Agent identity & access
Treat an agent as an actor with an owner, a purpose, and permissions that can be inspected and revoked. Follow what it can do across connected systems.
Who owns the agent and the access behind it?
Read this topic →Cybersecurity for accountable leaders
Prepare the people.
Protect the business.
Practical security reading for the decisions that cannot wait: agent access, AI defense, and incident response. Clear ownership before the pressure arrives.
About this publicationIdeas for decisions, not just discussion.
Choose your next question
Three ways in.
AI defense
Connect model behavior to application controls. Focus on the data, tools, and business actions that turn a bad answer into a consequential incident.
What could a manipulated answer actually cause?
Read this topic →Incident response
Prepare decision-makers as well as responders. Establish authority, credible communications, and recovery criteria before an incident compresses the timeline.
Who can make the next critical decision?
Read this topic →Latest thinking & refreshed archive
Fresh perspectives. Useful questions.
New analysis alongside refreshed original articles, ordered by publication or original issue date. Each article clearly identifies its edition.
When the Agent Is the Incident: A Readiness Drill for Security Leaders
October guidance from U.S. agencies and a Singapore tabletop exercise put agent control and incident readiness in focus. Here is a bounded drill for testing who can stop an agent and establish what it changed.
4 min readRead the article →
Your AI Agents Have Keys to Everything. Nobody's Watching the Doors.
A connected agent needs an accountable owner and a bounded identity. Start with what it can reach, then test what it is allowed to do.
5 min readRead the article →
Your Build Pipeline Just Became the Breach
Treat the software delivery pipeline as privileged infrastructure, with explicit trust boundaries from source changes to production.
4 min readRead the article →
Deepfake Vishing: When the Boss Calls with a "Crisis"
Voice impersonation changes what a familiar call can prove. Build verification into urgent payments, access changes, and sensitive requests.
4 min readRead the article →
The OAuth Backdoor: Is Your MFA Broken 🔓
MFA protects sign-in, while application consent creates another access decision. Review both before trusting connected tools.
4 min readRead the article →
The Leadership Playbook for LLM Defense
Defend the application around the model: the inputs it trusts, the data it reaches, and the actions it can take.
5 min readRead the article →
Taming Shadow AI By Offering a Better Yes
Give employees a useful approved route for AI work, with clear boundaries for data, integrations, and consequential decisions.
4 min readRead the article →
What Every Leader Needs to Know About the Velocity of Patching
Improve patching speed by removing ownership and validation delays while keeping priority tied to actual exposure.
4 min readRead the article →
Seven Things Leaders Should Know About RPO and RTO
Seven practical decisions turn recovery targets into a service the business can actually resume.
4 min readRead the article →
How to Master Cybersecurity Incident Response
A response plan is a decision system. Rehearse authority, communication, and recovery, not just the technical investigation.
5 min readRead the article →
Ransomware in 2025: 7 Myths That Could Put You at Risk
Revisit seven ransomware assumptions with a practical recovery checklist, updated for current leadership discussions.
5 min readRead the article →
How to Determine Your Cyber Risk
Turn a broad security score into a specific business scenario, an evidence-based estimate, and a decision someone owns.
5 min readRead the article →
Why The C-Suite Must Champion Incident Response and Near Real-Time Recovery
Translate recovery ambitions into business priorities, decision authority, tested dependencies, and measurable evidence.
5 min readRead the article →
A practical reading room
Useful ideas, ready for discussion.
Explore the decisions behind the technology. Explore articles and discussion guides for readers interested in the decisions behind the technology.
About this publication →Keep exploring
Follow the question
that matters to you.
Read the latest analysis, explore a topic in more depth, or find speakers with relevant public work.