Cybersecurity Awareness Month - Q&A with Charles Perry, Head of Cyber

To mark this year's Cyber Awareness Month, we sat down with Charles Perry, Head of Cyber, to hear his thoughts on the biggest cybersecurity challenges facing organisations today, and what businesses can do to stay one step ahead.

Q1. How is Artificial Intelligence changing the cyber threat landscape?

A: AI is making cyber attacks faster, more convincing, and more scalable. Criminals can use AI to create highly personalised phishing emails, automate reconnaissance, and develop more sophisticated social engineering campaigns. Organisations must balance the opportunities offered by AI with strong governance, security controls, and employee awareness.

Q2. Why is identity now the primary battleground in cybersecurity?

A: Attackers increasingly target identities rather than infrastructure. Stolen credentials, weak passwords, and compromised privileged accounts are often the easiest route into an organisation. Multi-factor authentication, privileged access management, and continuous monitoring remain essential controls.

Q3. What does cyber resilience mean in 2026?

A: Cyber resilience goes beyond preventing attacks. It focuses on an organisation's ability to prepare for, respond to, and recover from cyber incidents while maintaining critical business operations. The question is no longer "Can we stop every attack?" but "How quickly can we recover when something goes wrong?"

Q4. How can organisations better manage third-party cyber risk?

A: Third parties, including suppliers, and technology providers remain a significant source of cyber exposure. As digital ecosystems become more interconnected, organisations must assess, monitor, and manage cyber risk throughout their supply chains.

Q5. Is the human element still the strongest defence against cyber threats?

A: Absolutely. Despite advances in technology, employees remain the first line of defence. Recognising suspicious activity, challenging unusual requests, and reporting concerns promptly can prevent incidents or mitigate exposure.