Your business

Transformed

Your business

Transformed

Our aim is to realise increased growth and cost savings through digital transformation, as well as creating a greater impact on every individual connected to your business. 


What makes us different from other consultancies is our team. We only employ senior experts who have years of experience tackling real-world challenges.


Our purpose is to help our clients make a better impact on the world.

Tech Revolution: How AI is Transforming the Digital Landscape


Explore how AI is revolutionising industries, enhancing innovation, and transforming the digital landscape in unprecedented ways.

AI co-pilot
by Jason Jennings 28 July 2025
Jason Jennings | Elevate your project management with AI. This guide for senior leaders explains how AI tools can enhance project performance through predictive foresight, cognitive collaboration, and portfolio intelligence. Unlock the potential of AI in your organisation and avoid the common pitfalls.
A smooth golf-ball top of a modern building against a neon sky
by Duncan Clubb 10 September 2024
In a previous article, Building AI-ready Infrastructure, we looked at the challenges that face the builders of digital infrastructure to create the massive engines that will power the ‘AI Revolution’ – in particular, the mega-data centres that will host the training systems used in Generative AI platforms like ChatGPT.  Most of the attention in the data centre industry is on these monsters, but there is more to it that we need to consider. This article looks at the other uses, applications, and implications of AI, and the infrastructure required to maintain them. The Growth of Industrial AI There are many flavours of AI, and although much of the current focus is on Generative AI, commercial applications use all sorts of other techniques to get the benefits that AI can offer. Indeed, there are some AI experts who think that too much emphasis is being given to the prominent large language models, and that the market will require a more diverse model for deploying infrastructure that will support real-world applications. There are many examples of industrial and manufacturing applications using AI already to optimise, for example, production-line efficiency in factories. These systems take data from sensors and devices (e.g. cameras), and then control the manufacturing processes in real time to improve efficiency, or to reduce the use of raw ingredients – a great example being the use of specialist glues in the automobile industry for sticking windscreens to car bodies – an AI platform has been in use to reduce the amount of glue used without compromising the efficacy of the bond. This may sound, trivial but the quantities used globally mean that even small proportional savings can amount to huge monetary savings. This type of application, used across multiple industries, has enormous potential for saving precious resources (or money), and many industries have been using these techniques for years. However, it is mostly the large manufacturers and processing companies that have been able to exploit this. Deploying this type of system can be expensive and usually entails situating a lot of processing power close to the production line. This excludes smaller enterprises from being able to take advantage as the barrier to entry is too high and involves maintaining IT kit that is expensive and difficult to look after.
by Duncan Clubb 6 September 2024
Artificial Intelligence (AI) is the hottest topic in technology for many reasons, good and bad, but it’s happening and it’s here to stay, so how do we build the infrastructure necessary to support it? To start with, we should recognise that there are many forms of AI. The one that has created the most buzz is generative AI, as seen in ChatGPT, Meta's LLaMA, Claude, Google’s Gemini, and others. Generative AI relies on LLMs (Large Language Models) which have to be trained using vast amounts of data. These LLMs sit in data centres around the world, interconnected by vast fibre networks. The data centre industry has not stopped talking about AI for at least 18 months, as it gears up for an ‘explosion’ in demand for new capacity. Some of the most respected voices in technology have predicted immense amounts of growth in data centre requirements, with predictions of triple the current capacity within 10 years being at the conservative end. That’s three times the current global data centre market, which has taken 30 years or more to get to where it is today. And, when we say growth, we’re talking about power. AI systems will require three times more electricity than data centres currently consume. Depending on who you ask, that’s about 2-4% of today’s global electricity production. And we’re talking about tripling that, or more. Data Centres So, what is ‘AI-ready infrastructure’ and how are we going to build it? The two key elements are data centres (to house the AI systems) and networks (to connect them with the rest of the world). LLM training typically uses servers with GPUs (the chip of choice for AI) and, for various technical reasons, these work best when in close physical proximity to each other – in other words, GPUs work best in large numbers in large data centres. Not just that, but the new generations of GPUs work best in dense data centres, meaning that each rack or cabinet of AI kit needs a lot of power. Most data centres are designed to accommodate older kit that is not so power hungry. The average consumption globally is about 8kW per rack, although many still operate at about 2kW per rack. The latest nVidia (the leading GPU manufacturer) array needs a colossal 120kW per rack. The infrastructure inside a data centre designed for these beasts is complex: the cooling systems (GPUs run very hot) and electrical distribution systems are much harder to design and set up, and are also expensive. So, data centres for AI training systems are mostly going to be new, as adapting older facilities is a non-starter. So, where do you put them? Finding land next to the vast amounts of electricity required is increasingly difficult in many European countries, especially in the UK. Most of the utility grids in Europe are severely lacking in spare capacity, and building new grid connections and electricity generation is a slow and expensive process. The answer might be to locate these new AI data centres near new renewable energy generation sites, but those are few and far between, so land with access to power now carries a hefty premium. Small nuclear reactors could also be an answer but might take a few years to materialise – we know how to build them (witness the nuclear submarine industry) but getting planning permission to put them on land is another matter. All in all, the data centre industry seems to be at least a few years away from being able to provide the massive upgrade in capacity that is expected. Even solving the land/power problem leaves the issue of actually building a new scale of data centre, 10 or 20 times bigger than what most would consider to be a gigantic site today. It can be done, we can solve the engineering challenges, but these are huge construction projects. Networks What about the networks? Actually, although very little real research has been done on the impact of large-scale AI rollouts on existing networks, we might be in a better position. The fibre networks in the UK and many European countries have benefited from significant investment over the last few years, so coverage is a lot better than it used to be. That does not mean that fast and large fibre routes, which will be a necessity for most AI systems, are all there, but it will be easier to build out new capacity than it will be to find power. Still, what we really need is some serious research into the amount of data that will need to be moved about and how that maps with existing network infrastructure. All in all, we have more questions than answers. Some people in the infrastructure industry are sceptical that things will ever get to the scale that some are predicting, but most of us do expect it to happen – it’s just a matter of time, and the race has already begun. Cambridge Management Consulting Duncan Clubb is a Senior Partner at Cambridge Management Consulting, specialising in data centre and edge compute strategy. Duncan has extensive experience as an IT consultant and practitioner and has worked with many leading organisations in the financial, oil and gas, retail, and healthcare sectors. He is widely regarded as a leading expert and is a regular speaker at industry events. If you or your organisation require support preparing your Digital Infrastructure for the emerging AI-industry, you can read about our array of Data Centre services, and get in touch with Duncan Clubb, through our designated Telecoms, Media, and Technology service page.
Zoe Webster with office background and blue tint
by Zoë Webster 4 September 2024
This month we put the spotlight on Zoë Webster, Associate Consultant for AI, Digital & Innovation With over two decades in the Artificial Intelligence (AI) sphere, Zoë Webster is renowned as a practitioner and leader, recently recognised as one of AI Magazine’s Top 10 Women in AI in the UK and Europe (2024). At Cambridge Management Consulting, Zoë takes on the pivotal role of leading our AI initiatives and driving digital innovation. Leveraging her extensive experience in developing and applying novel AI techniques across diverse sectors such as retail, cyber security, defence, and health, Zoë is instrumental in shaping our AI strategy and implementation. Her unique ability to bridge the gap between the public and private sectors, coupled with her insights on the opportunities and risks of emerging technologies like Large Language Models, positions her perfectly to guide our clients through the complexities of digital transformation. Zoë’s expertise ensures that we remain at the forefront of AI advancements, delivering cutting-edge solutions that drive sustainable growth and innovation for our clients. An Introduction to Zoë's work Having been in the AI space for over 20 years, the past couple of years, since the launch of ChatGPT and the catapulting of AI into the public consciousness, have been in part eye-opening and in part déjà vu for me. The scale and reach are different to anything we have seen to date – I realised this when friends and family of all ages and backgrounds are talking about AI – but it is part of the well-cited technology hype pattern we have seen before in AI as specific techniques show promise (expert systems and neural networks, for example) and organisations see them as a way to solve current problems/challenges. I am fortunate in that I got into AI early. I describe myself as classically trained in that I learnt and experimented with the broad range of AI algorithms on different applications in my early career, so I understand that AI has much more to offer than whatever technique is currently in vogue. After developing and demonstrating novel AI techniques in a range of applications, I got the opportunity to learn more about the role of innovation to the wider economy and society through my time at Innovate UK, now part of UK Research and Innovation. From that, I understand the impact of technology and how business innovation can be accelerated given the right conditions and collaborations. My COVID-19 story includes the juggle of leading Innovate UK’s first COVID-19 innovation competition, to get critical grant funding out to businesses to ensure innovation could continue during this time, while attempting to home-school two children. During lockdown I joined BT, where I built and led their AI Centre of Enablement to scale up AI development and deployment across the company. Developing a machine learning model as a proof-of-concept is one thing, but it takes a whole other set of skills and approaches to successfully and safely deploy that model at scale and with real users, and then to repeat that for other models for different applications. Luckily, my breadth of experience as well as my deep AI expertise enabled me to set up and lead the team to specify and address dozens of AI opportunities. Even as the current developments in AI fail to quite live up to all the hype for everyone, organisations have an opportunity to apply the best and most relevant advancements to generate value, whether that is through customer acquisition, better customer service, better colleague experience, greater productivity or improved sustainability. This goes beyond the technology but to AI governance too, which means thinking carefully about how to practice AI responsibly. Working with Cambridge Management Consulting, I am excited to use my breadth and depth to help more organisations make the most of AI to create value in meaningful ways. To find out more about our AI, digital and innovation services, go to our Innovation service page or contact Zoë using the form below.
A couple standing in front of a neon portal to representing stepping into an AI future
by Tom Burton 25 April 2024
In this article, Tom Burton, a cyber security expert and technology thought leader, addresses the historical roots of our implicit trust in computers. As AI models increasingly begin to mimic human traits such as memory and learning, he asks how we can better manage risk and evaluate trust in an era of AI technology.
Picture of data centre hubs in a network that looks like a city
by Duncan Clubb 11 September 2023
Authors
A surreal, futuristic city with tall rectangular towers in green and pink tones, mirrored perfectly.
by Dave Salmon 28 April 2025
