Expert, friendly and bespoke cyber security consultancy and training

29/05/2026

As governments and critical industries reassess their reliance on foreign technology providers, the conversation around digital sovereignty is becoming impossible to ignore.

France’s move to reduce dependence on US tech raises important questions for organisations across Europe:

🔹 Who controls your data?

🔹 How resilient is your digital infrastructure?

🔹 What are the long-term security and geopolitical risks of vendor dependency?

This latest article by Ellie Hurst ASyI, explores how digital sovereignty is evolving from a policy discussion into a strategic priority and what that means for cybersecurity, cloud adoption, and national resilience.

An important read for anyone involved in security, technology, risk, or public sector digital transformation.

Read the full article here in Professional Security Magazine : https://professionalsecurity.co.uk/news/interviews/digital-sovereignty-and-french-ban-on-us-tech/

France is not simply banning US technology in its public sector. It is showing that strategic dependency has become a security, resilience and procurement issue

15/05/2026

The King’s Speech has put cyber resilience back on the board agenda

A King’s Speech can feel a long way from the day-to-day reality of security work. It sounds formal, ceremonial and not necessarily very connected to the messy business of risk registers, supplier meetings, training plans and incident exercises.

Read our Commercial Director's thoughts here - 📖

The King’s Speech has put cyber resilience back on the board agenda

11/05/2026

When cameras learn to think, governance has to catch up.

AI‑enabled cameras and physical security systems are no longer just recording events, they’re interpreting behaviour, influencing decisions, and becoming part of the information security estate.

In our latest article for Professional Security Magazine, Ellie Hurst explores:

🔵 Why the line between physical and logical security no longer makes sense

🔵 How ISO/IEC 42001 is emerging as a trust and governance signal in AI‑driven surveillance

🔵 Why certification is not a shortcut for assurance, especially for Government, Defence and CNI

🔵 The buyer questions security leaders should be asking before trusting AI in high‑risk environments

🔵 AI has made physical security visible. Now AI governance has to be just as visible.

📖 Read the full article online now:

👉 https://professionalsecurity.co.uk/products/computer-systems-and-it-security-news/when-cameras-learn-to-think/

Available in June Print Edition 📰

Ellie Hurst from the information security consultancy Advent IM considers AI governance and ISO/IEC 42001 in physical security. I started pondering the uptake

28/04/2026

📄 New whitepaper: AI adoption without governance maturity

AI is now a mainstream part of organisational decision‑making, but the evidence shows governance, risk management and executive oversight are struggling to keep pace.

Our latest whitepaper explores:

• Why AI adoption is racing ahead of governance maturity

• How risk appetite should differ by function, not be treated as flat

• What “human‑first” AI governance actually looks like in practice

• How ISO 42001 and ISO 27001 can act as practical enablers, not box‑ticking exercises

Drawing on UK Government research, FCA/Bank of England findings, McKinsey, EY, the ICO and recent regulatory developments, the paper focuses on turning momentum into controlled, accountable use.

👉 The full whitepaper is now available here:https://www.advent-im.co.uk/wp-content/uploads/2026/04/AI-Adoption-Without-Governance-Maturity-Whitepaper-v1.0.pdf

23/04/2026

This Easter, following his Christmas volunteering, Mike once again joined the brilliant team at The Bread and Butter Thing, supporting families who are struggling to afford food.

As before, the work was fast‑paced and hands‑on, loading vans with bulk pallets and individual food bags before heading out to community hubs across the region. With tight deadlines and food that couldn’t go to waste, the team worked at full speed, packing for around 600 families per day over the Easter weekend.

"Easter can be a joyful time, but for many families it brings extra pressure. Bread and Butter helps take some of that weight off, making sure good food is there when it's needed most. Our volunteers are at the heart of that, whether they're getting food ready in the warehouse or welcoming people at the hubs, they create the warmth and dignity that makes everything work"

– Beth Lacey, Head of Region, The Bread and Butter Thing

Today, Bread and Butter supports 155 communities across 34 local authorities, saving 9,005 tonnes of food from going to waste, the equivalent of 21.4 million meals and 22.5 million tonnes of CO₂.

The impact goes beyond food. 79% of members eat more fruit and vegetables, nearly 4 in 5 access better quality food, and many report feeling more connected and less alone.

