https://professorkailondon.com/photos.html https://professorkailondon.com/photos/professor-kai-london-ciso-cybersecurity-ai-expert.png Professor Kai London — CISO, Cybersecurity, AI and Quantum Computing Expert Professor Kai London, senior Chief Information Security Officer (CISO), board advisor and Honorary Professor in Cybersecurity, AI and Quantum Computing. https://professorkailondon.com/photos/professor-kai-london-board-advisor-interim-ciso.png Professor Kai London — Board Advisor, NED and Interim / Fractional CISO, CIO, CTO Professor Kai London, board advisor and interim/fractional CISO, CIO and CTO for regulated, mission-critical sectors. https://professorkailondon.com/photos/professor-kai-london-quantum-ai-security-founder.png Professor Kai London — Founder & CEO, Quantum AI Systems Security Professor Kai London, Founder and CEO of Quantum AI Systems Security and UCL researcher in cybersecurity, AI and quantum computing. https://professorkailondon.com/principles/principle-001.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-001-trust-breaks-before-systems-do.png Professor Kai London — Cybersecurity Principle 001: Trust breaks before systems do Professor Kai London cybersecurity principle 1: "Trust breaks before systems do." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-002.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-002-if-it-cannot-be-evidenced-it-cannot-be-defended.png Professor Kai London — Cybersecurity Principle 002: If it cannot be evidenced, it cannot be defended Professor Kai London cybersecurity principle 2: "If it cannot be evidenced, it cannot be defended." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-003.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-003-map-the-fault-hold-the-line-prove-it-held.png Professor Kai London — Cybersecurity Principle 003: Map the fault. Hold the line. Prove it held Professor Kai London cybersecurity principle 3: "Map the fault. Hold the line. Prove it held." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-004.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-004-the-breach-is-no-longer-the-loss-the-business-is.png Professor Kai London — Cybersecurity Principle 004: The breach is no longer the loss. The business is Professor Kai London cybersecurity principle 4: "The breach is no longer the loss. The business is." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-005.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-005-risk-has-moved-from-the-server-room-to-the-balance-sheet.png Professor Kai London — Cybersecurity Principle 005: Risk has moved from the server room to the balance sheet Professor Kai London cybersecurity principle 5: "Risk has moved from the server room to the balance sheet." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-006.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-006-you-cannot-govern-a-machinespeed-adversary-with-a-quarterly-.png Professor Kai London — Cybersecurity Principle 006: You cannot govern a machine-speed adversary with a quarterly committee Professor Kai London cybersecurity principle 6: "You cannot govern a machine-speed adversary with a quarterly committee." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-007.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-007-a-certification-is-a-vocabulary-not-a-victory.png Professor Kai London — Cybersecurity Principle 007: A certification is a vocabulary, not a victory Professor Kai London cybersecurity principle 7: "A certification is a vocabulary, not a victory." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-008.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-008-compliance-theatre-ends-the-moment-evidence-is-requested.png Professor Kai London — Cybersecurity Principle 008: Compliance theatre ends the moment evidence is requested Professor Kai London cybersecurity principle 8: "Compliance theatre ends the moment evidence is requested." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-009.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-009-the-most-dangerous-trust-is-the-trust-nobody-remembers-grant.png Professor Kai London — Cybersecurity Principle 009: The most dangerous trust is the trust nobody remembers granting Professor Kai London cybersecurity principle 9: "The most dangerous trust is the trust nobody remembers granting." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-010.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-010-thirdparty-exposure-is-the-new-breach-surface.png Professor Kai London — Cybersecurity Principle 010: Third-party exposure is the new breach surface Professor Kai London cybersecurity principle 10: "Third-party exposure is the new breach surface." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-011.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-011-they-did-not-break-in-they-moved-through-what-you-trusted.png Professor Kai London — Cybersecurity Principle 011: They did not break in — they moved through what you trusted Professor Kai London cybersecurity principle 11: "They did not break in — they moved through what you trusted." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-012.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-012-the-fault-line-is-rarely-the-firewall-often-it-is-the-passwo.png Professor Kai London — Cybersecurity Principle 012: The fault line is rarely the firewall — often it is the password reset Professor Kai London cybersecurity principle 12: "The fault line is rarely the firewall — often it is the password reset." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-013.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-013-business-impact-is-the-language-of-power.png Professor Kai London — Cybersecurity Principle 013: Business impact is the language of power Professor Kai London cybersecurity principle 13: "Business impact is the language of power." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-014.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-014-boards-decide-in-money-quantify-or-be-ignored.png Professor Kai London — Cybersecurity Principle 014: Boards decide in money — quantify, or be ignored Professor Kai London cybersecurity principle 14: "Boards decide in money — quantify, or be ignored." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-015.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-015-a-risk-rating-you-cannot-define-is-a-risk-rating-you-cannot-.png Professor Kai London — Cybersecurity Principle 015: A risk rating you cannot define is a risk rating you cannot defend Professor Kai London cybersecurity principle 15: "A risk rating you cannot define is a risk rating you cannot defend." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-016.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-016-untested-continuity-plans-are-hypotheses-not-capabilities.png Professor Kai London — Cybersecurity Principle 016: Untested continuity plans are hypotheses, not capabilities Professor Kai London cybersecurity principle 16: "Untested continuity plans are hypotheses, not capabilities." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-017.