Pioneering Technologies for the Future of Urban Transformation Smart cities might sound like a utopian vision from the 1950s; something that sounds already out-of-date and perhaps even naive in our current geopolitical climate. But as urban spaces gradually implement a a series of technological leaps, the smart city emerges as a potential reality, offering a new way to unite communications with infrastructure via real-time feedback. Smart cities could dramatically enhance our quality of life, efficiency, and environmental stewardship. Given that cities are significant contributors to global emissions — responsible for approximately 70% of greenhouse gases — they will play a critical role in reaching net zero. Reflecting insights from the last Smart City Expo in Barcelona (November 2024) and a range of ambitious projects across the UK, this article delves into the strategic alignment of technology, infrastructure, and sustainability shaping today's urban landscapes. What Defines a Smart City? A smart city is fundamentally ‘a municipality that uses information and communication technology to increase operational efficiency, share information with the public, and improve the quality of government services and citizen welfare.’ While definitions vary, the overarching mission is to optimise city functions, drive economic growth, and enhance the quality of life through technology and data analysis. Smart city initiatives typically require three critical components: Networks of sensors and citizen participation to collect data Connectivity linking these networks to government systems Open data sharing to make results, changes, and improvements accessible to the public Developing this underlying infrastructure is complex and expensive. Crucially, it depends on strong relationships between government, the private sector, and citizens, as most of the work to create and maintain these data-driven environments happens through collaboration and public-private partnerships.
A graphic of a Classical statue head wearing a VR headset
by Duncan Clubb 23 April 2025
Edge computing, 5G, IoT and AI are contributing to a paradigm shift in retail that will imagine new possibilities made commercially viable by real-time data processing. In this article, we look at the convergence of these technologies and how they will offer a radical new vision of our high street by offering customers exciting new experiences that can rejuvenate in-store shopping and retail spaces. First, in Part 1, we look briefly at each technology and discuss the technical advantages they offer and how this supports new types of customer experience. Then in Part 2 we look at industry predictions about how the retail space might evolve over the next decade. Part I Edge Computing Edge computing involves processing data near its source rather than in a centralised location. In retail, this means deploying IT infrastructure in or near store venues where consumers interact with products. This ecosystem enables real-time decision-making and personalised customer experiences by analysing data from sensors and IoT devices within the store. Edge computing is a concept that applies to an integrated network of processing units, data centres and sensors that handle data close to the user. Micro Data Centres The compute part of edge computing needs to be housed in proper data centre facilities, to ensure that the expensive server equipment, especially those used by AI systems, are kept in the optimum conditions — this helps keep maintenance and operational costs down. Even though edge compute systems can be relatively compact, retailers will mostly be unwilling to give up valuable floor space for the IT equipment and its associated infrastructure (like cooling and electrical systems), so the more likely scenario is that smaller data centres will be used that can be located close by but in back-of-house areas, such as loading bays, car parks, warehouse areas and so on. These will often be operated as cloud services so that multiple retailers can benefit from edge compute without having to bear the upfront capital cost, and, most importantly, the ongoing maintenance required to keep them operational. 5G 5G networks offer high-speed connectivity and low latency, which are crucial for supporting advanced retail technologies like augmented reality (AR) and Internet of Things (IoT) applications. The increased bandwidth allows for seamless integration of online and offline shopping experiences, enabling features like virtual try-ons and real-time product comparisons. This connectivity supports personalised marketing strategies that take place in real time and deliver targeted promotions in store. Internet of Things (IoT) The Internet of Things (IoT) refers to a network of interconnected devices, machines, and sensors that collect, store, and transfer data over the internet. These devices are embedded with sensors, software, and network connectivity, allowing them to communicate with each other and with other internet-enabled systems. IoT plays a crucial role in enhancing the retail experience by providing real-time data on customer behaviours, security risks, buying preferences, inventory supply levels and daily operations. IoT devices will principally include cameras but also a range of other sensors such as RFID tags and smart shelves.
Aerial view of a countryside town at night
by Clive Quantrill 23 April 2025
How to Connect Rural Britain and the Hardest-to-Reach Customers The lack of rural connectivity in the UK has become a pressing issue , creating a digital divide that impacts individuals, businesses and farmers. Modern society relies on digital services, and the lack of access to reliable, high-speed internet is a pervasive social issue that results in digital exclusion for communities, depriving them of fundamental services like online banking, health care, and education. This lack of access has a further impact on social mobility, particularly when around 37% of workers in the UK spend at least one day a week working remotely. In 2021 the Public Accounts Committee published a report on improving broadband which states ‘1.6 million UK premises, mainly in rural areas, cannot yet access superfast [internet] speeds’. Since then, we are happy to report that there has been some progress. As of early 2025, approximately 98% of all UK households have access to high-speed broadband (defined as speeds of 30 Mbps or higher) . In rural areas, that figure is 89% — a decent improvement in the last few years. However, the gap is larger when we consider gigabit speeds: only 52% of rural households can connect to gigabit-capable broadband, compared to 87% in urban areas There is still a significant gap to plug, but things are moving in the right direction. This allows the focus to shift, in part, to the next phase: establishing a modern digital infrastructure which can support a digital-first strategy in public services, as well as encouraging local innovation, such as smart city programmes. The hope is that this infrastructure will drive inward investment which then create a virtuous circle, where as more infrastructure is built, more innovative businesses are attracted to the region, which in turn drives demand for more advanced infrastructure. In this article we look at the improvements in rural connectivity and the programmes and innovations which are most likely to have a social impact.
A satellite over planet Earth with the sun glowing in the top left
by Steve Tunnicliffe 15 October 2024
The Satellite Industry is in a Period of Momentous Transformation The satellite industry is going through a period of momentous transformation with the emergence of new entrants and new technologies in every segment of the value chain. For decades satellite communications have been dominated by a handful of GEO satellite manufacturers, satellite operators and ground segment manufacturers with almost a cottage-industry-like network of service providers and value-added manufacturers (BUCs, LNBs and antennas). This has been a linear and predictable business model with entirely proprietary technologies. We now see the emergence of new Non-Geostationary Orbit (NGSO), or multi orbit players in LEO, MEO and HEO building completely vertically integrated systems. This shift has significantly driven down capacity pricing: the price of satellite bandwidth for data services has dropped 77% over five years according to analysts Novaspace, formerly known as Euroconsult. Starlink, as the first to market, is making waves by disrupting market sectors historically monopolised by the established GEO players such as maritime, aero and enterprise connectivity. Two years ago, the industry would have dismissed Starlink's impact on maritime or aero connectivity segments. The sentiment was that Starlink has ‘no CIR’ (Committed Information Rate) and therefore would not be considered ‘reliable’ for mobile or critical communications. This notion has since been overturned and the naysayers have paid a price with a significant impact to revenues in maritime—the cruise industry in particular—with Starlink now making inroads into aviation and previously inviolable segments like defence. Starlink has also revolutionised satellite manufacturing, leveraging new technologies such as 3D printing to mass-produce satellites at a phenomenal rate, reducing costs to between $250,000 and $500,000 per satellite. The race is on, with Elon Musk’s Starlink trying to acquire as many subscribers as possible before the challengers like Amazon's Kuiper and Telesat's Lightspeed emerge. Forrester's Digital has predicted that SpaceX’s Starlink broadband-by-satellite system is likely to end 2025 with around 8 million customers (it ended 2024 with approximately 5 million), a remarkable growth rate when you consider that each of the leading GEO satellite operators typically have around 25,000 enterprise VSAT terminals activated. We also see the emergence of Small Sat and MicroGEO manufacturers disrupting traditional commercial models with innovations like satellite-as-a-service. This technology provides additional or targeted capacity for defence and government in hotspot areas. Twenty-five years ago, building and launching a satellite would have cost at least two billion USD. Now we see them being built and launched at a fraction of that cost (circa $60 million), reducing the price per gigabit equal to or below fibre. Starlink has also been fundamental to reducing launch costs. In 1981, launch costs were $147k per kilogram of payload. Starlink’s current generation of rockets have brought this down to $2300 and with the introduction of their new Starship rocket, Elon Musk is talking about a price as low as $100 per kilogram. This scale of reduction in launch costs is driving the democratisation of space by allowing new use cases for space to emerge. The satellite industry is also seeing unprecedented consolidation, coopetition and collaboration, creating a range of new offers to consumers, enterprise and governments. Significant transactions include: In April 2024, SES announced its intention to acquire rival Intelsat. If and when this completes, it will be a significant transaction In May 2023, Viasat completed its acquisition of Inmarsat In October 2023, Eutelsat and OneWeb completed their merger transaction In March 2024, prior to the SES announcement, Intelsat extended its partnership with competitor Eutelsat-OneWeb for LEO services.
Abstract neon lines from a spinning object
by David Jones 11 September 2024
The Environmental Trade-off in Digital Infrastructure Development Digital development presents a double-edged sword. On the one hand, it boosts productivity through remote work, AI, and automation, with the potential to lift billions out of poverty. Yet, at the same time, the rapid growth of infrastructure required to support these developments will need a corresponding growth in decarbonisation to avoid a climate catastrophe. The German Advisory Council on Global Change highlights this contradiction: “uncontrolled digital change threatens to undermine the important foundations of our democracies” [1] . This article takes an in-depth look at how global institutions push the mantra of ‘digitisation’ as a developmental priority for nations while failing to adequately acknowledge the huge climate impact of this enterprise. This obscuring of consequences eases the way for a rapid extension of infrastructure that consumes billions of gallons of non-renewable resources annually. In this article, I suggest that detailed modelling and forecasting are one of the major pillars needed to address this dichotomy. I will set out an approach and resources for modelling the digital demand to design a more predictive approach to digital infrastructure builds. The Environmental Impact of a Data Explosion The amount of data flowing over global digital infrastructure has exploded 300-fold over the last 10 years [2] , with the next 20 years expected to see faster-paced growth on the back of the continued digitisation of life and entertainment, as well as from huge numbers of people in developing countries coming online for the first time. This explosion is a good thing—the UN’s Sustainable Development Goal (SDG) 9 aims to provide universal and affordable access to the internet by 2030 [3] . Access to the internet and digital services strongly correlates with improvements in education, healthcare and women’s empowerment. As increasing numbers of people come online, and the scale of their data use grows, a variety of digital infrastructure will need to be built or scaled up if the digital ambitions of countries and trading blocks are to be realised. Connectivity is one part of the solution—increased coverage of broadband, mobile and satellite will undoubtedly support these targets. But, ultimately, all that data traffic needs a destination point, in the form of data centres, which, unfortunately, require vast sums of power. In the USA, data centres are expected to consume 380TWh of electricity by 2027 [4] , almost 9% of the country’s total consumption. Ireland faces an even larger burden with digital infrastructure expected to consume 33% of the country’s total electricity by 2026 [5] , and potentially 70% of the country’s electricity by 2030 [6] . Ireland and the USA have reliable national power grids, but this is not necessarily the case in developing countries. In Nigeria, data centres and mobile towers rely heavily on diesel generators, burning nearly a billion litres of diesel annually. This is a country where the average annual mobile data traffic per subscription is only 6GB per year [7] , just over 0.1% of the average traffic from a UK subscriber. To achieve universal internet access for a population that is estimated to cross the 300 million threshold by 2036 will require an exponential growth in digital infrastructure. If Nigeria remained dependent on diesel generators, and data consumption on a per-person basis reaches the UK’s level of data traffic, then the country would consume 9 trillion litres of diesel a year—over 100 times the amount of diesel consumed by the entire world in 2022 [8] . This single event would create a climate catastrophe—even if the UK, France, Germany, Spain and the Nordics reduced their CO2 emissions to zero, this would offset less than half of this increase. This