A backup you have never restored is a rumor
Every organization we meet has backups. About half of them have backups that work. The only way to find out which half you are in is to restore one, on purpose, on a quiet Friday.
The offboarding checklist nobody owns
Hiring has a process because a new person with no laptop complains. Leaving has none because a departed person with too much access says nothing at all.
Rolling out a password manager to twelve people who hate change
The software is the easy part. What decides whether it sticks is the first fortnight, and whether the most senior person in the room is seen using it.
How to answer a cyber insurance questionnaire honestly
The form asks forty yes-or-no questions about things you have never heard of. Ticking yes to all of them is the most expensive mistake available, and you only find out after a claim.