<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Nicky Thomas</title>
	<atom:link href="https://gwyr.net/feed/" rel="self" type="application/rss+xml" />
	<link>https://gwyr.net</link>
	<description>Nicky Thomas</description>
	<lastBuildDate>Sun, 15 Mar 2026 14:50:38 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.2</generator>

<image>
	<url>https://gwyr.net/wp-content/uploads/2026/02/cropped-Thomas-Family-Crest-large-75x75.png</url>
	<title>Nicky Thomas</title>
	<link>https://gwyr.net</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>When Goodwill Isn’t Enough: Why Governance and Procurement Matter in IT Partnerships</title>
		<link>https://gwyr.net/when-goodwill-isnt-enough-why-governance-and-procurement-matter-in-it-partnerships/</link>
					<comments>https://gwyr.net/when-goodwill-isnt-enough-why-governance-and-procurement-matter-in-it-partnerships/#respond</comments>
		
		<dc:creator><![CDATA[Nicky]]></dc:creator>
		<pubDate>Sun, 15 Mar 2026 14:50:37 +0000</pubDate>
				<category><![CDATA[Cybersecurity]]></category>
		<guid isPermaLink="false">https://gwyr.net/?p=2166</guid>

					<description><![CDATA[In many community and non‑profit organisations, IT starts with goodwill. A friendly IT firm offers to “help out,” sets up email and cloud services, and everyone is grateful that things “just work.” Problems only appear later, when the invoices arrive. Recently, a small governing body in the sports sector found itself facing a substantial IT [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">In many community and non‑profit organisations, IT starts with goodwill. A friendly IT firm offers to “help out,” sets up email and cloud services, and everyone is grateful that things “just work.”</p>



<p class="wp-block-paragraph">Problems only appear later, when the invoices arrive.</p>



<p class="wp-block-paragraph">Recently, a small governing body in the sports sector found itself facing a substantial IT bill covering services and licences going back almost two years. There was no written contract, no clear record of what had been agreed, and no obvious audit trail of previous invoices for the same services. The situation has become a case study in why robust governance and procurement processes are not a luxury, but a necessity.</p>



<h2 class="wp-block-heading" id="the-cautionary-tale-anonymised">The cautionary tale</h2>



<p class="wp-block-paragraph">In this case, a volunteer‑run organisation had relied on a single IT supplier to set up and manage its cloud tenancy, user accounts, and ongoing support. The supplier also arranged and controlled the organisation’s email and productivity licences.</p>



<p class="wp-block-paragraph">Much of this relationship was based on informal conversations and good faith. Over time, the supplier provided a mix of configuration work, user support, and licence management, but without a formal, written agreement that set out which parts were chargeable and on what terms.</p>



<p class="wp-block-paragraph">Two years later, the organisation received a sizeable invoice. It covered licence costs reaching back to the start of the relationship, even though no prior invoices or documentation of those charges could be found in the organisation’s records. The invoice landed just as the organisation was trying to get proper control and documentation of its cloud tenant so it could decide how to move forward with a very short &#8220;payment due by&#8221; of 36 minutes.</p>



<p class="wp-block-paragraph">When the organisation asked for evidence – previous invoices, written approvals, or emails showing that the costs had been agreed – the supplier pointed to historic, informal discussions with a couple of officers and insisted that the invoice “stands” because the licences had been used. For a publicly funded governing body with strict accountability requirements, “we talked about it in person a while ago” simply wasn’t good enough.</p>



<p class="wp-block-paragraph">Despite their concerns, the organisation paid a large invoice within 30 days in an effort to resolve the issue and act in good faith. After payment, they struggled to get the supplier to even confirm receipt or to take timely action on simple requests relating to their tenant, while the supplier was nevertheless responsive to other third‑party contacts. What began as a relationship built on goodwill had turned into an uncomfortable and potentially reputationally risky situation.</p>



<h2 class="wp-block-heading" id="where-governance-broke-down">Where governance broke down</h2>



<p class="wp-block-paragraph">This story illustrates several governance gaps that many charities, clubs, and small governing bodies will recognise:</p>



<ul class="wp-block-list">
<li><strong>No formal procurement process</strong><br>The IT relationship started informally, without a competitive process, clear scope, or documented commercial terms. That opened the door to misunderstandings later about what was free, what was chargeable, and when costs would be billed.<br></li>