is of course the worst-case scenario. Grid infrastructure has developed across West Africa and there are a multitude of projects which are building green energy infrastructure. But there has yet to be a major MNO, TowerCo or data centre company which has shown significant year-on-year reductions in emissions. It is unjust to expect developing nations to slow down or halt their digitisation while developed countries reap the benefits of a digitised economy. Instead, alternative approaches to managing global emissions are needed. And this is where predictive analytics become a crucial tool for forecasting future demand. These tools and models will support the development of alternative strategies for power generation and implement methods to reduce emissions from digital infrastructure. A predictive tool that models national network traffic growth and compares it to projected digital infrastructure expansion will help identify underserved areas early, enabling better planning of digital and power infrastructure. Early planning allows for the integration of renewable energy, natural cooling solutions, and partnerships with sustainability experts to reduce emissions. Creating the Model: Traffic vs Digital Infrastructure To address these challenges, David Jones, an Associate of Cambridge Management Consulting, has developed a comprehensive model that examines global internet traffic on a country-by-country basis and compares it to existing and planned digital infrastructure within those countries. This model considers several factors: Population Growth: Increasing numbers of internet users Economic Growth: Rising wealth levels leading to more internet usage Internet Penetration: A growing proportion of each country’s population getting online Usage Patterns: Moving towards video transmission over the internet significantly increasing traffic B2B and M2M Traffic: Business-to-business and machine-to-machine Internet traffic growth This model projects internet traffic growth over the next 20 years, if data traffic growth follows a logarithmic curve, increasing at a decreasing rate. In Germany and other developed nations, the rate of traffic growth slows once it reaches a certain threshold, as there is a natural limit to how much HD video a person can consume. By comparing these projections with a database of over 10,000 data centres, including locations and power consumption, it is possible to identify regions with underdeveloped or overdeveloped digital infrastructure. Note: This model does not account for the growth in generative AI, which adds further demand on a strained digital infrastructure. For more information on this subject, see our recent article: Building an AI-ready infrastructure . Initial Results When we run this model and compare countries, what immediately becomes clear is the difference in scale between the growth of digital infrastructure and internet traffic. Ireland’s digital infrastructure is increasing at a rate faster than its internet traffic, while in countries like Bangladesh and Algeria internet usage is growing ten times faster than the digital infrastructure that supports it. David has modelled 76 countries and will be completing another 50 over the next few months. So far, the CAGR of internet traffic is around 30%, and the CAGR of data centres is around 12%. What’s clear from this graph is how the difference in growth rates compounds over time, and that as the years progress the gap between traffic and infrastructure widens. This shows that over time the availability of infrastructure will become a massive limiting factor to digital experience. Eventually, the lack of adequate infrastructure may even prevent citizens from accessing essential internet services.
A smooth golf-ball top of a modern building against a neon sky
by Duncan Clubb 10 September 2024
In a previous article, Building AI-ready Infrastructure, we looked at the challenges that face the builders of digital infrastructure to create the massive engines that will power the ‘AI Revolution’ – in particular, the mega-data centres that will host the training systems used in Generative AI platforms like ChatGPT.  Most of the attention in the data centre industry is on these monsters, but there is more to it that we need to consider. This article looks at the other uses, applications, and implications of AI, and the infrastructure required to maintain them. The Growth of Industrial AI There are many flavours of AI, and although much of the current focus is on Generative AI, commercial applications use all sorts of other techniques to get the benefits that AI can offer. Indeed, there are some AI experts who think that too much emphasis is being given to the prominent large language models, and that the market will require a more diverse model for deploying infrastructure that will support real-world applications. There are many examples of industrial and manufacturing applications using AI already to optimise, for example, production-line efficiency in factories. These systems take data from sensors and devices (e.g. cameras), and then control the manufacturing processes in real time to improve efficiency, or to reduce the use of raw ingredients – a great example being the use of specialist glues in the automobile industry for sticking windscreens to car bodies – an AI platform has been in use to reduce the amount of glue used without compromising the efficacy of the bond. This may sound, trivial but the quantities used globally mean that even small proportional savings can amount to huge monetary savings. This type of application, used across multiple industries, has enormous potential for saving precious resources (or money), and many industries have been using these techniques for years. However, it is mostly the large manufacturers and processing companies that have been able to exploit this. Deploying this type of system can be expensive and usually entails situating a lot of processing power close to the production line. This excludes smaller enterprises from being able to take advantage as the barrier to entry is too high and involves maintaining IT kit that is expensive and difficult to look after.
by Duncan Clubb 6 September 2024
Artificial Intelligence (AI) is the hottest topic in technology for many reasons, good and bad, but it’s happening and it’s here to stay, so how do we build the infrastructure necessary to support it? To start with, we should recognise that there are many forms of AI. The one that has created the most buzz is generative AI, as seen in ChatGPT, Meta's LLaMA, Claude, Google’s Gemini, and others. Generative AI relies on LLMs (Large Language Models) which have to be trained using vast amounts of data. These LLMs sit in data centres around the world, interconnected by vast fibre networks. The data centre industry has not stopped talking about AI for at least 18 months, as it gears up for an ‘explosion’ in demand for new capacity. Some of the most respected voices in technology have predicted immense amounts of growth in data centre requirements, with predictions of triple the current capacity within 10 years being at the conservative end. That’s three times the current global data centre market, which has taken 30 years or more to get to where it is today. And, when we say growth, we’re talking about power. AI systems will require three times more electricity than data centres currently consume. Depending on who you ask, that’s about 2-4% of today’s global electricity production. And we’re talking about tripling that, or more. Data Centres So, what is ‘AI-ready infrastructure’ and how are we going to build it? The two key elements are data centres (to house the AI systems) and networks (to connect them with the rest of the world). LLM training typically uses servers with GPUs (the chip of choice for AI) and, for various technical reasons, these work best when in close physical proximity to each other – in other words, GPUs work best in large numbers in large data centres. Not just that, but the new generations of GPUs work best in dense data centres, meaning that each rack or cabinet of AI kit needs a lot of power. Most data centres are designed to accommodate older kit that is not so power hungry. The average consumption globally is about 8kW per rack, although many still operate at about 2kW per rack. The latest nVidia (the leading GPU manufacturer) array needs a colossal 120kW per rack. The infrastructure inside a data centre designed for these beasts is complex: the cooling systems (GPUs run very hot) and electrical distribution systems are much harder to design and set up, and are also expensive. So, data centres for AI training systems are mostly going to be new, as adapting older facilities is a non-starter. So, where do you put them? Finding land next to the vast amounts of electricity required is increasingly difficult in many European countries, especially in the UK. Most of the utility grids in Europe are severely lacking in spare capacity, and building new grid connections and electricity generation is a slow and expensive process. The answer might be to locate these new AI data centres near new renewable energy generation sites, but those are few and far between, so land with access to power now carries a hefty premium. Small nuclear reactors could also be an answer but might take a few years to materialise – we know how to build them (witness the nuclear submarine industry) but getting planning permission to put them on land is another matter. All in all, the data centre industry seems to be at least a few years away from being able to provide the massive upgrade in capacity that is expected. Even solving the land/power problem leaves the issue of actually building a new scale of data centre, 10 or 20 times bigger than what most would consider to be a gigantic site today. It can be done, we can solve the engineering challenges, but these are huge construction projects. Networks What about the networks? Actually, although very little real research has been done on the impact of large-scale AI rollouts on existing networks, we might be in a better position. The fibre networks in the UK and many European countries have benefited from significant investment over the last few years, so coverage is a lot better than it used to be. That does not mean that fast and large fibre routes, which will be a necessity for most AI systems, are all there, but it will be easier to build out new capacity than it will be to find power. Still, what we really need is some serious research into the amount of data that will need to be moved about and how that maps with existing network infrastructure. All in all, we have more questions than answers. Some people in the infrastructure industry are sceptical that things will ever get to the scale that some are predicting, but most of us do expect it to happen – it’s just a matter of time, and the race has already begun. Cambridge Management Consulting Duncan Clubb is a Senior Partner at Cambridge Management Consulting, specialising in data centre and edge compute strategy. Duncan has extensive experience as an IT consultant and practitioner and has worked with many leading organisations in the financial, oil and gas, retail, and healthcare sectors. He is widely regarded as a leading expert and is a regular speaker at industry events. If you or your organisation require support preparing your Digital Infrastructure for the emerging AI-industry, you can read about our array of Data Centre services, and get in touch with Duncan Clubb, through our designated Telecoms, Media, and Technology service page.
Glistening subsea cables that look like neurons
by Erling Aronsveen 30 August 2024
In 2011, the United Nations (UN) declared their Broadband Advocacy Targets, in which they promised to Make Broadband Policy Universal by 2025. Given that over 90% of all internet traffic passes through submarine cable systems, such networks have become a hugely influential factor in this goal, and thus a significant global and political force. Since the inception of telegraph cables in the mid-to-late 19th century, the prevalence of geopolitics in the submarine cable industry has been intrinsic and impossible to ignore. It is no coincidence, after all, that the current network of cables traces the same lines as the original trade routes: both possess the shared purpose of connecting multiple regions across numerous continents in the shortest time – to boost economies and promote international directives. The telegraph cables of the British Empire were exactly that, a way to consolidate power and trade throughout vast geographical distances. Thus, as we come rapidly closer to the UN’s 2025 target, this article will focus on the positive impacts which are created and accelerated by access to undersea connectivity. In doing so, we will explore different regions, how they are currently benefitting from the UN’s path toward a more connected globe, as well as opportunities for improvement on the horizon. Repeatered Cables Before going into greater detail on the regions that current subsea networks traverse, and the positive impacts they bring, it is worth hovering briefly on the technical make-up of these cables, particularly the component of ‘repeaters’. Also known as optical amplifiers, repeaters are present at intervals along submarine cables which are longer than several hundred kilometres (as opposed to those used within lakes or rivers, etc.) and are built within the ocean floors, often several kilometres deep. Given the length of these cables, repeaters are used to amplify information-carrying wavelengths to sustain the quality of received optic signals over such long distances. However, given their housing in such a harsh and inaccessible environment, redundancy – the technical term for having a backup or recovery option for failed or damaged subsea cables – becomes crucial. Repairing repeatered submarine fibre cables can be incredibly capital intensive and complex, and thus it is important to ensure the strength and stability of subsea cable networks to protect the longevity of the benefits outlined below.
by Duncan Clubb 27 November 2023
The data centre industry is currently experiencing an unprecedented increase, and while air cooling has been the conventional choice for keeping them in optimal conditions for many years, that is now being replaced by liquid cooling.
Picture of data centre hubs in a network that looks like a city
by Duncan Clubb 11 September 2023
Authors

