Commentary says security-alert overload can cause warning fatigue
A 2016 NIST study found fatigue signs in 25 of 40 interviews, but it was small and qualitative.
Stories per day · 30 days
3 RSS
Relatedgovernance2ai-adoption1ai-agents1ai-governance1buyer-guide1ciso1commentary1compliance1compliance-tools1comptia1cyber-risk-quantification1cybersecurity1enterprise-ai1erm1fraud-detection1grc-platforms1grc-tools1leadership1
37 stories, newest first · one card per story
Stories tagged #risk-management
Cyber Risk Quantification Tools Evaluated in 2026 Buyer’s Guide
Eleven tools including RiskLens and BitSight are reviewed for model rigor, data grounding, and decision fit in cyber risk quantification.
11 IT and Cyber Risk Management Tools Evaluated in 2026 Guide
Guide assesses 11 platforms on register workflow depth, scoring flexibility, control linkage, reporting, and staffing demands.
1
GRC Platforms Evaluated in 2026 Buyer’s Guide
Eleven platforms including ServiceNow and Archer are reviewed for workflow, configurability, and adoption speed in governance risk compliance.
1
Kairos Open-Source Risk and Fraud Decisioning Platform
Kairos is a new open-source platform for risk and fraud decisioning released by finic-ai.
CISOs outline 2027 strategies with AI automation and passwordless systems
Equifax CISO Jeremy Koppen and others emphasize AI-driven operations, tailored risk ratings, and identity controls for enterprise AI agents in 2027.
Security leader draws risk lessons from a cancer diagnosis
The essay uses a stage-three prostate cancer case to argue for preparation, disclosure, and recovery time.
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
CompTIA says most firms are moving AI from pilots to enterprise use, with cybersecurity a top adoption barrier.
2
Should the CISO role be split in two?
Experts argue organizations should keep one strategic CISO rather than splitting the role in two.
3
Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report
A guide argues CISOs cannot answer boards on security, financial exposure, and trend because tools lack shared context.
1
Sophos uses agentic AI to show businesses which security fixes deserve funding
Sophos launched CISO Advantage, an agentic AI tool that turns assessments into prioritized, budget-aligned roadmaps.
CISOs can no longer ignore the nation-state threat
CSO analysis argues AI-accelerated nation-state intrusions, especially Chinese pre-positioning, force CISOs to fold geopolitical threats into enterprise risk management.
2
EY Survey Finds Autonomous AI Implementation Outpaces Oversight
EY survey of senior AI executives finds organizations deploying autonomous AI faster than their governance and controls can manage.
The AI hacking apocalypse is not inevitable
Security experts, including former CISA and NCSC leaders, argue AI agent apocalypse claims are overblown and manageable with established cybersecurity controls.
First Agentic AI Data Breach Reported to Spanish Regulator
Spain's AEPD reported the first data breach executed by an AI agent, which autonomously chained login, vulnerability discovery, and personal data modification.
3
Cyber-Attacks Cost Organizations $52,000 on Average
Hiscox's 2026 survey of 6,800 security leaders found 29% of organizations hit by successful attacks averaging $52,000 in costs and 32.8 hours of downtime.
1
You don’t have to join the hack-back program to inherit its risk
A new US presidential memorandum creates a vetted private hack-back program, leaving participating vendors and their customers with untested legal liability and collateral risks.
What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
CISA officials outline future plans for the CDM program, emphasizing speed, automation, unified data, and data-driven federal risk management.
Most chief audit executives can’t tell you what AI is worth yet
Gartner finds 93% of audit leaders use AI, but 54% of chief audit executives have not started measuring its value.
2
HelmGuard Raises $7.3 Million for Agentic GRC and Security
Agentic GRC and security startup HelmGuard raised a $7.3 million seed round co-led by Infinity Ventures and Frontline.
2
Post-quantum cryptography adoption and the national security implications
Opinion analysis argues quantum computing favors nation-state espionage, leaving lagging post-quantum adoption at critical infrastructure exposed to harvest-now-decrypt-later attacks.
2
The hidden risks of shadow AI
UK NCSC guidance warns shadow AI use by employees risks data exposure, lost data control, and attacker exploitation of vulnerable AI agents.
1
Governing Bring Your Own AI: A Parameterized Maturity Model
Researchers propose a parameterized governance model and maturity ladder for Bring Your Own AI, finding data exposure and compliance dominate BYOAI risks.
Insurers Search for Answers to Rein in Rogue AI
Insurers and CISOs are racing to define coverage and risk controls as incidents of harm caused by rogue AI agents mount.