Insights
Research and field notes.
Practical writing from the engineers who build, run and secure critical systems.
Research
Designing an AI investigation tool security teams can trust
CyberCore is a product concept in research at Resolv: an investigation workspace where AI proposes the next step but never acts, never overstates, and never leaves the analyst unable to prove what happened. These are the design principles behind it.
Article · 6 minHealthcare
Designing privacy into health apps
Health data is among the most sensitive information a system can hold. This guide shows how to build consent, minimisation, retention, deletion and access logging into a health application from the first design decision.
Article · 5 minHealthcare
Ransomware readiness for hospitals
Hospitals cannot stop treating patients while systems are recovered. This guide covers the backups, segmentation, paper downtime procedures, incident roles and exercises that let care continue through a ransomware attack.
Article · 5 minEducation
Online exam integrity without surveillance
Most of the integrity of an online examination comes from how it is designed, not from watching candidates. This guide covers question banks, randomisation, timing, anomaly analysis and proportionate proctoring.
Article · 5 minEducation
Teaching IT skills at scale with hands-on labs
Practical IT skills are learned by doing, not by watching. This guide sets out how to choose between virtual and physical labs, sandbox them safely, check work automatically and deliver them over limited bandwidth.
Article · 5 minEducation
Migrating a learning platform without losing a student
A practical guide to moving off a legacy learning management system while keeping every account, password, enrolment and grade intact, with rehearsal, cut-over and rollback planned from the start.
Article · 5 minFinancial services
Operational resilience: setting impact tolerances for critical services
Operational resilience asks a different question from business continuity: not whether systems recover, but how much disruption customers and the financial system can bear. This is a practical method for identifying important services, setting impact tolerances and testing against them.
Article · 5 minFinancial services
Integrating mobile money without losing a transaction
Mobile money integrations fail quietly: a timeout here, a duplicated callback there, and the ledger no longer matches the provider. This guide covers the engineering patterns that keep every transaction accounted for.
Article · 5 minGovernment
What donor-funded digital projects should demand from vendors
Donor-funded systems often outlive the project that paid for them, and the government inherits whatever the contract failed to secure. This is a checklist of what to require in procurement so that ownership, knowledge and control stay with the institution.
Article · 5 minGovernment
Multi-factor authentication for public servants, when the constraints are real
Passwords alone no longer protect government email, payroll or case-management systems. This guide sets out how to choose and roll out multi-factor authentication where smartphones, connectivity and shared devices cannot be taken for granted.
Article · 5 minGovernment
Digitising national registries without losing the paper trail
Moving a civil, land or business registry from paper to a database is a records-management problem before it is a software problem. This is a practical guide to doing it without breaking the chain of evidence that gives a registry its authority.
Article · 5 min