AI Autopsy: Capita’s 2023 Breach Laid Bare by the ICO

By Phil Muncaster for Assured
Thursday, October 30, 2025

• 377
• More

The case should also remind CISOs of the need to take a dispassionate, risk-based approach to security strategy, according to BCS fellow and cybersecurity practice lead at Platt Law, Ilia Kolochenko.

“Strategy and management are the indispensable ingredients: the cornerstone, of corporate cyber defence and resilience. If they are missing, you are doomed to fail,” he tells Assured Intelligence.

“You might invest millions in penetration testing, but unless there is a well-thought-out strategy behind it – such as an evidence-driven understanding of what systems to test, how frequently and what methodology to use – this will be a waste of money. Use any reasonable methodology and testing frequency, but all of this must be based on a risk assessment and correlated with the identified threats. Otherwise, regulators will go after you.” Read Full Article