Our complete digital
infrastructure
 solutions


We create unique turnkey solutions for digital infrastructure projects and large-scale challenges encompassing subsea, data centres, broadband infrastructure and satellite, and a broad range of services such as strategy, data & AI, project management, procurement and more.

FIND OUT MORE
Display Ad about our Diamond Sponsorship of Cambridge Tech Week

Go to our #CamTechWeek microsite

Featured Capabilities


Neon 'Open' sign in business window
by Tom Burton 19 June 2025
SMEs make up 99% of UK businesses, three fifths of employment, over 50% of all business revenue, are in everyone's supply chain, and are exposed to largely the same threats as large enterprises. How should they get started with cyber security? Small and Medium sized Enterprises (SME) are not immune to the threat of cyber attacks. At the very least, if your business has money then it will be attractive to criminals. And even if you don’t have anything of value, you may still get caught up in a ransomware campaign with all of your data and systems made inaccessible. Unfortunately many SMEs do not have an IT team let alone a cyber security team. It may not be obvious where to start, but inaction can have significant impact on your business by both increasing risk and reducing the confidence to address new opportunities. In this article we outline 5 key questions that can help SMEs to understand what they need to do. Even if you outsource your IT to a supplier these questions are still relevant. Some can’t be delegated, and others are topics for discussion so that you can ensure your service provider is doing the right things, as well as understanding where their responsibilities stop and yours start. Q1: What's Important & Worth Defending Not everything needs protecting equally. In your personal life you will have some possessions that are dear to you and others that you are more laissez-faire about. The same applies to your digital assets, and the start point for any security plan needs to be an audit of the things you own and their importance to your business. Those ‘things’, or assets, may be particular types of data or information. For instance, you may have sensitive intellectual property or trade secrets; you may hold information about your customers that is governed by privacy regulations; or your financial data may be of particular concern. Some of this information needs to be protected from theft, while it may be more important to prevent other types of data from being modified or deleted. It is helpful to build a list of these assets, and their characteristics like the table below:
by Pete Nisbet 3 February 2025
In their 2020 report, the Climate Change Committee emphasised the importance of local authorities in national decarbonisation efforts and the UK’s journey to net zero. Quoting the capacity to impact roughly one third of UK emissions, the report highlighted the significant remit of local authorities, including local transport, social housing, and waste, as well as their influence over local businesses and communities. Unlike private entities and businesses – which also contribute significantly to UK emissions yet often exhibit limited willingness to respond* – local authorities have demonstrated a clear commitment to addressing climate change. Out of 394 local authorities, 327 have declared a climate emergency, with 114 setting net-zero targets and 280 developing actionable plans. This highlights the readiness of local authorities to act; however, translating this enthusiasm into meaningful outcomes requires clearer direction and support from central government. While the new government has shown a willingness to address these challenges, the reality is that news policies and funding mechanisms take time to develop and implement. Bridging this gap between ambition and action will be crucial to unlocking the full potential of local authorities in driving the UK’s net-zero agenda. One stand-out and wide-reaching solution to this is climate technology . With the ability to process data more effectively, identify problems faster, and test solutions virtually, technology provides an efficient, transformative vessel for decarbonisation and net zero strategies. In a recent survey, 40% of senior executives said they believe that digital technologies are already having a positive impact on their sustainability goals. And, with the ability to initiate significant carbon reductions across energy, materials, and mobility, and save money at the same time, climate tech has the potential to provide the public sector with the resources it needs toward net zero. *According to a recent analysis of the FTSE 250 conducted by our sustainability sister-company, edenseven, 41% of the FTSE 250 do not have a net zero target, and those who do have delayed it by an average of 13 months. Climate Technology According to a study by ICG, decarbonisation is accelerated in heavily digital economies, but with no risk or loss to finances. Between 2003 and 2019, the most digitalised economies in the EU reduced their greenhouse gases (GHGs) by 25%, while continuing to grow their economies by 30%. For comparison, the least digital economies reduced their GHGs by only 18%, and grew their economies by the same amount. Climate technology can be categorised under three main areas: Decision Making Technologies (such as Digital Twin, Artificial Intelligence, and Machine Learning) Enabling Technologies (Cloud, 5G, Blockchain, Augmented/Virtual Reality, etc.) And Sensing & Control Technologies (eg. Internet of Things, Drones & Imaging, and Automation & Robotics) In this article, we will discuss how each technology can be, and is being, specifically applied to climate strategies, and ultimately how these practices can be leveraged to benefit the Public Sector. Enabling Technologies By increasing efficiency, Enabling Technologies have the potential to accelerate decarbonisation with specific applications in the energy sector. For example, in a study by the World Economic Forum which placed the impact of digital technologies at a reduction of 8% on GHGs by 2050, they named 5G as a boost to energy efficiency in highly networked environments. Similarly, blockchain technologies promote circularity, transparency, and security, all of which can be used to track carbon emissions within an organisation. This is particularly unique for its ability to measure Scope 3 emissions including the supply chain, which are notoriously difficult to monitor as they are indirect emissions, as opposed to Scopes 1 and 2 which are associated directly with an organisation’s operations. Cloud technology also has numerous applications in climate endeavours, including grid management, smart meters, asset planning tools, solar propensity modelling, and methane tracking. Sensing Technologies Sensing technologies such as Internet of Things (IoT)-enabled sensors, imaging, and geolocation have the capacity to support climate strategies through their ability to gather real-time data and drive decision-making. Specifically, this has applications in the transport industry, improving route optimisation and decreasing emissions across both rail and road. Decision Making Technologies As useful and beneficial as all of these technologies are for accelerating sustainability strategies, their efficacy is predicated on beginning with a strong foundation. One particularly prevalent technology which can provide this comes in the form of the decision-making technology, Artificial Intelligence (AI). According to a collaborative study by the World Economic Forum and Accenture, AI alone has the potential the reduce global GHG emissions by 4% by 2030. Even greater, CapGemini places the figure at 16% for AI’s climate potential across multiple sectors. This is due to the substantial boost in efficiency that AI provides when integrated into a business or organisation. This is universal regardless of sector or industry, however it poses the most significant environmental benefit to energy-intensive systems, allowing them to limit their emissions by reducing the energy required to complete their operations. The most pressing example of this is the manufacturing industry, which can employ AI in order to propel the efficacy of their process optimisation and model production lines, as well as using Machine Learning (ML) to streamline demand forecasting. However, the efficacy of AI, ML, and other decision-making technology depends upon robust data. Between identifying and tracing source materials, optimising routes, and enhancing efficiency, access to clear and solid data is crucial for building streamlined solutions and a direct path to net zero. Though not wholly reliant on AI, one example of this data-intuiting technology is cero.earth, the in-house carbon accounting and management platform from edenseven which is been funded by InnovateUK as one of their seven flagship ‘net zero living programmes’. Dynamic and intuitive, and designed to work specifically in the public sector, cero.earth gathers holistic data across all three Scopes of emissions in order to provide an organisation with actionable outcomes to propel them toward net zero. This provides the entity with the ability to track their progress and easily report developments to stakeholders, providing complete control over their climate journey. Thus, cero.earth is the optimal starting point for organisations to understand their current position, future opportunities, and roadmap to net zero. Decarbonising the Public Sector Through the combined benefits outlined in this article of transparency, efficiency, and clarity, climate technology has the potential to provide the direction toward net zero that the public sector could benefit from. In particular, climate tech has attractive applications across major emission areas including transport, waste, and infrastructure: Transport: As well as the aforementioned ability of sensing technologies to benefit route optimisation in local rail and road networks, there are already numerous examples of transport technology with sustainable benefits such as electric vehicle charging and energy management. Buildings: In buildings, it is easy to initiate decarbonisation through better controls such as thermostats, air quality monitoring, and smart parking. Waste: Forecasting technologies like AI and ML can support public sector bodies to reduce waste by providing an overview of resources and accurately projecting their usage. Furthermore, technology can improve the energy efficiency of other public sector organisations such as healthcare. In a survey conducted by Bain & Company, healthcare companies were asked which technological application they had trialled in the previous three years (as of 2022). Innovative solutions included the use of big data to improve medical R&D, digital interfaces for electronic records and telecare, and integrating centralised information on healthcare providers, drugs, and treatments. All of these improve efficiency, and ergo reduce emissions. The Responsibility of the Public Sector The public sector also has a part to play itself in improving access and innovation to these technologies, in order to increase their availability and applications to its industries and operations. The World Economic Forum highlighted three ways in which the public sector can bolster climate investment, namely the use of incentives to drive activity from technology suppliers and financial investors; create longer-term certainty through regulatory support, providing security for technology companies to develop their solutions; and set better standards to credentialise green products and services. These objectives are particularly prescient for those technologies which present a double-edged sword to sustainable initiatives. For example, though Enabling Technologies such as data centres, as explained earlier in this article, have the potential to boost efficiency within highly networked areas of the public sector, they also come with their own climate considerations. As of 2022, data centres account for 1% of the world’s electricity consumption, and 0.5% of CO2 emissions, figures which are more concentrated when analysing Europe in isolation, where a 2020 EU Commission Study revealed that data centres use 2.7% of the continent’s electricity demand, expected to reach 3.2% by the end of 2030 if they continue at the current rate. This is not the end of the story, however, as technological innovations are being accelerated to offset this carbon contribution. Namely, the replacement of liquid cooling with air cooling provides a much more sustainable alternative to maintaining the efficiency of data centres, which relies on them not overheating. Air cooling leverages variable-speed fans which can run at reduced speeds to match a reduced cooling requirement; paired with strategic containment, this can create ‘hot’ and ‘cold’ aisles that produce a tailored thermal profile and ensure efficient cooling. Though the growth and application of technologies such as these is largely dependent on bigger organisations, the public sector can still play its part by spurring and motivating the momentum of their development. Financial Benefits to the Public Sector The public sector itself also has numerous financial benefits to expect from increased sustainable investment, particularly in climate tech. As aforementioned, a study by ICG revealed that digital economies are able to reduce their GHGs by 25%, while increasing their economies by 30%. A report from the Institute of Local Government provided insight into these benefits, highlighting the role of technology as a crucial component: Energy Efficiency: The Institute listed the replacement of outdated lighting fixtures in streetlights with more energy efficient LED bulbs as a quick way to save money, as well as improving street safety. This is heightened in combination with sensing technologies, such as motion detectors and dimmers. The City of Sacramento, for example, has been able to save an average of $302,800 annually through this change. Transportation: Encouraging and facilitating the use of sustainable transport options comes with the economic benefits of conserving fuel and cutting fuel costs, reducing the health impacts of air and water pollution – and ergo saving on healthcare costs – and reducing traffic congestion, making streets safer for pedestrians and transit users alike. Overall, increasing efficiency and sustainability through climate tech means that less funding has to be allocated to considerations such as the cost of water, energy, and infrastructure development and maintenance. These savings can then be reinvested into more targeted initiatives which in themselves can spur economic and environmental development, as well as increasing financial stability. An increased priority and emphasis on sustainability also has the economic benefit of producing green jobs. Defined as any job which ‘contribute[s] to preserving or restoring the environment and our planet’, green jobs go hand-in-hand with the introduction of climate tech, including environmental technicians, wind turbine or solar panel technicians, green construction managers, and nuclear engineers, to name a few. The Role of Cities In particular, cities are public sector bodies equipped with the potential to create an immense environmental impact. In a TedTalk from Marvin Rees, on the Board of Directors for Cambridge Management Consulting, he explains that, despite occupying less than 3% of the earth’s land surface, cities are home to around 55% of the world’s population, are responsible for around 75% of CO2 emissions, as well as being prodigious emitters of nitrogen dioxide and methane, and consume 80% of the world’s energy. However, Marvin explains, due to their reach, size, density, close proximity to leadership, adaptability, and capacity for reinvention, they have a vast capacity to manage those statistics. Attributing much of this potential directly to technological innovation, Marvin lists several of the technologies outlined in this article as being particularly accessible to cities: their population density makes public transport more accessible and cost effective, renewable investment is more financially attractive in large-scale markets, and the heightened presence of a circular economy brings greater benefits to waste management and recycling, in which goods are reused, and unavoidable waste such as food waste can be processed, for example as fertiliser. Providing inspiration from a global perspective, Marvin names technological examples from around the world: Malmö: Malmö has developed a heat network that is fed by heat generated by processed waste; they intend to be 100% powered by renewable or recycled heat by 2030. Oslo: Oslo is subsidising electric vehicles and charging points, as well as introducing a circular waste management system and the purchase of a biogas plant. Bogota: Bogota has introduced a bus rapid transit system and have one of the largest fleets of electric buses in Latin America. Innovations such as these are especially concentrated in Smart Cities, defined as cities which leverage information and communication technology to improve operational efficiency with the twin aims of improving economic growth and quality of life. As such, one of their most prescient objectives is environmental and sustainable development. Conclusion As this article has outlined, the only thing decelerating the public sector on its journey to net zero is a lack of direction, clarity, and security – technology has the potential to bridge this gap by providing transparency and efficiency. Through the differing and wide-reaching applications of foundational, decision making, enabling, and sensing and control technologies, the public sector can decarbonise across numerous emission-contributing factors. While it is worth noting that the technologies listed throughout this article do not in themselves offer a one-size-fits-all approach, their numerous benefits and uses at least contribute greatly to developing the framework for a coordinated approach. Furthermore, they also possess incredibly financial and economic benefits to public sector entities, increasing employment through the availability of green jobs, as well as saving money through efficiency which can be reallocated to other initiatives. For more information on the power of climate technologies such as cero.earth, visit the website for our sister-company, edenseven, here: https://www.edenseven.co.uk/cero-earth For guidance on how to navigate the public sector, contact Craig Cheney, Managing Partner, here: https://www.cambridgemc.com/people/craig-cheney
CTW2025

Find out more about the event, book a strategy clinic and purchase tickets.

Featured Capabilities


Preparing for the PSTN Switch-Off: Updates & Insights to Shape Your Strategy


Discover key strategies and insights to help plan your transition strategy for 31 January 2027 — no matter your sector, industry, or size.

