Robin Oldham

Robin Oldham is the founder of Cydea, and previously led BAE Systems’ Security Advisory & Technical Services business, that was recognised by Forrester as one of the leading information security consultancies.

Robin helps businesses defend themselves from cyber crime and thrive in the digital world and has over fifteen years experience including advising numerous boards on how to manage crises resulting from cyber-attack.

Get in touch:

Robin's posts

What makes a good risk assessment?

A risk assessment is widely regarded as the foundation for any cyber security programme. It features in government guidance, international standards, and wider good practice.

Cydea chosen for Cyber Runway Scale, among the UK’s most innovative, high-growth cyber companies

We’re thrilled to announce that Cydea has been selected for Cyber Runway, the UK’s largest cyber accelerator, for companies addressing some of the biggest challenges facing cyber security.

Risk Advisory: CrowdStrike update causing Windows ‘blue screens’

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

Introducing... Cydea Risk Platform

On Wednesday evening, at the Soho Hotel in London, we launched Cydea Risk Platform, a software-as-a-service product to help organisations achieve better security outcomes.

We're making changes to the way you login to our risk app

This message has been sent to all early adopters of our risk app. It’s replicated here so that you can verify the authenticity of the reset request that will follow.

We’re building an app and need your help!

We’ve been developing a better way to measure and manage cyber risk. This approach underpins our cyber risk analysis engagements, which we’ve had fantastic feedback from clients on.

Communicating risk

We believe in positive security that helps to protect current and future business value. Clear communication is essential for making that happen - but communication is hard, especially when you have to provide clarity about complicated things.

How we view assets

The first thing we usually ask new clients is: What are you defending? Exploring that simple question allows us to understand how clients consider, and value, their assets.

Risk Advisory: LastPass Data Breach

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

Risk Advisory: UK government ban on Chinese surveillance equipment

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

Get early access to Cydea's Risk App

It feels like a long time ago now. On 4th March 2020 we put the call out for help in developing a better way to measure and manage cyber risk.

Risk Advisory: Russian invasion of Ukraine

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

Risk Advisory: Log4Shell Remote Code Execution Vulnerability

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

January 2022 updates to the Cyber Essentials scheme

Like many of our clients, Cydea has achieved the UK government-backed scheme to help organisation protect themselves from common cyber threats.

Risk Advisory: Kaseya VSA ‘supply-chain attack’

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

Risk Advisory: PrintNightmare

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

#RansomAware: stop shaming, share intelligence and fight back against ransomware attacks

Today, the world is seeing businesses of all sizes suffer devastating attacks from ransomware. In the last few months, massive attacks on Colonial Pipeline and JBS have disrupted services and earned cybercriminals millions of pounds.

TechUK article highlights the qualities CISOs need in 2021

Cydea, and our partners Atkins, are featured in techUK’s #Cyber2021 week. The guest blog post reinforces basic cyber hygiene, such as understanding what you are defending, as an important part of any cyber strategy.

Announcing Cydea x Good Causes

Since founding Cydea eighteen months ago our mission has been to bring positive security to the world. Some of that is contributing to open source projects or releasing tools free of charge through cydea.

Risk Advisory: Microsoft Exchange 'Hafnium'

Cydea’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organisations.

A template for your incident response plan

Cyber security incidents can be high-pressure situations with serious consequences for both businesses and individuals alike. That stress can compromise decision making (especially when tired!

Hello, World! from cydea.Tools

Introducing cydea.Tools, a collection of the tools we use in our client work and that are now freely available for any infosec team to pick up and accelerate their cyber security programme.

Racial discrimination is systemic within information security

As I wrote in my weekly infosec newsletter over the weekend: You will, no doubt, have seen some of the horrific coverage of violence used against protesters this week… You may feel detached or removed from events however the issues are systemic and pervasive even in a ‘modern’ field like cyber security.

Defense in Depth discuss 'what are you defending?'

Cydea’s founder, Robin Oldham, is featured on this week’s Defense in Depth podcast discussing asset valuation. Citing our blog post, Robin’s comments were picked up by David Spark and featured on the show.

Five insights from the Security Watercooler

Last week we trialled an idea for running short video calls for people to share knowledge and experiences of different security topics.

Security Watercooler: Communicating your recovery, with Jessica Lennard

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints.

Security Watercooler: Remote incident response, with ContextIS' Stephanie Albertina

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints.

Security Watercooler: Adapting detection to deal with remote working, with F-Secure's Tim Orchard

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints.

Security Watercooler: Focus during the distractions: security awareness at home, with ThinkCyber's Tim Ward

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints.

Security Watercooler: Cyber Risk Universe, with CISO Mentor's Phil Huggins

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints.

Join us at the Security Watercooler

This week we are trialling this idea: gather round the (virtual) Security Watercooler to share some knowledge, discuss ideas and chat with peers.

Now is the time to secure those new remote working tools

The novel coronavirus COVID-19 has led to many countries around the world mandating that citizens practice social distancing and stay at home.

We need your help to develop a better way to measure and manage cyber risk

At Cydea we believe in risk management should be consistent in its approach, informed by the data you have, and automated where possible.

Cydea has Cyber Essentials

It’s important to practice what you preach. That’s why we’re proud to announce that Cydea has achieved Cyber Essentials certification. Cyber Essentials is a UK government-backed scheme to protect organisations from the most common cyber-attacks.

Protect shareholder value using positive cyber governance

The board’s purpose is to successfully direct the company’s affairs and meet the needs of shareholders and stakeholders. We believe getting the following seven things right helps to establish effective cyber governance and are the foundation for a good security culture.

Thinking about authentication

Modern authentication That way that people identify themselves is one of the most obvious security controls that they come into contact with.

What are you defending?

In our opinion, most cyber security consultants spent most of their time talking about how things go wrong. One of our mottos at Cydea is “Let’s make things go right.

Positive Security

Technology has changed the world, and made us better connected than ever before. Over 5 billion people now have a mobile device, public services are getting easier to use, entire new business models have sprung up.