This is something I’m often asked about. The literal answer is simple, but not terribly helpful: it’s the process of providing assurance that an organisation’s digital assets are secure from threats. So what is “Assurance”? I tend to describe it thus: “Assurance is the difference between thinking you know something, and actually knowing it –

Read more