An organisation’s ‘security posture’ indicates how robustly it is equipped to avoid, detect and repel cyber threats, based on current information security infrastructure and practices. Given ever-bolder cybercrime, a major review of security posture is now imperative.