cybersecurity governance
Your AI Agent Doesn’t Care About Your Controls
This is Part 1 of a 2-part series on AI agents and control assurance. Â Read Part 2: Controlling AI Agents: Why Detection Is Too Late The cybersecurity industry has spent years investing ...
AI Agents Are Creating a New Cybersecurity Blind Spot
The cybersecurity industry has spent years focusing on visibility. Dashboards expanded. Detection tooling improved. Telemetry volumes exploded. Yet one of the biggest emerging risks in 2026 is not hidden malware or an ...
Adaptive Security Leadership in an Expanding Threat Surface
Last week I joined fellow security leaders at CISO Inspire Summit North for a panel discussion on The Expanding Threat Surface: Adaptive Security Leadership for 2026 and Beyond.It was a timely discussion, because the challenge ...
The Line in the Sand: What Should Never Be Fully Automated in an AI SOC?
How to design an AI SOC that scales automation without surrendering control. A guide to tiered automation, policy guardrails, and high-risk SOC decisions. The post The Line in the Sand: What Should ...
How CISOs Can Beat the Ransomware Blame GameÂ
CISOs are often blamed after ransomware attacks, yet most breaches stem from organizational gaps, budget tradeoffs, and staffing shortages. This analysis explores why known risks remain unfixed and how security leaders can ...
The Cyber Insurance Crunch: Turning Rising Premiums Into Security WinsÂ
Cyber insurance is no longer just a safety net; it’s a catalyst for change. With premiums climbing and coverage shrinking, insurers are forcing organizations to modernize security operations, embrace AI-driven risk quantification, ...
The Political Weaponization of Cybersecurity
Cybersecurity should be guided by technical principles—not politics. Yet recent incidents in the U.S. highlight how cybersecurity decisions and dismissals are increasingly being used to advance partisan agendas. From cloud data migrations ...
4 Ways to Improve Governance in Product Security
Security is all about closing gaps—between attacker tactics and your defensive capabilities, for instance, or the known and unknown user identities in your cloud infrastructure. An important gap that too many organizations ...
Inadequate Cybersecurity
It is customary to begin an article on cybersecurity with statements about huge increases in threats and attacks and mounting cyberspace losses from fraud, identity theft, ransoms, data exfiltration, blackmail, etc. Few, ...