<li><strong>Lack of written agreements</strong><br>Key points – such as whether licences were being supplied at cost, on credit, or free of charge as a favour were not recorded in a contract, service schedule, or even consistent email trail. When disputes arose, everyone was relying on memory rather than documentation.<br></li>



<li><strong>Weak financial controls and audit trail</strong><br>There was no clear record of prior invoices for the same services, no minutes confirming that ongoing licence expenditure with that supplier had been approved, and no budget line that clearly matched the eventual invoice. That left officers in the impossible position of being asked to approve a large back‑dated bill with nothing formal to point to.<br></li>



<li><strong>Single‑supplier dependency</strong><br>The supplier controlled both the cloud tenancy and the flow of billing information. When the relationship deteriorated, it became difficult for the organisation to get basic clarity or to move quickly to an alternative provider.</li>
</ul>



<h2 class="wp-block-heading" id="what-ethical-suppliers-do-differently">What ethical suppliers do differently</h2>



<p class="wp-block-paragraph">Most reputable IT suppliers understand that small organisations still need strong governance. Ethical providers typically:</p>



<ul class="wp-block-list">
<li>Put clear written proposals and contracts in place, even when “doing a favour”</li>



<li>Separate “goodwill” work (genuinely free) from chargeable services, and label them explicitly</li>



<li>Invoice regularly and promptly, rather than retrospectively for years at a time</li>



<li>Provide clear licence reports, usage summaries, and documentation that finance officers and auditors can understand</li>



<li>Respond professionally to reasonable questions, including requests to evidence agreements or confirm receipt of payments</li>
</ul>



<p class="wp-block-paragraph">When a supplier instead relies on verbal understandings from years ago, issues large retrospective invoices without supporting paperwork, and is slow or evasive in confirming payments or carrying out agreed actions, it should raise red flags for any board or executive committee.</p>



<h2 class="wp-block-heading" id="practical-steps-for-better-it-procurement-and-gove">Practical steps for better IT procurement and governance</h2>



<p class="wp-block-paragraph">To avoid ending up in similar situations, organisations can take a few practical steps:</p>



<ol class="wp-block-list">
<li><strong>Always document the relationship</strong>
<ul class="wp-block-list">
<li>Require a written scope of services, pricing, and billing frequency before work begins.</li>



<li>Ensure both sides sign or explicitly accept it, and store it centrally.<br></li>
</ul>
</li>



<li><strong>Keep procurement transparent</strong>
<ul class="wp-block-list">
<li>For significant IT spend, seek multiple quotes or proposals.</li>



<li>Record the basis on which a supplier was chosen – value, expertise, service levels – in meeting minutes.<br></li>
</ul>
</li>



<li><strong>Define who can commit to spend</strong>
<ul class="wp-block-list">
<li>Make it clear which roles have authority to agree contracts or ongoing costs.</li>



<li>Capture those approvals formally (e.g. minutes, signed order forms, or written sign‑off).<br></li>
</ul>
</li>



<li><strong>Insist on regular, timely invoicing</strong>
<ul class="wp-block-list">
<li>Avoid open‑ended, “we’ll bill you later” arrangements.</li>



<li>Question any invoice that attempts to retrospectively charge long periods without previous billing, especially where no contract exists.<br></li>
</ul>
</li>



<li><strong>Maintain an IT governance file</strong>
<ul class="wp-block-list">
<li>Keep copies of contracts, licence reports, invoices, and key correspondence in a shared, organised repository.</li>



<li>This is invaluable for officer handovers, audits, and resolving disputes.<br></li>
</ul>
</li>



<li><strong>Avoid single‑point dependency</strong>
<ul class="wp-block-list">
<li>Maintain admin‑level access to your own cloud tenant and domains.</li>



<li>Ensure more than one officer understands the basics of the setup and has the necessary credentials recorded securely.<br></li>
</ul>
</li>



<li><strong>Escalate early when behaviour feels off</strong>
<ul class="wp-block-list">
<li>If a supplier’s conduct begins to feel unprofessional or evasive – for example, delayed confirmations of payment, inconsistent stories, or reluctance to provide documentation – raise it early with your board and, where appropriate, with the vendor ecosystem or relevant oversight channels.</li>
</ul>
</li>
</ol>



