What we are thinking about
Notes on cyber and AI risk, written for the person who has to make the decision, not for the vendor selling into it.
Vibe Coding Is Great, Until It Isn't
What happens when a prototype built in one evening becomes a system that holds customers, data and money.
Read article →The Accountability You Can't Hand Off to a Prompt
AI speeds up almost every stage of security, but it can't own the decision. What goes wrong when teams confuse a tool with accountability.
Read article →Building an Agent Is the Easy Part. Building It Securely Is the Work
Three ways to build an AI agent in your organisation, from a fixed process with AI helping to full autonomy, and what each exposes.
Read article →Why the Firewall Isn't Enough to Know What AI Is Doing in Your Organisation
A tool list for mapping AI use goes stale within a month. Mapping by how AI reaches the data shows all six channels, not just the two a firewall sees.
Read article →The AI You Already Approved Sees More Than You Think
Two of the four familiar ways organisations use AI never show up in a network scan, and they are the approved, licensed ones.
Read article →Two Kinds of AI Use That Won't Show Up in Any Log
A model running locally leaves no network trace, and a no-code app an employee built can be live on real data before IT knows.
Read article →BI ≠ AI: When Data Governance Is Built for Reports, Not Agents
A data organisation can spend years getting business intelligence right: a clean warehouse, sensible reporting, permissions that make sense for the analysts reading…
Read article →Cloud-Native Is Not the Same as Cloud-Secure
Moving core infrastructure to the cloud is often treated as a security upgrade in itself. It is not. It moves the trust boundary; it does not remove the need to prov…
Read article →Modernising Security Oversight of Legacy Systems in a Shipping Environment
A national shipping and logistics operator runs a mix of decades-old operational systems alongside modern IT, the kind of estate where the two have never been asses…
Read article →AI Agents: New Opportunity or New Risk?
The shift has begun. Over the past year, a profound transformation has taken place in enterprise technology. We’re moving from AI tools to AI agents.…
Read article →Why Organizations Needs Strong AI Governance
Every aspect of our lives is being influenced by artificial intelligence systems.…
Read article →The world is changing
With the rise of agent-based artificial intelligence, executive roles are being reshaped like never before. The skills, responsibilities, and challenges are complete…
Read article →Is your AI environment trustworthy?
The Vercel incident was very simple. An employee connected an external AI tool to the company's Google Workspace through OAuth, and an attacker took over the account…
Read article →Organizational Capability Vs Execution?
Today, many organizations invest in their cloud infrastructure projects, standards and regulatory compliance projects, and of course, there are dozens if not hundred…
Read article →Governance Against Malware
In the past two weeks, all we hear are #WannaCry, #WannaCrypt, and the world’s biggest cyberattack.…
Read article →Cyber Hygiene Basics
Can you see the connection between personal body cleanse and computer network weaknesses?…
Read article →Cyber Hygiene Actions
On this post I will tell you how simple hygiene actions (with no additional tools required) can be implemented within your network, preventing digital illness and un…
Read article →Cyber Hygiene - Cloud
Do teeth brushing and cloud security correlate? Can teeth brushing save us money?…
Read article →CST-360 Protecting What Matters
We base our consultancy on vast experience in implementing various IT and Security practices, standards and frameworks. Mainly (but not subject to), the NIST (Nation…
Read article →Security Software as a Service
In the just ended decade cyberspace has change the way we live and operate.…
Read article →Is office space part of your strategy?
Could it be that organizations do not need office space anymore?…
Read article →2019 - New Year Predictions
Humbly and with respect, I admit that 2018 was very good for us @ CST-360. We had some new fascinating engagements that started and will continue into the new year w…
Read article →