MethodologyEvidence before opinion

How Cybersecurity Under Pressure builds an analysis.

The publication separates what a source proves from what the analysis infers. The objective is not to create certainty where none exists, but to make the evidence, judgement and decision boundary visible.

Facts are cited.

Material factual claims should trace to a source the reader can inspect. Primary and official sources are preferred when they exist.

Interpretation is separated from fact.

Operational impact, threat hypotheses and recommendations may require professional judgement. The analysis should not present an inference as a disclosed fact.

Sector reality constrains the recommendation.

A technically clean security control can be operationally wrong in a plant, vehicle programme or safety-related railway system. Availability, safety, certification and lifecycle constraints remain part of the decision.

Corrections remain visible.

Substantive updates should change the Updated date and, where material, explain what changed. Quietly rewriting the historical record weakens trust.

Source ladder

What the labels mean.

OFFICIAL DISCLOSURE

Vendor, affected organisation or first-party incident disclosure.

GOVERNMENT RECORD

CISA, NVD, ERA or equivalent authoritative public-sector record, advisory or guidance.

STANDARD / GUIDANCE

Regulations, standards and recognised sector guidance used to frame the control or governance implication.

CORROBORATION

Independent reporting or technical research used to validate or extend the primary record.

PRIMARY RESEARCH

Peer-reviewed, laboratory or original technical research used for demonstrated mechanisms, experiments or measured results.

PREPRINT / THESIS

Research that has not been given the same evidential weight as a peer-reviewed publication. Its publication status remains visible.

TECHNICAL PRECEDENT

Older or adjacent research used to establish feasibility or historical context, not as evidence that the current incident followed the same path.

Podcast episodes and LinkedIn posts are related editorial material, not evidence sources. They are linked separately from the source record.

Editorial responsibility

Tools can assist. Accountability cannot be delegated.

Research and drafting tools may be used to organise sources, compare evidence and improve structure. Factual claims still require traceability to cited evidence, and final editorial judgement remains with the author.