AI Governance

AI Governance examines how enterprises establish accountability, policies, controls, and oversight for the responsible and secure use of artificial intelligence. Coverage includes AI risk management, agentic AI, regulatory requirements, lifecycle governance, data, models, identity, authorization, human oversight, and organizational accountability—with a CISO focus on governing AI as it gains greater access, autonomy, and authority.
29
Jul
The Slow Failure

The Slow Failure

7 min read
29
Jul
AI Reliability Is Not Uptime

AI Reliability Is Not Uptime

AI uptime does not prove AI reliability. A system can remain online while its evidence, context, quality or operational capability has already failed. Part 1 explains why AI availability must be measured at the point of business value.
11 min read
29
Jul
Introduction: Series -The Reliability Illusion

Introduction: Series -The Reliability Illusion

AI systems can remain online while their reliability has already failed. This introduction presents a new series on semantic outages, drift, AI agents, monitoring, self-healing and the governance controls CISOs need to keep AI under control.
14 min read
27
Jul
Autonomous AI Cyberattacks May Be Rare. The Capability Behind Them Will Not Be.

Autonomous AI Cyberattacks May Be Rare. The Capability Behind Them Will Not Be.

A recent AI security incident is being treated as an isolated event. That misses the point. The real lesson is not autonomous cyberattacks—it is that agentic AI has demonstrated the ability to develop unsafe attack trajectories. CISOs should rethink governance now.
11 min read
23
Jul
AI-Driven Attacks: Why the Existing Security Architecture Will Not Be Enough

AI-Driven Attacks: Why the Existing Security Architecture Will Not Be Enough

AI is not simply making attacks faster. It is changing how they adapt, scale and hide inside legitimate business activity. The next detection gap is no longer technical alone—it is contextual. This series explores what CISOs must rethink before autonomous attackers arrive.
5 min read
21
Jul
AI Sprawl Is Already Here

AI Sprawl Is Already Here

5 min read
20
Jul
The Board Does Not Need More Cybersecurity Reports—It Needs Better Decisions

The Board Does Not Need More Cybersecurity Reports—It Needs Better Decisions

11 min read
20
Jul
SAP Transformation Is Redefining the Role of the CISO

SAP Transformation Is Redefining the Role of the CISO

13 min read
20
Jul
SAP RISE Is Never “Set and Forget”

SAP RISE Is Never “Set and Forget”

SAP RISE is not a project that ends at go-live. It is a continuously evolving operating model that requires permanent governance. This article explains why operational assurance—not implementation success—has become the defining responsibility of the modern CISO.
14 min read
18
Jul
Vendor Lock-In Is Not the Real Risk in SAP RISE - Loss of Control Is

Vendor Lock-In Is Not the Real Risk in SAP RISE - Loss of Control Is

17 min read