<h2 class="wp-block-heading" id="turning-a-bad-experience-into-stronger-practice">Turning a bad experience into stronger practice</h2>



<p class="wp-block-paragraph">The real world experience above is uncomfortable, but it’s also an opportunity. By tightening governance and procurement processes, organisations can:</p>



<ul class="wp-block-list">
<li>Protect themselves from unexpected or unsubstantiated invoices</li>



<li>Reduce the risk of conflicts of interest and accusations of poor financial stewardship</li>



<li>Ensure continuity when volunteers or officers change</li>



<li>Attract and retain professional, ethical suppliers who are comfortable working within clear rules</li>
</ul>



<p class="wp-block-paragraph">Goodwill is valuable, but it is not a substitute for governance. The lesson is simple: even when everyone starts with the best of intentions, <strong>write it down, agree it up‑front, and make sure your organisation, not just your supplier is in control of its IT.</strong></p>



<p class="wp-block-paragraph"></p>
]]></content:encoded>
					
					<wfw:commentRss>https://gwyr.net/when-goodwill-isnt-enough-why-governance-and-procurement-matter-in-it-partnerships/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Why Digital Strategy – and a Digital Officer – Matters in the Modern Bowls Club</title>
		<link>https://gwyr.net/why-digital-strategy-and-a-digital-officer-matters-in-the-modern-bowls-club/</link>
					<comments>https://gwyr.net/why-digital-strategy-and-a-digital-officer-matters-in-the-modern-bowls-club/#respond</comments>
		
		<dc:creator><![CDATA[Nicky]]></dc:creator>
		<pubDate>Mon, 09 Feb 2026 13:51:12 +0000</pubDate>
				<category><![CDATA[Cybersecurity]]></category>
		<guid isPermaLink="false">https://gwyr.net/?p=2138</guid>

					<description><![CDATA[Bowls clubs are built on tradition, community, and continuity. These strengths remain vital, but they now sit alongside a new reality: clubs that thrive in the modern era do so by embracing digital tools with purpose and leadership. A clear digital strategy, led by a dedicated Digital Officer at executive level, is no longer optional—it [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">Bowls clubs are built on tradition, community, and continuity. These strengths remain vital, but they now sit alongside a new reality: clubs that thrive in the modern era do so by embracing digital tools with purpose and leadership. A clear digital strategy, led by a dedicated Digital Officer at executive level, is no longer optional—it is essential.</p>



<h3 class="wp-block-heading">Digital Is Not “Just Technology”</h3>



<p class="wp-block-paragraph">Digital strategy is not about social media posts or updating a website once a year. It is about how the club communicates, operates, attracts members, manages data, and plans for the future.</p>



<p class="wp-block-paragraph"><strong>In practical terms, digital touches almost every part of club life:</strong></p>



<ul class="wp-block-list">
<li>How new members find the club</li>



<li>How fixtures, results, and news are shared</li>



<li>How members communicate with committees</li>



<li>How bookings, subscriptions, and events are managed</li>



<li>How the club presents itself to sponsors, local authorities, and the wider community</li>
</ul>



<p class="wp-block-paragraph">Without a coherent strategy, these activities become fragmented, reactive, and dependent on a small number of volunteers “doing their best” without authority or direction.</p>



<h3 class="wp-block-heading">The Case for a Digital Officer</h3>



<p class="wp-block-paragraph">Many clubs rely on an informal web or social media volunteer. While well-intentioned, this model is increasingly risky. Digital activity now affects governance, reputation, data protection, and long-term sustainability.</p>



<p class="wp-block-paragraph"><strong>A Digital Officer should:</strong></p>



<ul class="wp-block-list">
<li>Be a recognised executive officer of the club</li>



<li>Have a clear mandate to develop and deliver digital strategy</li>



<li>Report at committee level alongside other senior officers</li>



<li>Work across functions rather than in isolation</li>
</ul>



<p class="wp-block-paragraph">This elevates digital from a technical task to a strategic responsibility.</p>



<h3 class="wp-block-heading">Executive Status Matters</h3>



<p class="wp-block-paragraph">Placing the Digital Officer on the executive committee is crucial. It ensures that:</p>



<ul class="wp-block-list">
<li>Digital considerations are embedded in all major decisions</li>



