when the NCSC advises taking affected systems offline.
His advice:
✅ Run a business impact analysis and prioritise the systems that must stay operational
✅ Provision alternative secure channels for customers if an application has to come down
✅ Know your recovery position, including your third-party providers' arrangements
✅ Set clear accountability and escalation paths for communication
You don't need to experience an attack for cybersecurity risks to disrupt your operations. Well-tested continuity plans let you take precautionary action while still delivering for your customers.
Read the full article: https://hubs.li/Q04DM0Kg0
ISJ hears exclusively from Ian Bowell, CISO at Thrive, about how organisations can balance urgent cybersecurity risks with business continuity, keeping essential services running while taking the necessary steps to protect vulnerable systems.