Agent identity & access
Treat an agent as an actor with an owner, a purpose, and permissions that can be inspected and revoked. Follow what it can do across connected systems.
Who owns the agent and the access behind it?
Read this topic →Cybersecurity for accountable leaders
Prepare the people.
Protect the business.
Practical security reading for the decisions that cannot wait: agent access, AI defense, and incident response. Clear ownership before the pressure arrives.
About this publicationIdeas for decisions, not just discussion.
Choose your next question
Three ways in.
AI defense
Connect model behavior to application controls. Focus on the data, tools, and business actions that turn a bad answer into a consequential incident.
What could a manipulated answer actually cause?
Read this topic →Incident response
Prepare decision-makers as well as responders. Establish authority, credible communications, and recovery criteria before an incident compresses the timeline.
Who can make the next critical decision?
Read this topic →From the archive, refreshed
Old questions. Current thinking.
Original titles and article paths, revisited with current guidance and practical next steps. Each edition shows what was refreshed and when.
Your AI Agents Have Keys to Everything. Nobody's Watching the Doors.
A connected agent needs an accountable owner and a bounded identity. Start with what it can reach, then test what it is allowed to do.
5 min readRead the article →
The Leadership Playbook for LLM Defense
Defend the application around the model: the inputs it trusts, the data it reaches, and the actions it can take.
5 min readRead the article →
How to Master Cybersecurity Incident Response
A response plan is a decision system. Rehearse authority, communication, and recovery, not just the technical investigation.
5 min readRead the article →
How to Determine Your Cyber Risk
Turn a broad security score into a specific business scenario, an evidence-based estimate, and a decision someone owns.
5 min readRead the article →
Ransomware in 2025: 7 Myths That Could Put You at Risk
Revisit seven ransomware assumptions with a practical recovery checklist, updated for current leadership discussions.
5 min readRead the article →
Why The C-Suite Must Champion Incident Response and Near Real-Time Recovery
Translate recovery ambitions into business priorities, decision authority, tested dependencies, and measurable evidence.
5 min readRead the article →
Seven Things Leaders Should Know About RPO and RTO
Seven practical decisions turn recovery targets into a service the business can actually resume.
4 min readRead the article →
The OAuth Backdoor: Is Your MFA Broken 🔓
MFA protects sign-in, while application consent creates another access decision. Review both before trusting connected tools.
4 min readRead the article →
Taming Shadow AI By Offering a Better Yes
Give employees a useful approved route for AI work, with clear boundaries for data, integrations, and consequential decisions.
4 min readRead the article →
What Every Leader Needs to Know About the Velocity of Patching
Improve patching speed by removing ownership and validation delays while keeping priority tied to actual exposure.
4 min readRead the article →
Deepfake Vishing: When the Boss Calls with a "Crisis"
Voice impersonation changes what a familiar call can prove. Build verification into urgent payments, access changes, and sensitive requests.
4 min readRead the article →
Your Build Pipeline Just Became the Breach
Treat the software delivery pipeline as privileged infrastructure, with explicit trust boundaries from source changes to production.
4 min readRead the article →
A practical reading room
Useful ideas, ready for discussion.
Explore the decisions behind the technology. Each reading path connects a refreshed article, clear questions, and a focused brief for event organizers.
About this publication →Bring the conversation to your event
A sharper discussion starts
with a better brief.
Use these topic briefs to plan a focused leadership discussion, then explore relevant speaking resources.