July incident and a reference request
Email thread Brimscombe Energy · sales
The CISO wants the written root cause and remediation for the July outage, and whether it touches the security review. Tom Ashdown asked him for a reference call for a US prospect; he agreed, wanting Daniel's account first.
What was said
What this says
As at Fri 9 Oct 2026The CISO wants the written root cause and remediation for the July outage, and whether it touches the security review. Tom Ashdown asked him for a reference call for a US prospect; he agreed, wanting Daniel's account first.
Ask: Oluwaseun Bamidele said a credit does not tell him what failed or what has changed. He wants the root cause, the remediation, an owner, and a view on the Enterprise security review.
Customer view: He will settle this before discussing the renewal. He agreed to the reference call and will be candid about the incident.
Next: Daniel Okafor owes the written account. The CISO wants it in hand before the call, which Jordan Pike should arrange through Siân Pritchard.
The thread
Updated 9 Oct 26Messages
Oluwaseun Bamidele 4 Aug 2026 14:20Tom, I have copied Siân so she has the same picture. I would like to understand where we stand following the July outage and the two high priority tickets that have come through since. I have seen the credit and Daniel's note to Siân, and I appreciate both. As the person who answers for our security posture, though, a credit does not tell me what failed or what has changed. Could you ask for the written root cause and the remediation steps, and let me know who at BG-Demo owns it? I would also like to know whether anything about the incident affects the security review we completed when we bought Enterprise. There may be other things we need to discuss ahead of the renewal, but this is the one I want settled first. Regards, Oluwaseun Bamidele Chief Information Security Officer
Tom Ashdown 7 Aug 2026 09:30Hi Oluwaseun, Thanks for this, and apologies it has taken me a few days to come back to you. Fair points, all of them. I have asked Daniel to send you the written account of the cause and the changes made, and to say plainly whether it has any bearing on the security review. I do not want to paraphrase it for him and get it wrong. He will own it and he will write to you directly. Separately, and I appreciate the timing is not ideal, I have a request. Jordan Pike, who looks after our US customers, is talking to Etowah Lane, and their CISO would like to speak to a security peer who runs the brain in a regulated business. Would you be willing to take a short reference call with them? You would be free to be as candid about the incident and how we handled it as you see fit. It would be your view, not ours. No drama if the answer is no. Jordan is copied so he has your reply. Best, Tom On 4 Aug 2026, at 14:20, Oluwaseun Bamidele wrote: > I would like to understand where we stand following the July outage > and the two high priority tickets that have come through since.- Oluwaseun Bamidele 7 Aug 2026 10:37Tom, Thank you. I will wait for Daniel's account. Yes, I will take the call. I would rather speak to another CISO openly than have a vendor describe what a customer thinks. I will tell them what the security review covered, how the platform has fitted our controls, and that we had an incident in July and how it was handled. I will not oversell it, and I would expect Jordan to be comfortable with that. Please ask Jordan to arrange it through Siân, who knows my diary. I would like to have Daniel's written account in hand before the call, so I can speak to what has actually been fixed. Regards, Oluwaseun