About Cydea

We are Cydea, an optimistic cyber security consultancy.

Announcing Cydea x Good Causes

Since founding Cydea eighteen months ago our mission has been to bring positive security to the world. Some of that is contributing to open source projects or releasing tools free of charge through cydea.tools. From the outset, part of that vision has always been that we will give back as best we can to charities and nonprofits that do amazing things. We’re fortunate enough now to be in a position to help and so that’s why I’m proud to be launching Cydea x Good Causes.

More Announcing Cydea x Good Causes...

Hello, World! from cydea.Tools

Introducing cydea.Tools, a collection of the tools we use in our client work and that are now freely available for any infosec team to pick up and accelerate their cyber security programme. I’ve written before about positive security and our desire to dispel fear, uncertainty and doubt. The old asymmetric threat adage pits embattled security teams in am impossible fight against ‘bad guys’ that share their tactics, techniques and procedures and only need to ‘get it right once.

More Hello, World! from cydea.Tools...

Racial discrimination is systemic within information security

As I wrote in my weekly infosec newsletter over the weekend: You will, no doubt, have seen some of the horrific coverage of violence used against protesters this week… You may feel detached or removed from events however the issues are systemic and pervasive even in a ‘modern’ field like cyber security. The language we use is important. Our profession is littered with examples of out-dated terminology that has no place in modern business:

More Racial discrimination is systemic within information security...

Five insights from the Security Watercooler

Last week we trialled an idea for running short video calls for people to share knowledge and experiences of different security topics. We called these Security Watercoolers and had a great response. These are the five most interesting things - aligned to NIST Cybersecurity’s Identify, Protect, Detect, Respond, Recover - that we learned from the sessions last week: A risk universe provides a structured way to categorise things that have happened in the past, and think about what may happen in the future, when identifying risk scenarios relevant to your organisation.

More Five insights from the Security Watercooler...

Join us at the Security Watercooler

This week we are trialling this idea: gather round the (virtual) Security Watercooler to share some knowledge, discuss ideas and chat with peers. [UPDATE: You can find our reflections and insights from this trial here] Many of us are doing the right thing by staying at home to save lives, and that can lead to things becoming monotonous. The Security Watercooler is ~25 min video calls to break up the day and showcase different viewpoints.

More Join us at the Security Watercooler...

Cydea has Cyber Essentials

It’s important to practice what you preach. That’s why we’re proud to announce that Cydea has achieved Cyber Essentials certification. Cyber Essentials is a UK government-backed scheme to protect organisations from the most common cyber-attacks. Even for a cyber security company, it wasn’t without its challenges though. Nailing the basics, consistently, is really hard. It can be more difficult at scale. Plus we are a modern company who, like many start-ups, don’t have any fixed infrastructure or premises.

More Cydea has Cyber Essentials...