04
Oct
Part 6 — AI Systems Are Becoming Security Domains of Their Own
14 min read
AI Governance
AI Governance examines how enterprises establish accountability, policies, controls, and oversight for the responsible and secure use of artificial intelligence. Coverage includes AI risk management, agentic AI, regulatory requirements, lifecycle governance, data, models, identity, authorization, human oversight, and organizational accountability—with a CISO focus on governing AI as it gains greater access, autonomy, and authority.
03
Oct
Black Hat USA 2026 — The Architecture of Trust Is Changing
Black Hat USA 2026 points to a fundamental shift in cybersecurity: from protecting assets to governing authority. Across AI agents, MCP, identity, supply chains, cloud, hardware and OT, this 12-part CISO series explores how the architecture of trust is changing.
10 min read
02
Oct
Part 8 — Human Approval Is Becoming Another Attack Surface
Human-in-the-Loop is not automatically a security control. When approvals become routine, humans stop verifying consequences and start clearing friction. Agentic AI may turn approval fatigue into the next MFA fatigue.
10 min read
02
Oct
The Shadow AI Economy: From Shadow IT to Shadow Agency
Shadow AI is becoming Shadow Agency. At PAC Horizons 2026, I discussed how AI agents, identities, tokens and delegated authority are changing the CISO agenda — and why Least Privilege may no longer be enough.
8 min read
11
Sep
The Automation Paradox: AI Can Fix Faster — But Can We Trust the Fix?
17 min read
11
Sep
Prompt Injection Is Becoming an Execution Problem
14 min read
10
Sep
The New AI Supply Chain
The AI supply chain no longer delivers only software. Models, prompts, skills, MCP servers and runtimes can all shape execution. CISOs must start governing not only executable code, but executable meaning.
12 min read
19
Aug
MCP Is Becoming Enterprise Infrastructure
MCP is becoming enterprise infrastructure. As AI agents gain access to tools, identities and business systems, CISOs must govern not just integration — but the authority flowing through it.
15 min read
18
Aug
Part 1 — When Data Becomes Instruction
AI agents are erasing the boundary between data and instruction. DEF CON 34 shows why untrusted context can become an indirect control plane—and why CISOs must secure the entire path from meaning to authority.
15 min read
03
Aug
Governance Failed Before Technology Did
Most AI-related breaches are not caused by failing models but by failing governance. Weak identity controls, unclear ownership and inconsistent oversight create the conditions attackers exploit. AI security begins with executive governance—not with technology.
4 min read