FIND OUT MORE
by Craig Cheney 6 December 2024
BT has recently announced an extension to the Public Switched Telephone Network (PSTN) switch-off in the UK. The previous deadline of December 2025 has been postponed to 31 January 2027. Given the lack of a national plan or central funding for the necessary infrastructure upgrades, responsibilities for welfare and safety will impact at a local level on councils, the NHS and healthcare services, social housing, fire services, and third sector organisations (charities and community groups). If these upgrades do not get funded and planned in detail (and if alternative digital solutions are not adequately tested under real scenarios) then emergency services could fail at a critical moment, putting vulnerable people at risk. The PSTN switch-off will impact five key areas; read below for more information on these. Vulnerable Citizens & Healthcare Communications technology has become vital in care home settings, which rely on technology such as fall alarms to ensure the wellbeing of their residents. Currently, in the UK, there are around 25,000 sheltered housing schemes, and an estimated 90% of them are reliant on analogue connections – for both admin and security – that will need to be transitioned onto an IP solution for continuity. This speaks to concerns across the healthcare industry more widely, which is currently characterised as a ‘Frankenstein estate’ of different telephony systems and technologies, suffering from inefficiencies, security vulnerability, and fragmented communication as a result. Across 56 NHS Trusts which took part in a Freedom of Information request by Maintel, they uncovered up to 10,315 PSTN/ISDN lines installed. Not only this, but 44% of these Trusts have admitted that they have no strategy in place for the PSTN switch-off This poses several risks and dangers following the switch-off if these Trusts do not plan accordingly. Disruptions to operations may seem resolvable to a smaller, private entity, but the impact on the healthcare industry to essential mechanisms which rely on traditional phone lines such as the emergency services will be critical. This will be compounded by a litany of administrative burdens which will divert time and resources away from patient care. Building Alarms & Security Unless fitted with an IP-based signalling solution, the majority of alarms and security systems – including intruder alarms, fire alarms, personal alarms, and CCTV – rely on signal transmission to an Alarm Receiving Centre (ARC) via the legacy PSTN network. This means that, once the switch-off takes effect, older and outdated alarm systems which have not been upgraded will no longer be able to transmit vital signals. This makes the PSTN switch-off, and planning for a proper transition, a matter of public safety. In 2019, there were nearly three million PSTN-connected intruder alarms across the UK, meaning that a lot of national infrastructure will be at risk after the switch off – both to intrusion, and fire. Transport Infrastructure On a day-to-day basis, the PSTN switch off has the potential to create severe disruption throughout public spaces due to its monopoly on transport infrastructure. A spokesman for Transport for London explained that of their nearly 6.5k sets of traffic lights, 1k still use remote monitors relying on PSTN technology. This issue isn’t just contained to London, nor traffic lights. Throughout the UK, a lack of migration plan past the switch-off could mean inadequate replacement of bus stops, EV charging hubs, travel card technology, and roadside telephones, all of which utilise PSTN technology to a certain extent. Facility Monitoring It is not just transport infrastructure that threatens to cause disruption if not properly transitioned, as the same monitoring technology leveraged for traffic lights and security systems is also used to monitor facilities and their utilities. As of 2022, the water industry relied on around 25,000 PSTN lines to complete critical services such as monitoring water levels, managing flood and stormwater, and treatment works. Furthermore, 43,000 lines were utilised to monitor gas pressure and electricity supply. Office & Depot Telephony Although the effect to analogue and landline phone lines introduced by the PSTN switch-off may be obvious (if not, read another of our articles on the stop sell), its impact on other telephony technology present throughout the public sector may be unconsidered. For example, though their use has been declining since its introduction in the 1980s, fax machines are still utilised by certain organisations for their apparent heightened security and reliability compared to digital alternatives. Furthermore, until recently two of the UK’s telephony providers were duty bound to support fax on their networks within the Universal Service Obligation (USO). This was changed with the announcement of the PSTN switch-off. Local businesses and other organisations comprise a key demographic of the public sector, however all entities regardless of industry or sector may still be utilising fax or landline phones, which need to be replaced before the switch-off in order to maintain key operations. How the Public Sector Should Respond Given the lack of a national plan or central funding for the necessary infrastructure upgrades, responsibilities for welfare and safety will impact at a local level on councils, the NHS and healthcare services, social housing, fire services, and third sector organisations. If these upgrades do not get funded and planned in detail, then the technology and services detailed in this article could fail at a critical moment, putting vulnerable people at risk. Funding & Planning: Councils will need to work with hospitals, schools, and other public bodies, alongside Communication Providers (CPs), to share resources, overcome common problems, and model future costs. Protecting the Vulnerable: Ofcom has ruled the following: ‘If you are dependent on your landline phone – for example, if you don’t have a mobile phone or don’t have mobile signal at your home – your provider must offer you a solution to make sure you can contact the emergency services when a power cut occurs. For example, a mobile phone (if you have signal), or a battery back-up unit for your landline phone. This solution should be provided free of charge to people who are dependent on their landline.’ Continuity of Public Services: Understand how the PSTN supports the services offered in the local community, and work with local groups and advisory boards to ensure there are communication strategies and ways to share resources. Also, make it clear that migrated services must be tested and comply with current regulations. Infrastructure Development: Ensuring adequate internet infrastructure is a key responsibility of local councils. They need to work with internet service providers (ISPs) to enhance connectivity, particularly in rural and underserved areas, to support new IP-based communication systems. Awareness: Unlike the shift to digital TV, which was government-initiated, the phase-out of the PSTN is industry-driven because the network is privately owned. Consequently, it is unlikely that there will be a government-sponsored national campaign to spread awareness of these changes and the risks involved. It therefore falls to local authorities, in conjunction with CPs and local groups, to try and disseminate this information to their communities, and in particular to vulnerable people. How We Can Help Our Public Sector and PSTN teams can help local councils and other public bodies by providing strategy, financial planning, procurement, and project management services as and when you need them. Get in touch with Craig Cheney, Managing Partner and lead for Public & Education, to discuss a range of services which might suit your needs: ccheney@cambridgemc.com . Terminology PSTN: Public Switched Telephone Network - a complex network of copper wires, switching centres, and other infrastructure that has been the backbone of the UK's telephony network since Victorian times. VoIP: Voice Over Internet Protocol - a technology that allows people to make voice calls using an internet-based communications technology. By converting voice signals into digital data packets, VoIP can transmit conversations over broadband connections and across the internet. Digital Voice: refers to BT's specific VoIP service or more generally to any service that transmits voice over your broadband connection. Confusingly, VoIP, IP and Digital Voice are often used interchangeably. CP: Communication Provider - an organisation, either private or public, that offers telecommunications services or a mix of information, media, content, entertainment, and application services over networks. ISDN: Integrated Services Digital Network - a set of communication standards that allow for the digital transmission of voice, video, data and other services over the PSTN network. ADSL: Asymmetric Digital Subscriber Line - allows for high-speed data transmission over existing copper lines. ADSL is a type of digital subscriber line (DSL) technology that is typically provided from a telephone exchange enabling broadband internet access, video-on-demand, and LAN services. The service is asymmetric in that the broadband speed profile to the premise is higher than that from the premise. Maximum download speeds are in the order of 20Mbit/s (Megabits per second). VDSL: Very high speed Digital Subscriber Line - a form of DSL technology primarily delivered from street side cabinets delivering very high-speed data rates over existing copper lines. Often referred to as Fibre To The Cabinet (FTTC). VDSL is an asymmetric service, with superior performance when compared to ADSL technologies. Maximum download speeds are in the order of 80Mbit/s. FTTP: Fibre To The Premises - a fibre connection from a premises to a fibre exchange. Offers superior performance when compared to DSL technologies. Services can be symmetric or asymmetric. Maximum speeds are in the order of multiple Gbit/s (Gigabits per second). Useful Links A Councillors Guide to Project Gigabit: https://www.gov.uk/guidance/a-councillors-guide-to-project-gigabit https://www.gov.uk/government/publications/gigabit-broadband-voucher-scheme-information Gigabit Voucher Scheme Eligibility Checker: https://www.gov.uk/government/publications/gigabit-broadband-voucher-scheme-information Project Gigabit government webpage: https://www.gov.uk/guidance/project-gigabit-uk-gigabit-programme Virgin O2 guide to the Switchover: https://www.damianhinds.com/sites/www.damianhinds.com/files/2023-10/23%2010%2030%20Virgin%20Digital%20Voice%20Switchover%20MP%20Guide.pdf Ofcom guide to moving your landline to digital: https://www.ofcom.org.uk/phones-telecoms-and-internet/advice-for-consumers/future-of-landline-calls#:~:text=If%20you%20don%27t%20have%20a%20broadband%20connection%2C%20your%20provider,take%20up%20a%20broadband%20service BT Guide: How the PSTN Switch Off will Affect my Business: https://business.bt.com/insights/what-is-ip-telephony-pstn-switch-off/ A guide to digital voice: https://www.damianhinds.com/sites/www.damianhinds.com/files/2023-10/23%2010%2030%20A%20guide%20to%20Digital%20Voice%20BT%27s%20new%20home%20phone%20service.pdf Telecare stakeholder action plan: https://www.gov.uk/government/publications/telecare-stakeholder-action-plan-analogue-to-digital-switchover Shared Rural Network: https://srn.org.uk/about/ Digital Poverty Alliance: https://digitalpovertyalliance.org/
Row of old analogue telephones
by Clive Quantrill 24 June 2024
Authors
Ground up view of a telephone post with cables in all directions
by Phil Laws 19 December 2023
Authors
A lonely house in the countryside under a starry sky
by Clive Quantrill 21 April 2023
Authors

Case Studies


Our team has had the privilege of partnering with a diverse array of clients, from burgeoning startups to FTSE 100 companies. Each case study reflects our commitment to delivering tailored solutions that drive real business results.

CASE STUDIES

A little bit about Cambridge MC


Cambridge Management Consulting is a specialist consultancy drawing on an extensive global network of over 200 senior executives in 22 countries.


Our purpose is to help our clients make a better impact on the world.

ABOUT CAMBRIDGE MC

Latest

Case Studies

Latest

Case Studies


Discover how our team has successfully transformed organisations with innovative solutions, driving growth and enhancing competitive advantage across diverse industries.


