I’ve spent my career in the deep end of cyber security, from digital forensics to building the ISO 27001 and ISO 42001 management systems that large organisations stake their reputation on. I hold the CISSP, I’m a Lead Implementer for both ISO 27001 and ISO 42001, and I’m certified by ISC2 and EC-Council. In plain terms: this is what I do, at a serious level, every day.

For years I watched good small businesses, the plumbers, salons, accountants and charities that hold our towns together, left to fend for themselves online. The exact controls I was building for big organisations were locked behind IT departments and budgets they will never have. Everyone else got jargon, scare stories and a bill.

That never sat right with me. A cyber attack can end a business that took a lifetime to build, and the fixes are usually simple, if only someone will explain them in plain English and show you exactly what to do.

So I built Digital Gnome: the security work I’d do for a large enterprise, distilled into something a seventy-year-old, an apprentice and a head of IT can all use. My mission is to make genuinely good cyber security something every small business can actually do, for free wherever we can make it free.