Cyber Insurance May Be Optional, But Knowing What You Can Afford to Lose Isn’t
By Kareena Bavisi
It comes down to one number: what your worst incident would cost, and how much of it the business can carry on...
Why AI Governance Is Becoming Cyber Insurance’s Next MFA
By Kareena Bavisi
I set out to understand why companies still don’t think they’re adequately covered. What I found looks like a pattern the insurance...
SBOM, VEX, and AI: Dr. Allan Friedman on the Future of Software Supply Chain Security
A conversation on why software transparency is no longer optional, and how AI is about to make it more urgent than ever.
Every piece of...
Build the Pipeline, Not the Headcount
There's a principle in Taoist philosophy called wu wei, often translated as "effortless action" or "non-doing." It doesn't mean passivity. It means acting in...
The Man Fortune 500s Call When the Ransom Note Arrives
When a ransomware note hits a large publicly-traded company on a Tuesday morning, the first calls go to outside counsel, the incident response firm,...
The Human Factor: Why AI Automation in GRC Still Needs Leadership in the Loop
The pitch comes regularly now: "Our platform automates 85% of your control assessment workload." "Generative AI selects controls in seconds, no human review needed."...
