Tutorials

Practical, long-form walkthroughs written from delivery experience: how to actually run the assessment, build the programme, and pass the audit.

A partially assembled mechanical assembly on a workbench with components laid out beside it under a cyan work light

AI Security5 Aug 2026

How to build an AI agent

Define what it must never do, build and scope the tools first, keep the loop small, then test it like an adversary rather than like a user.

An empty lecture room at night with rows of seats in shadow and a cyan-lit screen at the front

Compliance and Regulation5 Aug 2026

Discharge the EU AI Act literacy duty, and evidence it

Group people by what they do with AI, cover failure rather than only capability, tie it to your own tools, and keep the evidence an obligation of means actually requires.

Three overlapping translucent glass panels on slate with cyan light brightening where they intersect

Compliance and Regulation5 Aug 2026

Work out whether NIS2, DORA or the UK Bill reaches you

Jurisdiction first, then sector, then size, in that order. Including the two errors that appear most often in published scope tools.

An empty meeting room at night with chairs pulled back and a cyan-lit screen casting light across a dark table

Breaches and Incidents5 Aug 2026

Run a ransomware tabletop yourself

How to pick the decision you are testing, write injects against your real estate, run it under a clock, and turn the debrief into owners and dates.

A grid of small dark squares on slate, a scattered few raised above the surface catching cyan light

Compliance and Regulation5 Aug 2026

Write a Statement of Applicability that passes stage 2

Work from the risk treatment plan rather than from Annex A, justify every exclusion in terms an auditor accepts, and keep applicability separate from implementation.

Rows of dark equipment cases on steel shelving receding into shadow, one pulled forward under cyan light

Compliance and Regulation5 Aug 2026

Build an asset inventory that survives an audit

Ten days: join the systems that already know, reconcile the disagreements, add classification and lifecycle state, and close the gap between withdrawn and disposed.

A sheet of white paper pinned flat by two steel weights under cool cyan light, one corner lifting

AI Security5 Aug 2026

Write an AI acceptable use policy people actually follow

The order is the whole method. How to find what is really in use, make the decisions only you can make, and write something that gets read rather than resented.

A dark glass panel probed by a single thin cyan beam of light scattering at a flaw

AI Security5 Aug 2026

Test your own chatbot for prompt injection

Severity follows capability, not cleverness. How to test the boundary, test indirect injection, establish blast radius, and write a finding that survives review.

A closed steel server cabinet door with a single cyan indicator light beside the latch

AI Security5 Aug 2026

Securing a self-hosted n8n instance

What to do before your automation carries anything that matters. Encryption key, TLS, node restrictions, outbound allowlisting, and credential scope.

Glass and steel nodes linked by glowing cyan filaments carrying pulses of light from left to right

AI Security4 Aug 2026

Build your first n8n workflow, and don't leave the door open

Three nodes, forty minutes, no coding. Including the two things every other guide skips: getting it running outside the editor, and closing the unauthenticated endpoint you just created.

Designer's desk at night with a holographic checklist grid projected in cyan and violet

Compliance and Regulation21 Jul 2026

How to run an ISO/IEC 42001 gap assessment

Seven steps to a completed gap assessment: every clause and Annex A objective in one of three states, each gap owned and dated, sequenced into what to do first.