B2B Blog - TryHackMe Blog

Sign in Subscribe

B2B Blog

A collection of 23 posts

Cyber leaders, don't measure what you've built. Measure what you can do under pressure.

Sooner or later , the question arrives, usually from the people an organization least wants to improvise in front of such as the auditor, the insurer, the regulator, the board: can your team execute under pressure?

Incident Response training for security teams: What good actually looks like

When it comes to cybersecurity training, three things tend to separate the solutions with actual impact from what just looks good on paper: realism, hands-on practice, and a genuine feedback loop.

Is your security team AI ready? What genuine AI capability looks like

Teams are being asked to protect systems they do not understand end to end, so what usually gets deployed in response is a patchwork of small, disconnected controls rather than a coherent framework built around an actual understanding of the risk

Cybersecurity certifications for teams: How to build a program around Security Analyst Level 1 and 2

The majority of widely recognized security certifications were designed for individual career development, and are detached from the needs of hiring organizations. This creates a specific problem for managers trying to build an actionable understanding of team readiness.

Blue team training for SOC teams: How to move from individual skills to team readiness

A team of individually strong analysts who have never practiced responding together is not a ready team. It's a collection of capable individuals who haven't become an operational unit.

What is a cyber range? The answer has changed.

The cyber range market has productized significantly. But across the board, the market doesn't accommodate most security teams, and forces a compromise on the thing that matters most: continuous improvement.

Cybersecurity training for UK security teams: what enterprise buyers need to know

Before a platform reaches your analysts, it has to clear procurement, satisfy InfoSec, pass legal review, and in many organisations survive a finance sign-off that nobody budgeted for. For UK security teams, that process carries specific requirements.

What is DFIR? Digital Forensics and Incident Response Explained

DFIR combines two distinct specializations: digital forensics and incident response. These disciplines are deeply related, occasionally in tension, and together form the backbone of how organizations understand and survive a serious security breach.

Tabletop templates are not the answer for small security teams

Tabletop exercise templates give small security teams a false sense of readiness. They're generic by design, require a human facilitator to run well, and can't adapt to your stack, your threat landscape, or the way your team actually makes decisions under pressure.

AI risk doesn't care what your job title is

As we were creating our new AI security path, we spoke to leaders across healthcare, finance, automotive, manufacturing and insurance to understand what they were most worried about, and where we could help.

5 Things We Learned About Optimizing SOC Onboarding

Earlier this week, TryHackMe content engineers Niels Deryckere and Gabriel Novaes sat down with Head of Content Engineering, Marta Strzelec to talk about one of the most overlooked problems in security operations: effective onboarding. Here's what came out of that conversation.

What’s more valuable: spotting a breach or explaining why it matters?

What’s more valuable: spotting a breach or explaining why it matters?

The ability to explain what’s happening in the right language for the right audiences within and outside the SOC determines whether security work has any impact at all.

Bad SOC onboarding is frustrating. It’s also expensive.

Every day a new SOC analyst isn't fully operational is a day your coverage has a gap. Multiply that by 11–13 months and you're looking at a business risk. Many great teams are quietly carrying this risk without anyone estimating its true material impact.

Mid-senior SOC practitioners deserve better than a certificate of attendance

You know your SOC team is good. How do you objectively prove it to the wider business?

7 lessons for building cyber security allies: a chat with SSAB’s Eric Andresen

We spoke to Eric Andresen, Senior Manager of Information Security at SSAB, about how he built an internal network of engaged business leaders who serve as "force multipliers" for cybersecurity

You Can Govern AI Without Killing Coding Velocity: Key Takeaways From Our Live Session

You Can Govern AI Without Killing Coding Velocity: Key Takeaways From Our Live Session

Last week we hosted a webinar on a challenge many cybersecurity leaders are facing: governing AI in development. AI tools are unavoidable, but the answer isn’t bans or a free-for-all. The key is practical governance that engages teams beyond the SOC.

Beware the Complacent Training Platform

Cybersecurity training can't afford complacency. Here’s how to spot when a platform is coasting on reputation instead of actually building capability.

In FinServ, Compliance Can’t Replace Capability

Now that the compliance deadlines have passed, SOC teams in Financial Services are being asked more challenging questions about their team’s real capability.

Developers and AI: Security Nightmare or Governance Opportunity?

Developers and AI: Security Nightmare or Governance Opportunity?

A practical look at AI security incidents, governance models, and how to regain control of AI-assisted coding at scale.

Let's Rethink Cyber Security Certifications for Candidates and Managers

Cyber security certifications have had an identity problem for a long time. That gap is only getting wider as LLMs become easily available to provide copy-paste answers. If certifications are going to stay relevant, they need to fundamentally change.

You Don’t Actually Have to Dread Tabletops

Tabletop exercises are widely accepted as essential to incident readiness, yet many security leaders struggle to justify their cost and impact. When exercises are infrequent, overly theoretical, and slow to deploy, they fail to improve real-world response. There is a better way.

Cyber Security Is a Revenue Threat: Key Takeaways From Our Live Session

Cybercrime is a trillion-dollar industry. We hosted a panel discussion on what cybersecurity readiness actually means when attackers operate like businesses. Here are the takeaways the conversation.

How to Do Cybersecurity Workforce Planning: Building, Measuring, and Future-Proofing the Modern Security Team

Cybersecurity has entered a new era one defined not by the scale of threats we face, but by the speed at which those threats evolve. Adversaries innovate faster than traditional hiring cycles, training programmes, or organisational restructuring can keep up. Boards are asking tougher questions. Regulators are increasing expectations. Business