Read More →

Latest insights


A modern office building on a wireframe floor with lava raining from the sky in the background
by Tom Burton 29 July 2025
What’s your organisation’s type when it comes to cyber security? Is everything justified by the business risks, or are you hoping for the best? Over the decades, I have found that no two businesses or organisations have taken the same approach to cybersecurity. This is neither a criticism nor a surprise. No two businesses are the same, so why would their approach to digital risk be? However, I have found that there are some trends or clusters. In this article, I’ve distilled those observations, my understanding of the forces that drive each approach, and some indicators that may help you recognise it. I have also suggested potential advantages and disadvantages. Ad Hoc Let’s start with the ad hoc approach, where the organisation does what it thinks needs to be done, but without any clear rationale to determine “How much is enough?” The Bucket of Sand Approach At the extreme end of the spectrum is the 'Bucket of Sand' option which is characterised by the belief that 'It will never happen to us'. Your organisation may feel that it is too small to be worth attacking or has nothing of any real value. However, if an organisation has nothing of value, one wonders what purpose it serves. At the very least, it is likely to have money. But it is rare now that an organisation will not hold data and information worth stealing. Whether this data is its own or belongs to a third party, it will be a target. I’ve also come across businesses that hold a rather more fatalistic perspective. Most of us are aware of the regular reports of nation-state attacks that are attempting to steal intellectual property, causing economic damage, or just simply stealing money. Recognising that you might face the full force of a cyber-capable foreign state is undoubtedly daunting and may encourage the view that 'We’re all doomed regardless'. If a cyber-capable nation-state is determined to have a go at you, the odds are not great, and countering it will require eye-watering investments in protection, detection and response. But the fact is that they are rare events, even if they receive disproportionate amounts of media coverage. The majority of threats that most organisations face are not national state actors. They are petty criminals, organised criminal bodies, opportunistic amateur hackers or other lower-level actors. And they will follow the path of least resistance. So, while you can’t eliminate the risk, you can reduce it by applying good security and making yourself a more challenging target than the competition. Following Best Practice Thankfully, these 'Bucket of Sand' adopters are less common than ten or fifteen years ago. Most in the Ad Hoc zone will do some things but without clear logic or rationale to justify why they are doing X rather than Y. They may follow the latest industry trends and implement a new shiny technology (because doing the business change bit is hard and unpopular). This type of organisation will frequently operate security on a feast or famine basis, deferring investments to next year when there is something more interesting to prioritise, because without business strategy guiding security it will be hard to justify. And 'next year' frequently remains next year on an ongoing basis. At the more advanced end of the Ad Hoc zone, you will find those organisations that choose a framework and aim to achieve a specific benchmark of Security Maturity. This approach ensures that capabilities are balanced and encourages progressive improvement. However, 'How much is enough?' remains unanswered; hence, the security budget will frequently struggle for airtime when budgets are challenged. It may also encourage a one-size-fits-all approach rather than prioritising the assets at greatest risk, which would cause the most significant damage if compromised. Regulatory-Led The Regulatory-Led organisation is the one I’ve come across most frequently. A market regulator, such as the FCA in the UK, may set regulations. Or the regulator may be market agnostic but have responsibility for a particular type of data, such as the Information Commissioner’s Office’s interest in personal data privacy. If regulatory compliance questions dominate most senior conversations about cyber security, the organisation is probably in this zone. Frequently, this issue of compliance is not a trivial challenge. Most regulations don’t tend to be detailed recipes to follow. Instead, they outline the broad expectations or the principles to be applied. There will frequently be a tapestry of regulations that need to be met rather than a single target to aim for. Businesses operating in multiple countries will likely have different regulations across those regions. Even within one country, there may be market-specific and data-specific regulations that both need to be applied. This tapestry is growing year after year as jurisdictions apply additional regulations to better protect their citizens and economies in the face of proliferating and intensifying threats. In the last year alone, EU countries have had to implement both the Digital Operational Resilience Act (DORA) and Network and Infrastructure Security Directive (NIS2) , which regulate financial services businesses and critical infrastructure providers respectively. Superficially, it appears sensible and straightforward, but in execution the complexities and limitations become clear. Some of the nuances include: Not Everything Is Regulated The absence of regulation doesn’t mean there is no risk. It just means that the powers that be are not overly concerned. Your business will still be exposed to risk, but the regulators or government may be untroubled by it. Regulations Move Slowly Cyber threats are constantly changing and evolving. As organisations improve their defences, the opposition changes their tactics and tools to ensure their attacks can continue to be effective. In response, organisations need to adjust and enhance their defences to stay ahead. Regulations do not respond at this pace. So, relying on regulatory compliance risks preparing to 'Fight the last war'. The Tapestry Becomes Increasingly Unwieldy It may initially appear simple. You review the limited regulations for a single region, take your direction, and apply controls that will make you compliant. Then, you expand into a new region. And later, one of your existing jurisdictions introduces an additional set of regulations that apply to you. Before you know it, you must first normalise and consolidate the requirements from a litany of different sets of rules, each with its own structure, before you can update your security/compliance strategy. Most Regulations Talk about Appropriateness As mentioned before, regulations rarely provide a recipe to follow. They talk about applying appropriate controls in a particular context. The business still needs to decide what is appropriate. And if there is a breach or a pre-emptive audit, the business will need to justify that decision. The most rational justification will be based on an asset’s sensitivity and the threats it is exposed to — ergo, a risk-based rather than a compliance-based argument. Opportunity-Led Many businesses don’t exist in heavily regulated industries but may wish to trade in markets or with customers with certain expectations about their suppliers’ security and resilience. These present barriers to entry, but if overcome, they also offer obstacles to competition. The expectations may be well defined for a specific customer, such as DEF STAN 05-138 , which details the standards that the UK Ministry of Defence expects its suppliers to meet according to a project’s risk profile. Sometimes, an entire market will set the entry rules. The UK Government has set Cyber Essentials as the minimum standard to be eligible to compete for government contracts. The US has published NIST 800-171 to detail what government suppliers must meet to process Controlled Unclassified Information (CUI). Businesses should conduct due diligence on their suppliers, particularly when they provide technology, interface with their systems or process their data. Regulations, such as NIS2, are increasingly demanding this level of Third Party Risk Management because of the number of breaches and compromises originating from the supply chain. Businesses may detail a certain level of certification that they consider adequate, such as ISO 27001 or a System & Organization Controls (SOC) report. By achieving one or more of these standards, new markets may open up to a business. Good security becomes a growth enabler. But just like with regulations, if the security strategy starts with one of these standards, it can rapidly become unwieldy as a patchwork quilt of different entry requirements builds up for other markets. Risk-Led The final zone is where actions are defined by the risk the business is exposed to. Being led by risk in this way should be natural and intuitive. Most of us might secure our garden shed with a simple padlock but would have several more secure locks on the doors to our house. We would probably also have locks on the windows and may add CCTV cameras and a burglar alarm if we were sufficiently concerned about the threats in our area. We may even install a secure safe inside the house if we have some particularly valuable possessions. These decisions and the application of defences are all informed by our understanding of the risks to which different groups of assets are exposed. The security decisions you make at home are relatively trivial compared to the complexity most businesses face with digital risk. Over the decades, technology infrastructures have grown, often becoming a sprawling landscape where the boundaries between one system and another are hard to determine. In the face of this complexity, many organisations talk about being risk-led but, in reality, operate in one of the other zones. There is no reason why an organisation can’t progressively transform from an Ad Hoc, Regulatory-Led or Opportunity-Led posture into a Risk-Led one. This transformation may need to include a strategy to enhance segmentation and reduce the sprawling landscape described above. Risk-Led also doesn’t mean applying decentralised, bespoke controls on a system-by-system basis. The risk may be assessed against the asset or a category of assets, but most organisations usually have a framework of standard controls and policies to apply or choose from. The test to tell whether an organisation genuinely operates in the Risk-Led zone is whether they have a well-defined Risk Appetite. This policy is more than just the one-liner stating that they have a very low appetite for risk. It should typically be broken down into different categories of risk or asset types; for instance, it might detail the different appetites for personal data risk compared to corporate intellectual property marked as 'In Strict Confidence'. Each category should clarify the tolerance, the circumstances under which risk will be accepted, and who is authorised to sign off. I’ve seen some exceptionally well-drafted risk appetite policies that provide clear direction. Once in place, any risk review can easily understand the boundaries within which they can operate and determine whether the controls for a particular context are adequate. I’ve also seen many that are so loose as to be unactionable or, on as many occasions, have not been able to find a risk appetite defined at all. In these situations, there is no clear way of determining 'How much security is enough'. Organisations operating in this zone will frequently still have to meet regulatory requirements and individual customer or market expectations. However, this regulatory or commercial risk assessment can take the existing strategy as the starting point and review the relevant controls for compliance. That may prompt an adjustment to security in certain places. But when challenged, you can defend your strategy because you can trace decisions back to the negative outcomes you are attempting to prevent — and this intent is in everyone’s common interest. Conclusions Which zone does your business occupy? It may exist in more than one — for instance, mainly aiming for a specific security maturity in the Ad Hoc zone but reinforced for a particular customer. But which is the dominant zone that drives plans and behaviour? And why is that? It may be the right place for today, but is it the best approach for the future? Apart from the 'Bucket of Sand' approach, each has pros and cons. I’ve sought to stay balanced in how I’ve described them. However, the most sustainable approach is one driven by business risk, with controls that mitigate those risks to a defined appetite. Regulatory compliance will probably constitute some of those risks, and when controls are reviewed against the regulatory requirements, there may be a need to reinforce them. Also, some customers may have specific standards to meet in a particular context. However, the starting point will be the security you believe the business needs and can justify before reviewing it through a regulatory or market lens. If you want to discuss how you can improve your security, reduce your digital risk, and face the future with confidence, get in touch with Tom Burton, Senior Partner - Cyber Security, using the below form.
AI co-pilot
by Jason Jennings 28 July 2025
Jason Jennings | Elevate your project management with AI. This guide for senior leaders explains how AI tools can enhance project performance through predictive foresight, cognitive collaboration, and portfolio intelligence. Unlock the potential of AI in your organisation and avoid the common pitfalls.
St Pauls Cathedral
by Craig Cheney 24 July 2025
A New Era of Local Power: What’s in the English Devolution Bill? The UK Government has taken a major step forward in reshaping local governance in England with the publication of the English Devolution and Community Empowerment Bill. This is more than a policy shift — it’s a structural rethink that sets out to make devolution the norm, not the exception. This is a welcome change in direction. This framework could unlock new potential for place-based leadership, community decision-making, and joined-up regional delivery. But as with any big reform, the opportunity lies in the detail — and in how we respond. Key Changes Introduced by the Bill Standardised Framework for Strategic Authorities: Combined Authorities, the GLA, and County Combined Authorities will all fall under a new, consistent legal model — making future devolution smoother and more transparent. Mayors Gain More Leverage: Elected mayors now have a legal right to request further powers, with the Government required to respond. This could pave the way for greater local control over transport, housing, energy, and skills. Neighbourhood Governance Becomes a Duty: Councils will be required to introduce or enhance neighbourhood governance models, supporting community voices and hyper-local decision-making. Simplified Local Government Reorganisation: The Bill makes it easier to create unitary authorities and restructure Strategic Authorities, while mandating the leader-and-cabinet model across councils. Expanded Local Powers: Local authorities will gain new tools to manage shared transport (e.g. e-scooters), protect community assets, and take greater ownership of local planning and infrastructure decisions. Financial Oversight with New Audit Body: A dedicated Local Audit Office will strengthen transparency and public trust in the financial performance of devolved authorities. Why This Matters This legislation has the potential to reshape the relationship between central and local government. It provides: Greater clarity for local leaders navigating the devolution journey Stronger alignment between regional planning, investment, and delivery Formalised community empowerment as a core part of local governance Faster implementation of reforms, removing historical friction with Whitehall If implemented well, it could accelerate levelling up, boost public confidence, and enable councils to better serve their communities. Things to Watch While the ambitions are clear, some areas need close attention: Will funding follow the powers? Without sustained financial backing, councils risk being given responsibilities without the means to deliver. Can neighbourhood structures scale inclusively? Capacity and engagement are key. Local authorities will need support to build neighbourhood governance that is truly representative and impactful. Is the framework flexible enough? A standardised model may reduce complexity, but different places have different needs. Will the new system allow enough room for local variation? Politics, Patchworks and Practicalities: Navigating the Real World of Devolution While the Bill sets out a bold framework, turning that into action won’t be straightforward. Key challenges include: 1. Political Variation Across England Party control differs widely across councils and combined authorities. Some areas will embrace the model enthusiastically; others may resist due to local politics, institutional inertia, or differing visions of place-based governance. The perception of centralisation vs. genuine empowerment may vary depending on the colour of national vs. local government. 