Biography
David Ferbrache OBE is a British cyber security specialist and the founder and Managing Director of Beyond Blue, an Edinburgh-based consultancy that advises organisations on cyber security and resilience. He has more than 30 years of experience in cyber and information security, spanning national defence, professional services and independent advisory work.
Defence and national security
Ferbrache studied computer science at Heriot-Watt University and later completed an MBA with the Open University. Before joining the Ministry of Defence he was a Technical Director at the Defence Evaluation and Research Agency. He joined the MoD as a civil servant in 1997 and held a series of increasingly senior posts, including Head of Cyber Policy and Plans and, from 2012 to 2013, Head of Cyber and Space. Beyond Blue's profile of him records that during his MoD career he created and delivered the Defence Cyber Security Programme, set up the department's first penetration testing team, ran the first UK-US cyber wargame and carried out the first national infrastructure cyber security review. He was appointed OBE for services to national security following the attacks of 11 September 2001.
KPMG and Beyond Blue
In 2013 Ferbrache joined KPMG as Technical Director for cyber security, working with the firm's largest clients on defences against sophisticated threats including cyber crime and espionage. He became a Director of Cyber Defence Services in 2016 and, in January 2018, was promoted to Chief Technology Officer for the firm's cyber practice, overseeing technical services for financial services clients, including its ethical hacking team. He also served as KPMG's Global Head of Cyber Futures. His writing from this period includes "Ruthless and Rational Cyber Criminal Entrepreneurs" (2016), a review of trends in the cyber crime landscape.
Beyond Blue was founded in 2019 by Ferbrache and Paul Taylor CBE. The firm describes itself as a boutique consultancy that helps clients prepare for, respond to and recover from cyber incidents, with services covering organisational, supply chain and ecosystem resilience. Its work is mainly with boards and senior management in financial services, government and national security, and it has established a strategic advisory board to inform its thinking.
Public roles and recognition
Ferbrache chaired Scotland's National Cyber Resilience Advisory Board, which guided implementation of the Scottish Government's cyber resilience strategy, stepping down from the chair in 2023. He is a Fellow of BCS, the Chartered Institute for IT, and contributes commentary on cyber security, including articles for Entrepreneur UK on the position of small businesses. His awards include Personality of the Year at the Cyber Security Awards in 2018, European Business Continuity Consultant of the Year in 2022 and Cybersecurity Leader of the Year at the Scottish Cyber Awards in 2025.
On Wealth Office
Ferbrache appeared alongside Lord Bernard Hogan-Howe, former Commissioner of the Metropolitan Police, in the Wealth Office X episode "Cybersecurity in the Age of AI, Extortion & Exposure", hosted by Michael Macfarlane. He described the threat to family offices as largely transnational organised crime operating at scale, citing survey evidence that around a third of family offices experience a cyber incident each year. He explained how criminal groups are moving from ransomware towards data theft, extortion and blackmail, sometimes aimed at individual family members, and how artificial intelligence is sharpening their research and impersonation, from phishing lures to simulated voices and video. He also identified professional advisers as a possible route in. His advice was that cyber security cannot be left to IT alone: principals should help identify the assets that really matter, think through scenarios and prepare incident response, because reputational and personal damage is the hardest to repair.
On Wealth Office
Lord Bernard Hogan-Howe and David Ferbrache OBE explain why extortion, impersonation and oversharing now place family offices on the front line of cyber risk.
Insights drawing on OBE