JAMES' BLOG

A deepfake CEO fraud incident cost one company twenty five million dollars in a single video call. This piece breaks down why convincing fakes work, what boards should ask about verification controls, and how to build a process that holds even when the face and voice on the call look completely real.

A popular checklist of AI tool settings promises better results in minutes: model choice, connectors, memory, custom instructions. Most of it is harmless. One setting, granting an AI assistant OAuth access to email and files, is a governance decision that deserves far more scrutiny than a toggle switch usually gets. Here is how to tell the difference.

Corporate cybersecurity spend keeps climbing, yet the personal perimeter, home networks, personal devices, and family accounts, sits entirely outside it. This piece breaks down why the tools stop at the office door, what boards should ask about executive exposure, and how to close the gap before it becomes a personal accountability requirement.

Too many healthcare organizations still treat compliance like a project: finish the assessment, close the gaps, pass the review, move on. That satisfies a plan, not reality. HIPAA is not a once a year checklist; it is a daily operating posture across systems, people, and vendors. This article explains why healthcare IT compliance is a program, and how cadence, ownership, and governance keep the environment defensible as it changes.

Artificial intelligence is no longer one capability a company either has or lacks. It is a layered stack that runs from traditional AI through machine learning, deep learning, generative AI, large language models, retrieval augmented generation, and now agentic AI that can act on its own. Each layer carries a different risk profile and a different governance demand, yet many boards still treat all of it as a single line item.