2. Tension Between Standardisation and Local Identity The Bill’s aim to simplify and harmonise structures may clash with deeply rooted local differences. Places with strong local identities (e.g. Cornwall, Yorkshire) may be wary of “off-the-shelf” devolution deals or generic governance templates. 3. Differing Appetite for Mayoral Leadership Not all areas want or have elected mayors. Extending powers to Strategic Authorities with mayors may widen the gap between those “inside” and “outside” the model. This could reinforce a two-speed devolution system unless flexibility is built in. 4. Election Cycles and Political Continuity Leadership turnover, locally and nationally can stall momentum, undo hard-won consensus, or shift priorities mid-implementation. Cross-party collaboration will be essential, but not always easy in contested regions. The advantages will need to be sold well. 5. Capacity and Capability Gaps Even with strong local political will, some councils may struggle with resourcing, skills, or institutional readiness to implement new duties or governance changes. What Should Local Leaders Do Now? Start preparing governance structures in anticipation of new duties Identify gaps or priorities where additional powers could unlock outcomes Engage partners early—from VCS organisations to universities to SMEs — to co-design delivery models Assess audit and performance frameworks to ensure compliance and transparency Final Thoughts This Bill is a welcome statement of trust in local institutions. It’s now up to councils, combined authorities, and delivery partners to turn this framework into lasting, meaningful change.
by Faye Holland 11 July 2025
Today, we are proud to be spotlighting Faye Holland, who became Managing Partner at Cambridge Management Consulting for Client PR & Marketing as well as for our presence in the city of Cambridge and the East of England at the start of this year, following our acquisition of her award-winning PR firm, cofinitive. Faye is a prominent entrepreneur and a dynamic force within the city of Cambridge’s renowned technology sector. Known for her ability to influence, inspire, and connect on multiple fronts, Faye plays a vital role in bolstering Cambridge’s global reputation as the UK’s hub for technology, innovation, and science. With over three decades of experience spanning diverse business ventures, including the UK’s first ISP, working in emerging business practices within IBM, leading European and Asia-Pacific operations for a global tech media company, and founding her own business, Faye brings unparalleled expertise to every endeavour. Faye’s value in the industry is further underscored by her extensive network of influential contacts. As the founder of cofinitive, an award-winning PR and communications agency focused on supporting cutting-edge start-ups and scale-ups in tech and innovation, Faye has earned a reputation as one of the UK’s foremost marketing strategists. Over the course of a decade, she built cofinitive into a recognised leader in the communications industry. The firm has since been featured in PR Weekly’s 150 Top Agencies outside London, and has been named year-on-year as the No. 1 PR & Communications agency in East Anglia. cofinitive is also acknowledged as one of the 130 most influential businesses in Cambridge, celebrated for its distinctive, edge, yet polished approach to storytelling for groundbreaking companies, and for its support of the broader ecosystem. Additionally, Faye is widely recognised across the East of England for her leadership in initiatives such as the #21toWatch Technology Innovation Awards, which celebrates innovation and entrepreneurship, and as the co-host of the Cambridge Tech Podcast. Individually, Faye has earned numerous accolades. She is listed among the 25 most influential people in Cambridge, and serves as Chair of the Cambridgeshire Chambers of Commerce. Her advocacy for women in technology has seen her regularly featured in Computer Weekly’s Women in Tech lists, and recognised as one of the most influential women in UK tech during London Tech Week 2024 via the #InspiringFifty listing. Faye is also a dedicated mentor for aspiring technology entrepreneurs, having contributed to leading entrepreneurial programs in Cambridge and internationally, further solidifying her role as a driving force for innovation and growth in the tech ecosystem. If you would like to discuss future opportunities with Faye, you can reach out to her here .
SHOW MORE
A modern office building on a wireframe floor with lava raining from the sky in the background
by Tom Burton 29 July 2025
What’s your organisation’s type when it comes to cyber security? Is everything justified by the business risks, or are you hoping for the best? Over the decades, I have found that no two businesses or organisations have taken the same approach to cybersecurity. This is neither a criticism nor a surprise. No two businesses are the same, so why would their approach to digital risk be? However, I have found that there are some trends or clusters. In this article, I’ve distilled those observations, my understanding of the forces that drive each approach, and some indicators that may help you recognise it. I have also suggested potential advantages and disadvantages. Ad Hoc Let’s start with the ad hoc approach, where the organisation does what it thinks needs to be done, but without any clear rationale to determine “How much is enough?” The Bucket of Sand Approach At the extreme end of the spectrum is the 'Bucket of Sand' option which is characterised by the belief that 'It will never happen to us'. Your organisation may feel that it is too small to be worth attacking or has nothing of any real value. However, if an organisation has nothing of value, one wonders what purpose it serves. At the very least, it is likely to have money. But it is rare now that an organisation will not hold data and information worth stealing. Whether this data is its own or belongs to a third party, it will be a target. I’ve also come across businesses that hold a rather more fatalistic perspective. Most of us are aware of the regular reports of nation-state attacks that are attempting to steal intellectual property, causing economic damage, or just simply stealing money. Recognising that you might face the full force of a cyber-capable foreign state is undoubtedly daunting and may encourage the view that 'We’re all doomed regardless'. If a cyber-capable nation-state is determined to have a go at you, the odds are not great, and countering it will require eye-watering investments in protection, detection and response. But the fact is that they are rare events, even if they receive disproportionate amounts of media coverage. The majority of threats that most organisations face are not national state actors. They are petty criminals, organised criminal bodies, opportunistic amateur hackers or other lower-level actors. And they will follow the path of least resistance. So, while you can’t eliminate the risk, you can reduce it by applying good security and making yourself a more challenging target than the competition. Following Best Practice Thankfully, these 'Bucket of Sand' adopters are less common than ten or fifteen years ago. Most in the Ad Hoc zone will do some things but without clear logic or rationale to justify why they are doing X rather than Y. They may follow the latest industry trends and implement a new shiny technology (because doing the business change bit is hard and unpopular). This type of organisation will frequently operate security on a feast or famine basis, deferring investments to next year when there is something more interesting to prioritise, because without business strategy guiding security it will be hard to justify. And 'next year' frequently remains next year on an ongoing basis. At the more advanced end of the Ad Hoc zone, you will find those organisations that choose a framework and aim to achieve a specific benchmark of Security Maturity. This approach ensures that capabilities are balanced and encourages progressive improvement. However, 'How much is enough?' remains unanswered; hence, the security budget will frequently struggle for airtime when budgets are challenged. It may also encourage a one-size-fits-all approach rather than prioritising the assets at greatest risk, which would cause the most significant damage if compromised. Regulatory-Led The Regulatory-Led organisation is the one I’ve come across most frequently. A market regulator, such as the FCA in the UK, may set regulations. Or the regulator may be market agnostic but have responsibility for a particular type of data, such as the Information Commissioner’s Office’s interest in personal data privacy. If regulatory compliance questions dominate most senior conversations about cyber security, the organisation is probably in this zone. Frequently, this issue of compliance is not a trivial challenge. Most regulations don’t tend to be detailed recipes to follow. Instead, they outline the broad expectations or the principles to be applied. There will frequently be a tapestry of regulations that need to be met rather than a single target to aim for. Businesses operating in multiple countries will likely have different regulations across those regions. Even within one country, there may be market-specific and data-specific regulations that both need to be applied. This tapestry is growing year after year as jurisdictions apply additional regulations to better protect their citizens and economies in the face of proliferating and intensifying threats. In the last year alone, EU countries have had to implement both the Digital Operational Resilience Act (DORA) and Network and Infrastructure Security Directive (NIS2) , which regulate financial services businesses and critical infrastructure providers respectively. Superficially, it appears sensible and straightforward, but in execution the complexities and limitations become clear. Some of the nuances include: Not Everything Is Regulated The absence of regulation doesn’t mean there is no risk. It just means that the powers that be are not overly concerned. Your business will still be exposed to risk, but the regulators or government may be untroubled by it. Regulations Move Slowly Cyber threats are constantly changing and evolving. As organisations improve their defences, the opposition changes their tactics and tools to ensure their attacks can continue to be effective. In response, organisations need to adjust and enhance their defences to stay ahead. Regulations do not respond at this pace. So, relying on regulatory compliance risks preparing to 'Fight the last war'. The Tapestry Becomes Increasingly Unwieldy It may initially appear simple. You review the limited regulations for a single region, take your direction, and apply controls that will make you compliant. Then, you expand into a new region. And later, one of your existing jurisdictions introduces an additional set of regulations that apply to you. Before you know it, you must first normalise and consolidate the requirements from a litany of different sets of rules, each with its own structure, before you can update your security/compliance strategy. Most Regulations Talk about Appropriateness As mentioned before, regulations rarely provide a recipe to follow. They talk about applying appropriate controls in a particular context. The business still needs to decide what is appropriate. And if there is a breach or a pre-emptive audit, the business will need to justify that decision. The most rational justification will be based on an asset’s sensitivity and the threats it is exposed to — ergo, a risk-based rather than a compliance-based argument. Opportunity-Led Many businesses don’t exist in heavily regulated industries but may wish to trade in markets or with customers with certain expectations about their suppliers’ security and resilience. These present barriers to entry, but if overcome, they also offer obstacles to competition. The expectations may be well defined for a specific customer, such as DEF STAN 05-138 , which details the standards that the UK Ministry of Defence expects its suppliers to meet according to a project’s risk profile. Sometimes, an entire market will set the entry rules. The UK Government has set Cyber Essentials as the minimum standard to be eligible to compete for government contracts. The US has published NIST 800-171 to detail what government suppliers must meet to process Controlled Unclassified Information (CUI). Businesses should conduct due diligence on their suppliers, particularly when they provide technology, interface with their systems or process their data. Regulations, such as NIS2, are increasingly demanding this level of Third Party Risk Management because of the number of breaches and compromises originating from the supply chain. Businesses may detail a certain level of certification that they consider adequate, such as ISO 27001 or a System & Organization Controls (SOC) report. By achieving one or more of these standards, new markets may open up to a business. Good security becomes a growth enabler. But just like with regulations, if the security strategy starts with one of these standards, it can rapidly become unwieldy as a patchwork quilt of different entry requirements builds up for other markets. Risk-Led The final zone is where actions are defined by the risk the business is exposed to. Being led by risk in this way should be natural and intuitive. Most of us might secure our garden shed with a simple padlock but would have several more secure locks on the doors to our house. We would probably also have locks on the windows and may add CCTV cameras and a burglar alarm if we were sufficiently concerned about the threats in our area. We may even install a secure safe inside the house if we have some particularly valuable possessions. These decisions and the application of defences are all informed by our understanding of the risks to which different groups of assets are exposed. The security decisions you make at home are relatively trivial compared to the complexity most businesses face with digital risk. Over the decades, technology infrastructures have grown, often becoming a sprawling landscape where the boundaries between one system and another are hard to determine. In the face of this complexity, many organisations talk about being risk-led but, in reality, operate in one of the other zones. There is no reason why an organisation can’t progressively transform from an Ad Hoc, Regulatory-Led or Opportunity-Led posture into a Risk-Led one. This transformation may need to include a strategy to enhance segmentation and reduce the sprawling landscape described above. Risk-Led also doesn’t mean applying decentralised, bespoke controls on a system-by-system basis. The risk may be assessed against the asset or a category of assets, but most organisations usually have a framework of standard controls and policies to apply or choose from. The test to tell whether an organisation genuinely operates in the Risk-Led zone is whether they have a well-defined Risk Appetite. This policy is more than just the one-liner stating that they have a very low appetite for risk. It should typically be broken down into different categories of risk or asset types; for instance, it might detail the different appetites for personal data risk compared to corporate intellectual property marked as 'In Strict Confidence'. Each category should clarify the tolerance, the circumstances under which risk will be accepted, and who is authorised to sign off. I’ve seen some exceptionally well-drafted risk appetite policies that provide clear direction. Once in place, any risk review can easily understand the boundaries within which they can operate and determine whether the controls for a particular context are adequate. I’ve also seen many that are so loose as to be unactionable or, on as many occasions, have not been able to find a risk appetite defined at all. In these situations, there is no clear way of determining 'How much security is enough'. Organisations operating in this zone will frequently still have to meet regulatory requirements and individual customer or market expectations. However, this regulatory or commercial risk assessment can take the existing strategy as the starting point and review the relevant controls for compliance. That may prompt an adjustment to security in certain places. But when challenged, you can defend your strategy because you can trace decisions back to the negative outcomes you are attempting to prevent — and this intent is in everyone’s common interest. Conclusions Which zone does your business occupy? It may exist in more than one — for instance, mainly aiming for a specific security maturity in the Ad Hoc zone but reinforced for a particular customer. But which is the dominant zone that drives plans and behaviour? And why is that? It may be the right place for today, but is it the best approach for the future? Apart from the 'Bucket of Sand' approach, each has pros and cons. I’ve sought to stay balanced in how I’ve described them. However, the most sustainable approach is one driven by business risk, with controls that mitigate those risks to a defined appetite. Regulatory compliance will probably constitute some of those risks, and when controls are reviewed against the regulatory requirements, there may be a need to reinforce them. Also, some customers may have specific standards to meet in a particular context. However, the starting point will be the security you believe the business needs and can justify before reviewing it through a regulatory or market lens. If you want to discuss how you can improve your security, reduce your digital risk, and face the future with confidence, get in touch with Tom Burton, Senior Partner - Cyber Security, using the below form.
