Insights and articles on cyber, IT and AI risk
Short, clear analyses of situations where digital dependency becomes relevant for executives, boards and owners: the fixed pieces on cyber, IT and AI, and the articles published alongside them.
Effectiveness you cannot demonstrate
When security measures exist, but their effectiveness is not visible enough.
Read the insightDependency becomes critical
When systems, suppliers or technical debt become business-critical.
Read the insightAI use grows faster than decision-making
When AI grows faster than decision-making, permissions, logging and human approval.
Read the insightAn AI agent can act. Who sets the limits?
AI is an umbrella term. I split it into the language model, the agent and the organisation around it, and show who sets the limits of an agent. What AI may do is decided by a person.
Read the articleThe accounts that give access to everything
A handful of accounts gives access to everything. Protecting them properly, with a safety net that works, takes time, maintenance and sometimes money. What it delivers depends on where you start.
Read the articleThe safety net that depends on the same component
Toyota, UniSuper, Maastricht University and Atlassian each wrote down how one event hit the system and the safety net at once. What the two shared was nowhere in the record.
Read the articleWhoever writes the report decides the outcome
Three test reports, a requirement that is on paper, and still three conclusions. The difference is not the standard but the rule used to combine the documents.
Read the articleOutside supervision, not outside the risk
Supervision and legislation focus on vital sectors. In the mid-market the dependency is just as absolute, without anyone asking about it.
Read the article