News

A local LLM is a large language model run on infrastructure dedicated to the organisation, commonly on-premises or in a privately controlled environment. It can form part of a private AI deployment, but the terms are not interchangeable. TL;DR A local deployment can keep prompts and outputs within infrastructure you control, depending on how the surrounding application, integrations and logging are designed. The PDPA does not require personal data to stay in Singapore, and it

A routine vulnerability scan may be unremarkable on an office network. In an operational technology (OT) environment, the same activity can require more planning. Some controllers and embedded devices may react differently to active probing, and any interruption can affect the physical process the system supports. The security task may be legitimate. The operational consequence still matters. That is the tension at the centre of OT cybersecurity: a control can reduce cyber ri

A supplier sends an invoice that looks familiar. The company name is correct. The invoice format is familiar. The amount is consistent with previous work. Near the bottom is one change: Please use our new bank account for future payments. There may be no suspicious attachment, no badly written message and no obvious warning banner. The important question is no longer simply whether the email looks like phishing. It is whether the business action being requested should be allo

A business can have strong passwords, MFA, endpoint protection and network controls, yet still face a basic question: Where is sensitive business data actually allowed to go? A finance spreadsheet may belong in an approved company drive but not in a personal cloud account. Customer information may need to be shared with a specific external party, but not through an unrestricted sharing link. A project file may be appropriate on a managed laptop but not on removable media. Thi

Staff devices sit in one VLAN. Servers sit in another. Guest Wi-Fi has its own network. Printers, cameras and other connected devices may be grouped separately as well. The next question matters more than the number of VLANs: What is actually allowed to communicate between them? In our broader business cybersecurity guide, we touched on segmentation as part of network security. Here, the focus is narrower: how those boundaries should reflect what users and devices actually ne

At handover, a business laptop starts from a known state. Antivirus is installed, updates are current, security settings are applied, and IT knows who the device belongs to. What becomes harder is keeping that state consistent as the device is used. A Few Months In: An Update Gets Skipped The laptop prompts for a restart to install updates. The employee is in the middle of something and clicks "remind me later." This happens a few more times over the following weeks. Nothing