JAMES' BLOG

Corporate cybersecurity spend keeps climbing, yet the personal perimeter, home networks, personal devices, and family accounts, sits entirely outside it. This piece breaks down why the tools stop at the office door, what boards should ask about executive exposure, and how to close the gap before it becomes a personal accountability requirement.

A deepfake CEO fraud incident cost one company twenty five million dollars in a single video call. This piece breaks down why convincing fakes work, what boards should ask about verification controls, and how to build a process that holds even when the face and voice on the call look completely real.

A widely shared AI security playbook maps twenty enterprise AI threats, from prompt injection to shadow AI. Sixteen of them describe risks that simply did not exist in a pre-AI security program. Here is which threats your existing controls already cover, which ones require new governance entirely, and the four questions every board should ask before approving the next AI deployment.

Most boards equate cybersecurity with firewalls and a compliance checklist, covering perhaps two of the twelve domains a mature program actually requires. API security, third-party risk, and disaster recovery rarely make the agenda, yet they are where the next material incident is most likely to originate. Here is the full map and the four questions every board should be asking.

Corporate cybersecurity spend keeps climbing, yet the personal perimeter, home networks, personal devices, and family accounts, sits entirely outside it. This piece breaks down why the tools stop at the office door, what boards should ask about executive exposure, and how to close the gap before it becomes a personal accountability requirement.