8 min read
Randy Lindberg: 19 Aug 2026
A security officer at a credit union told me that in his entire time at the institution, they had never once talked about risk in numbers. Colors, ratings, adjectives, yes. Numbers, no. Another told me she wants to move toward quantification...
Read More
8 min read
Lucas Hathaway: 12 Aug 2026
A security officer at a credit union described their AI inventory to us like this: they went through the exercise, came out the other side with only...
8 min read
Lucas Hathaway: 05 Aug 2026
A risk leader at a large financial institution said something on a call this year that we have heard some version of at almost every institution...
8 min read
Lucas Hathaway: 24 Jul 2026
For CISOs, IT risk leaders, compliance officers, and vCISOs, a cybersecurity risk register is the single source of truth that turns scattered...
5 min read
Lucas Hathaway: 22 Jul 2026
Quick answer: A qualitative cyber risk assessment rates risk with labels like high, medium, and low, often on a color-coded heat map. A quantitative...
9 min read
Randy Lindberg: 08 Jul 2026
Quick answer: Choose a vCISO who acts as a strategic security leader, not an operator. The right one owns risk, governance, board reporting, and the...
7 min read
Lucas Hathaway: 01 Jul 2026
Quick answer: AI governance is the set of policies, owners, and controls that decide how your organization adopts and runs AI. AI risk management is...
6 min read
Lucas Hathaway: 26 Jun 2026
For CISOs, IT risk leaders, compliance teams, and privacy and audit stakeholders, an AI acceptable use policy is fast becoming the line between...
9 min read
Randy Lindberg: 10 Jun 2026
Quick Answer: AI governance starts with the Govern function of the NIST AI RMF. That means establishing an AI policy, updating existing cybersecurity...
8 min read
Lucas Hathaway: 30 May 2026
For CISOs, risk leaders, compliance teams, and internal audit stakeholders at credit unions and community banks, vendor due diligence is one of the...