Inspired by every shift, Mike remains committed to tackling food waste and encourages anyone who can to get involved.

https://www.advent-im.co.uk/advent-impact-turning-surplus-into-support-easter-volunteering-with-the-bread-and-butter-thing-mikes-story/

Returning this Easter following his Christmas volunteering, Mike once again joined the team at The Bread and Butter Thing, a UK organisation that makes life easier for people struggling to afford food.

23/04/2026

Details of 500,000 people on Biobank health database hit by hack

22/04/2026

In the news this week: The BBC reports that a High Court challenge against the Metropolitan Police’s use of Live Facial Recognition has been dismissed, clearing the way for continued and expanded use of the technology across UK policing, provided it is lawful, proportionate and well‑governed.

✅ This ruling reinforces a crucial message for police forces: FRT is here to stay, but scrutiny is too. Public confidence, regulatory oversight, and demonstrable compliance with UK GDPR and data protection law have never been more important.

🔍 That’s where Advent can help.
Our independent FRT Pre‑Audit gives UK police forces a clear, evidence‑based view of their compliance, risks, and operational readiness.

We assess:
👉Governance and accountability structures
👉DPIAs and lawful basis
👉Technical and organisational safeguards
👉Fairness, proportionality, and transparency measures

All designed to help forces demonstrate lawful, fair, and responsible use of facial recognition technology to the ICO, the courts, and the public.

🔗 Book your FRT Pre‑ICO Audit Compliance Review:
https://www.advent-im.co.uk/sectors/police/frt-ico-audit-review/

20/04/2026

This week, Computer Weekly reports that MPs believe UK finance regulators are not moving fast enough to address AI risks, prompting renewed scrutiny of governance, accountability, and oversight: 👉 https://www.computerweekly.com/news/366641650/Finance-regulators-to-address-AI-risks-after-MPs-say-they-are-not-doing-enough

This raises an important point: regulatory response is reactive, organisational responsibility must be proactive.

This is exactly why we published From Digital Transformation to Agentic AI Governance. The whitepaper explores how organisations must move beyond seeing AI as just another digital tool, and instead treat agentic, autonomous AI systems as risk‑bearing actors that require governance by design.

📘 Whitepaper | From Digital Transformation to Agentic AI Governance

🔗https://www.advent-im.co.uk/wp-content/uploads/2026/01/From-Digital-Transformation-to-Agentic-AI-Governance-Whitepaper-Advent-IM-v1.0.pdf

16/04/2026

Response to the UK Government's open letter on AI cyber threats: business leaders should take note 📢

The government’s open letter to business leaders this week is a significant moment.

The message is unambiguous:
AI is rapidly changing the cyber threat landscape, and existing approaches to cyber risk are no longer sufficient.

Advanced AI models are now capable of:
🔴 Identifying vulnerabilities at unprecedented speed
🔴 Automating complex attack chains
🔴 Reducing the skill barrier for sophisticated cyber crime

Crucially, the letter places responsibility squarely at board level. This is no longer a technical issue delegated down the organisation, it is a matter of governance, oversight and accountability.

What stands out is that the government isn’t calling for businesses to stop using AI. It is calling for control, assurance and maturity in how AI is deployed and protected.

This is where AI governance frameworks like ISO/IEC 42001 come into sharp focus.

ISO 42001 helps organisations:
🔵 Establish clear ownership and accountability for AI
🔵 Integrate AI risks into enterprise and cyber risk management
🔵 Control AI systems across their full lifecycle
🔵 Demonstrate responsible and secure use of AI to regulators, customers and partners

In effect, it turns AI from an unmanaged capability into a governed organisational asset.

The direction of travel is clear.

AI governance is becoming part of the minimum acceptable standard of doing business, not a future aspiration.

For leaders, the key question now is simple: 👉 If asked, can you evidence that your AI is secure, accountable and under control?

https://www.advent-im.co.uk/consultancy/cyber-security/iso42001/

16/04/2026

✅ Now CPD Certified: Security Aspects Letters (SAL) Training

The workshop provides practical guidance on the role, structure, and assurance value of SALs, helping organisations strengthen security governance and evidence-informed decision making.

Our training is ideal for;
🔵 Procurement and project managers in defence or law enforcement
🔵 Public sector staff working with classified or sensitive contracts
🔵 Security and compliance officers responsible for information assurance
🔵 Contractors and suppliers engaged in government or defence-related projects

🔗 Learn more:
https://www.advent-im.co.uk/training-academy/security-aspects-letters/