JAMES' BLOG

A deepfake CEO fraud incident cost one company twenty five million dollars in a single video call. This piece breaks down why convincing fakes work, what boards should ask about verification controls, and how to build a process that holds even when the face and voice on the call look completely real.

A popular checklist of AI tool settings promises better results in minutes: model choice, connectors, memory, custom instructions. Most of it is harmless. One setting, granting an AI assistant OAuth access to email and files, is a governance decision that deserves far more scrutiny than a toggle switch usually gets. Here is how to tell the difference.

Most executives conflate agentic AI with chatbots or automation, and the confusion shows up first in governance, not technology. Here is a four-layer model, moving from AI and ML through generative AI and simple agents to full agentic autonomy, that gives boards and leadership teams a shared, accurate vocabulary before they approve the next AI investment.

Executives are quietly building AI clones of their own writing voice, uploading years of best work so Claude can draft in their tone. Done well, it scales authentic communication across emails, LinkedIn posts, and scripts. Done carelessly, it creates an accountability gap the board has not yet named. Here is the governance framework leaders need before they turn it on.

Corporate cybersecurity spend keeps climbing, yet the personal perimeter, home networks, personal devices, and family accounts, sits entirely outside it. This piece breaks down why the tools stop at the office door, what boards should ask about executive exposure, and how to close the gap before it becomes a personal accountability requirement.

Business email compromise cost organizations 2.77 billion dollars in 2024 alone, and most of it never triggered a SIEM alert. This article explains why log correlation cannot see impersonation or intent, and it outlines the layered, governed program boards should require instead of relying on detection tooling alone to stop fraud.

Family offices carry concentrated wealth and fragmented environments across investments, households, and advisors, yet many equate discretion with defense. This article breaks down the five blind spots behind family office cybersecurity failures, from under protected identities to ungoverned trusted relationships, and outlines the governance model leadership needs to close the gap before it becomes a crisis.

Property management has gone fully digital without becoming adequately governed. Firms standardize on Yardi and assume the technology question is solved, while identity, security, backups, vendor risk, and incident response sit unmanaged beneath it. This article explains why property management is one of America's most under-served IT verticals, why a strong platform is not the same as IT maturity, and how lean operators close the gap with a stronger operating model, not anot

Boards are approving record AI budgets while most enterprise AI initiatives still fail to deliver measurable returns. The gap is rarely the technology; it is the discipline applied before the money is committed. This article introduces the Boardroom AI Scorecard, a seven-dimension framework directors can use to interrogate any AI spend request and fund only what is ready.