Insights · 1 publication

Research & Reports

Research briefs that examine a security problem in depth, drawing on public incident records and primary technical sources.

Research briefJuly 22, 2026 · 11 min read

In the cloud, identity is the blast radius

A review of four publicly documented cloud incidents shows the same pattern: the initial weakness varied, but the damage was determined by what a compromised identity was allowed to do. What that means for how cloud security is assessed.

Read

Where this thinking is applied.

More analysis.

All insights

White paper18 min read

ISO/IEC 42001, the NIST AI RMF and the EU AI Act: a practitioner’s comparison

Regulatory analysis10 min read

FedRAMP 20x: what changes for cloud providers, and what stays hard

Regulatory analysis9 min read

The EU AI Act after the Digital Omnibus: what moved, and what did not

Speak with an expert

Talk to the people who wrote it.

Tell us what you are preparing for. A senior practitioner who has done this work will reply within one business day.

Speak With an Expert Request an Assessment