Emerging threats
We tested a client's physical security: Here's what we found
What happens when someone walks into your office unauthorised?Organisations in highly sensitive sectors often invest heavily in cyber defences, but physical security needs to be treated as an equally high priority.
Your sector faces unique threats. Does your security training reflect this?
Sector-specific security training helps organisations move beyond abstract awareness and develop a concrete, practical understanding of the risks they actually face.
How PGI scaled supplier due diligence for a leading financial services organisation
Client case study summaryA major UK financial services organisation needed to scale its third-party supplier due diligence programme to keep pace with a growing supplier portfolio.
How to maintain PCI DSS compliance long-term
Maintaining PCI DSS compliance, especially in smaller teams, can seem like a daunting task. The good news is that it’s entirely achievable as long as you have a structured plan and the right policies and procedures in place to manage risks and protect sensitive payment data.
Why AI won't be replacing human penetration testers any time soon
The world of cyber security has not escaped the shift brought about by rapid developments in AI. While these innovations are exciting and offer real benefits in automation and efficiency, it's leading some to believe that it can replace security testing all together.
The risk trade-offs of automated threat intelligence
If you’re considering an automated threat intelligence service, it’s important to first weigh up the benefits and limitations against the level of security your business needs.
How to manage the growing risks of AI misuse
Artificial intelligence (AI) continues to rapidly evolve, unlocking incredible opportunities, but at the same time exposing companies and the public to unprecedented risks.
When is it time to upgrade to Cyber Essentials Plus?
Upgrading to Cyber Essentials plus is a significant step in enhancing your organisation’s security posture.
WEBINAR: Proactively managing emerging digital threats
Are you adapting your cyber defence strategy? As corporate cyber defences have improved over recent years, organised criminal groups and malicious state actors have discovered new ways of penetrating company systems, based around the exploitation of their digital vulnerabilities, rather than just cyber security or technical weaknesses.
MEDIA RELEASE: PGI partners with CREST to make official, standardised cyber security training materials available
Protection Group International (PGI) is pleased to be the Official Training Material Developer to CREST, the global not-for-profit body supporting the cyber security industry.
Guidelines for the 2025 changes to Cyber Essentials requirements in the education sector
The Department for Education (DfE) is changing its IT security requirements to improve resilience against cyber threats in the education sector.
Modern solutions - Digital Threat Digest
There is a tendency to think that modern problems require modern solutions. Got a problem with AI-generated content? Your only hope is to build an AI-powered detection engine.
Managing supply chain risk through auditing
Many organisations overlook a proactive approach to supply chain risk management until they experience a data breach or other cyber incident—which can be a very costly mistake.
When your social media feels like a disappointing pizza delivery - Digital Threat Digest
Ever notice how your favourite social media platform is like a pizza you’ve ordered? By the time its delivered, it’s soggy, cold, and missing half the toppings you’ve asked for.
A guide to payment compliance ahead of the March 2025 PCI DSS changes
With the approaching deadline for PCI DSS 4. 0.
The election spectacle - Digital Threat Digest
Tuesday night saw the celebration of a major political event, a commemoration of political stability and continuity: Guy Fawkes Night.
Five quick wins to reduce the risk of a data breach
What is a data breach? A data breach occurs when sensitive, protected, or confidential information is accessed, shared, or stolen by an unauthorised person.
Ghosts in the machine? - Digital Threat Digest
In the mid-20th century, Gilbert Ryle threw sand in the eye of Cartesian dualism, calling the idea of a separate mind a 'category mistake' and dubbing it the 'ghost in the machine'—essentially suggesting that Descartes had outed himself as harbouring an imaginary friend.
Better the digital devil you know - Digital Threat Digest
For a long time we’ve worked on the assumption that once something is on the internet, it’s there forever.
Fuelling the flames of misinformation - Digital Threat Digest
I remember when I studied the susceptibility to committing crime in my Crime Studies post-grad. According to research, many factors, ranging from cognitive biases, emotional vulnerabilities, to social environments, influence a person’s likelihood of committing a crime.