Cybersecurity Leadership

On 12 September I’m on stage in Karachi at the World CIO 200 Summit, Pakistan Edition, part of the ITCN Asia and Tech Destination Pakistan roadshow. My session is called “Cybersecurity in the Era of AI”, and I’m speaking as President of the Global CISO Forum. A forty-minute keynote forces you to cut an argument down to its spine. This post is the fuller version, written for t...

OT vendor remote access is the controlled, time-bounded way a supplier, integrator, or specialist reaches a specific industrial asset or support system without gaining open-ended access to the operational environment. The issue is not whether outside expertise is legitimate. In many plants, it i...

Short answer: CISOs burn out at the rate they do because the role is routinely constructed to fail: accountability for outcomes without authority over the systems that produce them, risk that belongs to the business quietly parked on one person’s conscience, and a mandate nobody ever wrote down. Those are governance defects. Meditation apps and resilience web...

AI incident response must be built for systems that can reason, call tools, and move quickly across enterprise services, not only for static applications.

The rapid operational deployment of autonomous artificial intelligence agents and multi-agent systems has fundamentally transformed enterprise architecture. Unlike traditional...

Short answer: Cyber underwriting in 2026 assumes you already have MFA everywhere that matters, EDR on every endpoint, tested and isolated backups, and real controls on privileged access. Those are the entry ticket, not differentiators. The questionnaire has become a maturity audit with financial consequences: answer it accurately, prepare for it like an audit...