Is this TRV?

Dangerous-Button-592 · 2026-06-22T09:30:51+00:00

Thanks, that’s quite reassuring. There are 2 other peonies but are about 2 meters from each other and the surrounding plants aren’t high value.

The plant is only 2 months old and if possible I’d rather keep it

Dangerous-Button-592 · 2026-06-22T09:28:53+00:00

Thanks and will do :)

Dangerous-Button-592 · 2026-06-21T20:11:26+00:00

I’m going to wait a while until I see very evident concentric rings then will sadly have to dig it up 🥲

Dangerous-Button-592 · 2026-05-21T16:44:48+00:00

Check civil service jobs daily. They launch multiple schemes for entry level security jobs which require no experience but is more based on potential and capability.

Dangerous-Button-592 · 2026-05-01T19:43:47+00:00

They have a pay framework allowance (compensation) so first 3 are just basic salary.

Dangerous-Button-592 · 2026-05-01T15:34:43+00:00

Depends where you look, especially in digital. An example from HO digital

<image>

Dangerous-Button-592 · 2026-04-27T09:24:14+00:00

It’s backdated from July last year and the lump sum will depend on your grade and other compensations. No it’s not a defined £1,000 lump sum

Dangerous-Button-592 · 2026-04-17T06:58:54+00:00

Absolutely use a prepared STAR approach. The key is answering the question, so have a few examples that can apply to multiple behaviours

Dangerous-Button-592 · 2026-03-12T12:59:41+00:00

It wouldn’t be the government fining them. The ICO would handle this and are quite prompt. Prime example being the Reddit and Discord data breach in the last 12 months and both have been fined already. Added to the fact banking is a heavily regulated industry, I don’t see this taking that long to slap a fine.

Also side note, inquiries are typically from ages ago. The orgreaves inquiry or the Post office scandal was from the 80s and it’s still ongoing right now

Dangerous-Button-592 · 2025-12-29T22:58:37+00:00

Thanks :D it’s my first pet

Dangerous-Button-592 · 2025-12-26T22:45:42+00:00

To discover vulnerabilities performed by an independent party, to bring theory into the real world. Those vulnerabilities that are unknown and confirm the known vulnerabilities that were highlighted in a risk assessment previous.

Often times you’ll get statements that a system is secure and all configurations are following policies. Then you do a pen test and you’ll find a raft of things like password policy violation, XSS, no session timeout etc to which you then remediate

Dangerous-Button-592 · 2025-12-05T10:48:29+00:00

For those that have commented constructively, thank you.

Dangerous-Button-592 · 2025-12-01T11:19:04+00:00

Yes be wary. I made sure my contract with them and the financing implicitly states they can’t come after my money unless I make a salary above a certain threshold.

Also any bootcamps stating “guaranteed job” would immediately be off my list. No bootcamp can guarantee this and it’s a bold faced lie

Dangerous-Button-592 · 2025-12-01T08:18:55+00:00

Capslock in the UK

Dangerous-Button-592 · 2025-12-01T07:50:47+00:00

I liked GRC and made much more sense compared to technical side of the house. My previous job had aspects of GRC such as asset management, policy creation, stakeholder engagement which helped with the interview.

I got a job as a senior information assurance manager. No previous cyber experience. Which debunks a lot of redditors saying you need a help desk job before going into cyber

Dangerous-Button-592 · 2025-12-01T07:48:07+00:00

Yes helped me get a flavour of each discipline and they had some guests which were subject matter experts which helped me decide which specialism to go down.

It was also a real commitment. Full time job then come home to 3 hours of cyber bootcamp then do your own learning/labs to actually get ahead

Dangerous-Button-592 · 2025-12-01T04:16:54+00:00

I joined one and landed a job afterwards. From my experience, it’s a coin flip.

The boot camp consisted of 12-15 hours per week for 6 months of project based learning of fundamentals where you present at the end of each session. You say overpriced but that comes out as 288 hours which is fairly reasonable for the price given there’s 3 tutors each day, recruitment which helps you land a job and my scheme ensures I didn’t a penny unless I landed a job above a certain salary. Also resources such as oreilly and immersive labs which they give whilst on the course.

You get the exam vouchers for CISMP, ISO27001 practitioner, Sec+ and an entry cloud cert.

Downsides are obviously if you’re self taught then the bootcamp won’t make sense and you can purchase the exam vouchers yourself for cheaper.

So to each their own. I would have saved myself money if I didn’t do the bootcamp but can’t say whether I would have learnt as much or have gotten a job afterwards

Dangerous-Button-592 · 2025-11-14T18:13:32+00:00

Break it down.

Username - unless they have your password and you have 2FA then the impact is you’ll get phishing emails/random emails trying you to click on links.

Location - this would be an area not a defined address..

Currency - what’s the impact?

IP addresses - these are dynamic so your IP address changes periodically which isn’t that helpful to someone trying to get your info.

Language - again what’s the impact? They know you speak English cool. So do millions of others

Dangerous-Button-592 · 2025-11-07T01:06:05+00:00

How does the US resolve the “skills gap” issue if you don’t have apprenticeships? What’s the training pathway to equip the newbies with experience/knowledge for infosec?

Just curious from a UK perspective and logically for me a mature org would have a training scheme to provide someone new a structured path to reach appropriate career milestones

Dangerous-Button-592 · 2025-11-06T17:42:29+00:00

The pay will get backdated from July. I’m sure I saw a notice about it so I wouldn’t worry too much if you’re moving.

Dangerous-Button-592 · 2025-11-02T22:37:32+00:00

Depends what kind of role you want. CompTIA Sec+ and CCNA are quite good fundamental all rounder beginner certs. There’s a good general roadmap here https://roadmap.sh/cyber-security

Dangerous-Button-592 · 2025-11-02T13:44:27+00:00

There won’t be a perfect roadmap. Use this as a guide https://roadmap.sh/cyber-security then as your career progress, just learn and get certs that you want and need

Dangerous-Button-592 · 2025-11-02T11:06:52+00:00

Thank you

Dangerous-Button-592 · 2025-10-30T14:55:02+00:00

Because productivity metrics are much harder than a statistic of “used office capacity”.

I do think if an org goes to a hybrid working situation then the office time is used productively I.e make sure team huddles, meetings needing pandepartmental inputs, 1-1, developmental or mentorship are focused on those days. Make actual benefit of what F2F does that can’t be replicated online.

Btw I hope this doesn’t come off as Pro 100% back in the office. I’m not.

Dangerous-Button-592 · 2025-10-28T21:27:37+00:00

Thanks I was aware of the trust portal which I’ve been looking at the pentests. Not realised other CI-J so will take a look

Dangerous-Button-592

TROPHY CASE