<li>The club avoids short-term fixes that create long-term problems</li>



<li>Investment in systems and skills is planned, not improvised</li>



<li>Responsibility for data protection, accessibility, and online safety is clear</li>
</ul>



<p class="wp-block-paragraph">Just as clubs would not exclude finance or safeguarding from executive oversight, digital should not sit on the margins.</p>



<h3 class="wp-block-heading">Supporting Membership Growth and Retention</h3>



<p class="wp-block-paragraph">Today’s prospective members—of all ages—expect to find accurate, up-to-date information online. A poor or outdated digital presence sends an unintended message that a club is inactive or closed to newcomers.</p>



<p class="wp-block-paragraph"><strong>A strategic digital approach helps:</strong></p>



<ul class="wp-block-list">
<li>Attract new players and social members</li>



<li>Engage younger and working-age members</li>



<li>Keep existing members informed and involved</li>



<li>Showcase the club’s culture, history, and achievements</li>
</ul>



<p class="wp-block-paragraph">Importantly, good digital design also supports accessibility, ensuring information is available to members who may not attend the club regularly.</p>



<h3 class="wp-block-heading">Reducing Pressure on Volunteers</h3>



<p class="wp-block-paragraph">Clubs often struggle with volunteer fatigue. A Digital Officer with a mandate can:</p>



<ul class="wp-block-list">
<li>Standardise systems and processes</li>



<li>Reduce duplication and manual effort</li>



<li>Provide continuity when volunteers change</li>



<li>Ensure knowledge is documented rather than lost</li>
</ul>



<p class="wp-block-paragraph">This makes volunteering more sustainable and less dependent on a single individual.</p>



<h3 class="wp-block-heading">Preparing for the Future</h3>



<p class="wp-block-paragraph">Bowls clubs increasingly interact with national bodies, funding organisations, and partners that expect digital competence. Grant applications, compliance reporting, safeguarding, and communications are all becoming more digital by default.</p>



<p class="wp-block-paragraph"><strong>A Digital Officer ensures the club is:</strong></p>



<ul class="wp-block-list">
<li>Compliant with data protection and governance requirements</li>



<li>Ready to adopt new tools when appropriate</li>



<li>Resilient in the face of change</li>



<li>Positioned as a modern, credible organisation</li>
</ul>



<h3 class="wp-block-heading">Tradition and Modernity Go Together</h3>



<p class="wp-block-paragraph">Embracing digital strategy does not dilute tradition—it protects it. By making the club easier to run, easier to join, and easier to engage with, digital leadership helps ensure that bowls clubs remain active, welcoming, and sustainable for generations to come.</p>



<p class="wp-block-paragraph">Appointing a Digital Officer as an executive officer with a clear strategic mandate is a statement of intent: that the club values its future as much as its past.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://gwyr.net/why-digital-strategy-and-a-digital-officer-matters-in-the-modern-bowls-club/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>CyberUK 2026</title>
		<link>https://gwyr.net/cyberuk-2026/</link>
					<comments>https://gwyr.net/cyberuk-2026/#respond</comments>
		
		<dc:creator><![CDATA[Nicky]]></dc:creator>
		<pubDate>Sun, 01 Feb 2026 22:43:54 +0000</pubDate>
				<category><![CDATA[Cybersecurity]]></category>
		<guid isPermaLink="false">https://gwyr.net/?p=2101</guid>

					<description><![CDATA[Delighted to announce that I have received an invitation to attend the 10th Anniversary of Cyber UK &#8211; the UK Governments Flagship Cyber Security Event in Glasgow. I previously attended a Cyber UK event in 2024 which took place in Birmingham and it was a fantastic experience for professional development and networking. The sessions and [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">Delighted to announce that I have received an invitation to attend the 10th Anniversary of Cyber UK &#8211; the UK Governments Flagship Cyber Security Event in Glasgow. I previously attended a Cyber UK event in 2024 which took place in Birmingham and it was a fantastic experience for professional development and networking.</p>



<p class="wp-block-paragraph">The sessions and vendors during the event provided a lot of insight in to the cyber landscape and what is currently happening around the world. It is important for all professionals in this industry to remain as positively informed and up to date as possible.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://gwyr.net/cyberuk-2026/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
