Basic cyber defences every organisation needs beyond the Essential Eight
Cyber basics go beyond the Essential Eight. They need working controls, clear ownership and people with the authority to act. Here are 10 things to check.
cyber security
AI is changing the tempo of cybersecurity
AI is accelerating vulnerability discovery, but finding flaws is only the start. Recent vulnerabilities discovered expose the real challenge: can organisations fix problems fast enough?
AI is bringing old vulnerabilities into the light of day
The recent Korean bank hacks show how AI is bringing existing cyber security weaknesses out of obscurity and into the light of day.
AI is changing the terms of cyber defence
AI can help cyber defenders move faster, but speed is only useful if they can control the consequences. As AI systems gain the ability to act, the hard question is not just what they can do, but who gives them authority and who is accountable when something goes wrong.
The Essential Eight is being retired. What comes next?
A conversation with a friend who works in cyber security got me thinking about why we both like NIST’s pillar-based approach, to cyber and how AI tools can help teams test, learn and improve their defences.
We are the problem: how AI training shapes behaviour, risk and restraint
AI has no conscience, civic duty or intrinsic values. It learns from a corpus containing the best and worst of human behaviour, then pursues the objectives we reward and the actions we permit.
Intelligence is leaving the cloud, and our governance frameworks have not noticed
Intelligence is moving off the cloud and onto devices we own and control. Our governance models are still built for a world of centralised chokepoints - API logs, model providers, and labs we can regulate. That world is fading. What replaces it is messier, more distributed, and much harder to see.