AI co-pilot
by Jason Jennings 28 July 2025
Jason Jennings | Elevate your project management with AI. This guide for senior leaders explains how AI tools can enhance project performance through predictive foresight, cognitive collaboration, and portfolio intelligence. Unlock the potential of AI in your organisation and avoid the common pitfalls.
St Pauls Cathedral
by Craig Cheney 24 July 2025
A New Era of Local Power: What’s in the English Devolution Bill? The UK Government has taken a major step forward in reshaping local governance in England with the publication of the English Devolution and Community Empowerment Bill. This is more than a policy shift — it’s a structural rethink that sets out to make devolution the norm, not the exception. This is a welcome change in direction. This framework could unlock new potential for place-based leadership, community decision-making, and joined-up regional delivery. But as with any big reform, the opportunity lies in the detail — and in how we respond. Key Changes Introduced by the Bill Standardised Framework for Strategic Authorities: Combined Authorities, the GLA, and County Combined Authorities will all fall under a new, consistent legal model — making future devolution smoother and more transparent. Mayors Gain More Leverage: Elected mayors now have a legal right to request further powers, with the Government required to respond. This could pave the way for greater local control over transport, housing, energy, and skills. Neighbourhood Governance Becomes a Duty: Councils will be required to introduce or enhance neighbourhood governance models, supporting community voices and hyper-local decision-making. Simplified Local Government Reorganisation: The Bill makes it easier to create unitary authorities and restructure Strategic Authorities, while mandating the leader-and-cabinet model across councils. Expanded Local Powers: Local authorities will gain new tools to manage shared transport (e.g. e-scooters), protect community assets, and take greater ownership of local planning and infrastructure decisions. Financial Oversight with New Audit Body: A dedicated Local Audit Office will strengthen transparency and public trust in the financial performance of devolved authorities. Why This Matters This legislation has the potential to reshape the relationship between central and local government. It provides: Greater clarity for local leaders navigating the devolution journey Stronger alignment between regional planning, investment, and delivery Formalised community empowerment as a core part of local governance Faster implementation of reforms, removing historical friction with Whitehall If implemented well, it could accelerate levelling up, boost public confidence, and enable councils to better serve their communities. Things to Watch While the ambitions are clear, some areas need close attention: Will funding follow the powers? Without sustained financial backing, councils risk being given responsibilities without the means to deliver. Can neighbourhood structures scale inclusively? Capacity and engagement are key. Local authorities will need support to build neighbourhood governance that is truly representative and impactful. Is the framework flexible enough? A standardised model may reduce complexity, but different places have different needs. Will the new system allow enough room for local variation? Politics, Patchworks and Practicalities: Navigating the Real World of Devolution While the Bill sets out a bold framework, turning that into action won’t be straightforward. Key challenges include: 1. Political Variation Across England Party control differs widely across councils and combined authorities. Some areas will embrace the model enthusiastically; others may resist due to local politics, institutional inertia, or differing visions of place-based governance. The perception of centralisation vs. genuine empowerment may vary depending on the colour of national vs. local government. 2. Tension Between Standardisation and Local Identity The Bill’s aim to simplify and harmonise structures may clash with deeply rooted local differences. Places with strong local identities (e.g. Cornwall, Yorkshire) may be wary of “off-the-shelf” devolution deals or generic governance templates. 3. Differing Appetite for Mayoral Leadership Not all areas want or have elected mayors. Extending powers to Strategic Authorities with mayors may widen the gap between those “inside” and “outside” the model. This could reinforce a two-speed devolution system unless flexibility is built in. 4. Election Cycles and Political Continuity Leadership turnover, locally and nationally can stall momentum, undo hard-won consensus, or shift priorities mid-implementation. Cross-party collaboration will be essential, but not always easy in contested regions. The advantages will need to be sold well. 5. Capacity and Capability Gaps Even with strong local political will, some councils may struggle with resourcing, skills, or institutional readiness to implement new duties or governance changes. What Should Local Leaders Do Now? Start preparing governance structures in anticipation of new duties Identify gaps or priorities where additional powers could unlock outcomes Engage partners early—from VCS organisations to universities to SMEs — to co-design delivery models Assess audit and performance frameworks to ensure compliance and transparency Final Thoughts This Bill is a welcome statement of trust in local institutions. It’s now up to councils, combined authorities, and delivery partners to turn this framework into lasting, meaningful change.
by Faye Holland 11 July 2025
Today, we are proud to be spotlighting Faye Holland, who became Managing Partner at Cambridge Management Consulting for Client PR & Marketing as well as for our presence in the city of Cambridge and the East of England at the start of this year, following our acquisition of her award-winning PR firm, cofinitive. Faye is a prominent entrepreneur and a dynamic force within the city of Cambridge’s renowned technology sector. Known for her ability to influence, inspire, and connect on multiple fronts, Faye plays a vital role in bolstering Cambridge’s global reputation as the UK’s hub for technology, innovation, and science. With over three decades of experience spanning diverse business ventures, including the UK’s first ISP, working in emerging business practices within IBM, leading European and Asia-Pacific operations for a global tech media company, and founding her own business, Faye brings unparalleled expertise to every endeavour. Faye’s value in the industry is further underscored by her extensive network of influential contacts. As the founder of cofinitive, an award-winning PR and communications agency focused on supporting cutting-edge start-ups and scale-ups in tech and innovation, Faye has earned a reputation as one of the UK’s foremost marketing strategists. Over the course of a decade, she built cofinitive into a recognised leader in the communications industry. The firm has since been featured in PR Weekly’s 150 Top Agencies outside London, and has been named year-on-year as the No. 1 PR & Communications agency in East Anglia. cofinitive is also acknowledged as one of the 130 most influential businesses in Cambridge, celebrated for its distinctive, edge, yet polished approach to storytelling for groundbreaking companies, and for its support of the broader ecosystem. Additionally, Faye is widely recognised across the East of England for her leadership in initiatives such as the #21toWatch Technology Innovation Awards, which celebrates innovation and entrepreneurship, and as the co-host of the Cambridge Tech Podcast. Individually, Faye has earned numerous accolades. She is listed among the 25 most influential people in Cambridge, and serves as Chair of the Cambridgeshire Chambers of Commerce. Her advocacy for women in technology has seen her regularly featured in Computer Weekly’s Women in Tech lists, and recognised as one of the most influential women in UK tech during London Tech Week 2024 via the #InspiringFifty listing. Faye is also a dedicated mentor for aspiring technology entrepreneurs, having contributed to leading entrepreneurial programs in Cambridge and internationally, further solidifying her role as a driving force for innovation and growth in the tech ecosystem. If you would like to discuss future opportunities with Faye, you can reach out to her here .
Cambridge MC Falklands team standing with Polly Marsh, CEO of the Ulysses Trust, holding a cheque
by Lucas Lefley 10 July 2025
From left to right: Tim Passingham, Tom Burton, Erling Aronsveen, Polly Marsh, and Clive Quantrill.
Long curving glass walkway looking out on a city. Image has a deep red tint and high contrast
30 June 2025
Cambridge Management Consulting is delighted to announce that we have been recognised as a Platinum-level telecommunications consultancy in Consultancy.uk’s 2025 ‘Top Consulting Firms in the UK’ ranking. This achievement places us among an upper tier of telecommunications consultancies across the UK, reflecting our continued commitment to delivering exceptional expertise and results for our clients in this rapidly evolving sector. A Rigorous Assessment The Consultancy.uk ranking represents one of the most comprehensive evaluations of the UK’s consulting landscape, assessing over 1,400 firms across the country. This methodology combines extensive client feedback from more than 800 clients and peer reviews from over 3,000 consultants, alongside detailed capabilities assessments that examine the reputation of each firm, project track records, analyst benchmarks, industry recognitions, and thought leadership. Within the telecommunications sector specifically, over 500 consulting firms were evaluated, with only 50 qualifying as top players. The ranking system operates across five distinct levels – Diamond, Platinum, Gold, Silver, and Bronze; thus, Platinum status cements Cambridge MC as one of the most trusted, expert, and influential telecommunications consultancies in the UK. This recognition is particularly meaningful given the competitive nature of the UK’s telecommunications consulting market, where established global firms compete alongside specialist independents. Our Platinum ranking demonstrates that Cambridge MC has successfully established itself as a leading authority in telecommunications strategy, transformation, and innovation. Building on a Foundation of Success This latest accolade adds to Cambridge MC’s impressive collection of recent achievements and industry recognition. At The Consultancy Awards 2024, we were honoured to receive three awards, winning in every category for which we were nominated. These included: Digital Transformation: Acknowledging our project management of a multinational oil and gas company’s EV charging hub portfolio. Productivity Improvement & Cost Reduction: Celebrating our delivery of over £10m in savings for a major UK online retailer. Fastest Growing: Recognising our remarkable 30% revenue growth and expansion across new geographies. Beyond organisational achievements, our individual team members continue to earn recognition for their expertise and contributions. Zoë Webster, expert at Cambridge Management Consulting for AI, Digital & Innovation, was named among AI Magazine’s Top 10 AI Leaders in the UK & Europe. Furthermore, Craig Cheney, Managing Partner for Public Sector & Education, was made an Alderman of the City of Bristol, and Marvin Rees OBE, a member of our advisory board, was introduced to the House of Lords. Craig and Marvin were also co-founders of the Bristol City LEAP project, which recently received the World Economic Forum’s 2024 Award of Distinction for Public-Private Collaboration in Cities. This £1bn partnership between Bristol City Council and Ameresco UK represents a world-first initiative in sustainable urban development, demonstrating our capacity to deliver transformational projects with genuine societal impact. At the Forefront of Digital Infrastructure and TMT Our Platinum ranking in telecommunications specifically reflects Cambridge MC’s deep expertise across the full spectrum of Telecoms, Media & Technology (TMT) challenges. We work alongside TMT companies to optimise digital infrastructure and estates while delivering integrated cost reduction services that enhance procurement and contract management functions. Our capabilities span from digital transformation, procurement and network transformation to data centre optimisation and emerging technology integration. The telecommunications landscape continues to evolve rapidly, with exponential data growth, IoT deployment, and the infrastructure demands of generative AI driving substantial transformation in both virtual and physical infrastructure. Our team support organisations to stay afloat in this changing market, with a proven track record including managing over $5bn in client revenues, saving organisations over $2bn, and driving procurement transactions exceeding $5bn. Recent case studies demonstrate the breadth of our telecommunications expertise, from conducting technical due diligence for major investment decisions, to designing and procuring modern network solutions for leading academic institutions. Our work with the University of Bristol, helping them to complete their progressive Modern Network transformation, exemplifies our ability to navigate complex technical and commercial requirements, while delivering measurable outcomes. Looking Ahead As we celebrate this Platinum recognition, Cambridge MC remains committed to pushing the boundaries of what’s possible in telecommunications consulting. Ever since Tim Passingham founded Cambridge Management Consulting, to support telecommunications startups in the city of Cambridge, UK, our purpose has been to help clients make a better impact on the world. This mission drives everything we do, from individual product delivery to industry-wide transformation initiatives. This achievement belongs to our entire team of specialist practitioners who bring decades of hands-on experience to every engagement. As we continue to expand our capabilities and global reach, this recognition serves as both validation of our progress and motivation for the challenges ahead. Thank you to everyone who has joined us on this journey.
SHOW MORE