The rules for using the NHI Mgmt Group website.
These terms and conditions outline the rules and regulations for using the NHIMG Website, located at https://nhimg.org. By accessing this website, we assume you accept these terms and conditions. Do not continue to use NHIMG if you do not agree to take all of the terms and conditions stated on this page.
This website is operated by NHIM Group Ltd, a company incorporated in England and Wales (Company No. 15755288), registered office 18 Spareleaze Hill, Loughton, Essex, IG10 1BT, UK. In these terms, “NHIMG”, “we” and “us” mean NHIM Group Ltd.
Unless otherwise stated, NHIMG and/or its licensors own the intellectual property rights for all material on NHIMG. All intellectual property rights are reserved. You may access this from NHIMG for your own personal use, subject to restrictions set in these terms and conditions.
Our guides are free to read on our website. PDF versions are available to subscribers of our weekly NHI & AI Identity Journal: when you ask for a PDF you subscribe to the newsletter, and we email you a personal download link that works for 30 days. You can unsubscribe at any time; this does not affect PDFs you have already downloaded.
PDFs are provided under the Licence above, for your own use. Please share the link to the online guide rather than the PDF file. How we handle your details is explained in our Privacy Policy.
NHI Mgmt Group is an independent publisher and research organisation. Our articles, research, analysis, summaries, rankings and other publications may reference, briefly quote, summarise and comment on publicly available information, including material published by technology vendors, researchers and the media. Where we draw on third-party material we credit the original source and link to it.
Our original works, including our analysis, research, commentary, databases, classifications, taxonomies, rankings and summaries, belong to NHIM Group Ltd, even where they reference third-party material.
We research our content using publicly available information from across the web, including vendor websites, research papers, news, standards bodies and public social media. We use automated tools to help find and gather this information, typically for limited periods rather than continuously.
We draw out themes, findings and statistics to inform our own independent analysis. We do not republish other people’s content word for word, and we credit and link to the original sources we draw on. If you have a concern about how we have used your content, contact us via our contact page and we will act promptly, including stopping collection or removing content where appropriate.
Much of our content, including our guides, breach analyses, FAQs and glossary, is researched and written with the help of AI tools, including large language models, under the editorial direction of our founder, Lalit Choda. Given the volume we publish, not every item is individually reviewed by a person before publication.
Instead, we work to a published process: writers are instructed to use primary sources (standards bodies, regulators, official documentation and the original research or vendor post) and to cite only sources they have read; automated checks test every page for broken or unknown links, retired framework identifiers, structure and length before publication; each page carries a version number and change history; selected pages, especially those on law, regulation and threat actors, receive an independent fact-check; and we correct pages when errors are reported or sources change.
AI-assisted content can still contain errors or become out of date, so please check important information before relying on it. If you spot an error, contact us via our contact page and we will correct it.
Our podcast conversations are real, unscripted discussions between people. We use AI tools only to help with editing, creating short clips and publishing them.
Our guides, templates, playbooks, checklists, maturity models and similar resources are general guidance. They are a starting point that you must adapt to your organisation, your legal and regulatory duties and your risk, and test before relying on them. They are provided “as is”, without any warranty that they are complete, current or suitable for a particular purpose. You are responsible for how you use them.
Some of our content describes attack techniques, testing tools and certifications for security professionals. It is published to help organisations defend themselves and to support authorised security testing. You must only test systems that you own or have written permission to test. Unauthorised access to computer systems is a criminal offence under the Computer Misuse Act 1990 in the UK and similar laws elsewhere, and we do not permit use of our content for that purpose.
Our threat actor profiles and breach analyses summarise what governments, regulators, the affected organisations and security researchers have published. Attribution is as stated by the cited sources. Allegations are not findings of guilt, and we do not name individuals in our threat actor profiles.
How we research, credit and link sources, how editorials based on vendor or research posts are written, how our FAQ and glossary content is produced, and how vendors can ask for corrections or removal is set out in our Editorial and Sourcing Policy.
Company names, product names and logos are the property of their owners. Mentioning or featuring a company does not mean it endorses us, or that we endorse it, unless we say so.
Some content is produced under commercial agreements with technology vendors. Those relationships are governed by separate written agreements, and partner content is identified as such. We keep full editorial control of everything we publish.
If you believe content on our website infringes your rights or is inaccurate, contact us via our contact page with the page address and details of your concern. We will review it promptly and, where appropriate, correct, update or remove the content.
If you post on our forum or elsewhere on the site, you keep ownership of your post but give us a non-exclusive, royalty-free licence to publish, display and use it on our platforms. You are responsible for what you post, and we may moderate or remove posts.
Our content is for general information. It is not professional, legal or security advice for your specific situation, and you should take appropriate advice before acting on it.
We link to third-party websites for convenience. We are not responsible for their content or practices.
We take care to keep our content accurate but do not guarantee that it is complete or up to date. To the extent permitted by law, we are not liable for any loss arising from your use of this website. Nothing in these terms limits any liability that cannot be limited by law.
We may update these terms from time to time; the “Last updated” date shows the current version. These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
Questions? Email us at [email protected] or use our contact form.
Contact us
Comments
Parts of this website offer users an opportunity to post and exchange opinions and information in certain areas of the website. NHIMG does not filter, edit, publish or review comments before their presence on the website. Comments do not reflect the views and opinions of NHIMG, its agents, and/or affiliates. Comments reflect the views and opinions of the person who posts their views and opinions. To the extent permitted by applicable laws, NHIMG shall not be liable for the comments or any liability, damages, or expenses caused and/or suffered as a result of any use of and/or posting of and/or appearance of the comments on this website.
NHIMG reserves the right to monitor all comments and remove any comments that can be considered inappropriate, offensive, or causes a breach of these Terms and Conditions.