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-017-a-backup-is-not-recovery-until-the-business-is-restored.png Professor Kai London — Cybersecurity Principle 017: A backup is not recovery until the business is restored Professor Kai London cybersecurity principle 17: "A backup is not recovery until the business is restored." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-018.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-018-the-vendor-with-better-evidence-wins.png Professor Kai London — Cybersecurity Principle 018: The vendor with better evidence wins Professor Kai London cybersecurity principle 18: "The vendor with better evidence wins." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-019.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-019-superior-cyber-maturity-is-a-competitive-advantage.png Professor Kai London — Cybersecurity Principle 019: Superior cyber maturity is a competitive advantage Professor Kai London cybersecurity principle 19: "Superior cyber maturity is a competitive advantage." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-020.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-020-demonstrated-beats-asserted-every-time.png Professor Kai London — Cybersecurity Principle 020: Demonstrated beats asserted — every time Professor Kai London cybersecurity principle 20: "Demonstrated beats asserted — every time." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-021.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-021-governance-comes-before-controls.png Professor Kai London — Cybersecurity Principle 021: Governance comes before controls Professor Kai London cybersecurity principle 21: "Governance comes before controls." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-022.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-022-every-control-needs-a-principle-every-principle-needs-a-cont.png Professor Kai London — Cybersecurity Principle 022: Every control needs a principle; every principle needs a control Professor Kai London cybersecurity principle 22: "Every control needs a principle; every principle needs a control." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-023.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-023-controls-fail-silently-unless-silence-is-monitored.png Professor Kai London — Cybersecurity Principle 023: Controls fail silently unless silence is monitored Professor Kai London cybersecurity principle 23: "Controls fail silently unless silence is monitored." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-024.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-024-prevention-fails-detection-decides-what-happens-next.png Professor Kai London — Cybersecurity Principle 024: Prevention fails. Detection decides what happens next Professor Kai London cybersecurity principle 24: "Prevention fails. Detection decides what happens next." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-025.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-025-a-control-that-has-not-been-pressuretested-is-still-only-a-h.png Professor Kai London — Cybersecurity Principle 025: A control that has not been pressure-tested is still only a hope Professor Kai London cybersecurity principle 25: "A control that has not been pressure-tested is still only a hope." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-026.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-026-blast-radius-is-a-business-decision.png Professor Kai London — Cybersecurity Principle 026: Blast radius is a business decision Professor Kai London cybersecurity principle 26: "Blast radius is a business decision." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-027.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-027-concentration-risk-hides-inside-convenience.png Professor Kai London — Cybersecurity Principle 027: Concentration risk hides inside convenience Professor Kai London cybersecurity principle 27: "Concentration risk hides inside convenience." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-028.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-028-risk-acceptance-is-a-decision-not-a-disappearing-act.png Professor Kai London — Cybersecurity Principle 028: Risk acceptance is a decision, not a disappearing act Professor Kai London cybersecurity principle 28: "Risk acceptance is a decision, not a disappearing act." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-029.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-029-ai-risk-is-now-enterprise-risk.png Professor Kai London — Cybersecurity Principle 029: AI risk is now enterprise risk Professor Kai London cybersecurity principle 29: "AI risk is now enterprise risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-030.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-030-a-confident-wrong-answer-is-still-a-control-failure.png Professor Kai London — Cybersecurity Principle 030: A confident wrong answer is still a control failure Professor Kai London cybersecurity principle 30: "A confident wrong answer is still a control failure." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-031.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-031-privacy-bolted-on-late-is-risk-priced-at-a-premium.png Professor Kai London — Cybersecurity Principle 031: Privacy bolted on late is risk priced at a premium Professor Kai London cybersecurity principle 31: "Privacy bolted on late is risk priced at a premium." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-032.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-032-accountability-is-now-named-timed-and-evidenced.png Professor Kai London — Cybersecurity Principle 032: Accountability is now named, timed and evidenced Professor Kai London cybersecurity principle 32: "Accountability is now named, timed and evidenced." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-033.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-033-late-notification-turns-an-incident-into-a-governance-failur.png Professor Kai London — Cybersecurity Principle 033: Late notification turns an incident into a governance failure Professor Kai London cybersecurity principle 33: "Late notification turns an incident into a governance failure." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-034.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-034-direction-matters-more-than-snapshot-maturity.png Professor Kai London — Cybersecurity Principle 034: Direction matters more than snapshot maturity Professor Kai London cybersecurity principle 34: "Direction matters more than snapshot maturity." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-035.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-035-measure-the-risk-the-control-and-the-outcome-separately.png Professor Kai London — Cybersecurity Principle 035: Measure the risk, the control and the outcome separately Professor Kai London cybersecurity principle 35: "Measure the risk, the control and the outcome separately." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-036.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-036-a-dashboard-that-triggers-no-decision-is-theatre.png Professor Kai London — Cybersecurity Principle 036: A dashboard that triggers no decision is theatre Professor Kai London cybersecurity principle 36: "A dashboard that triggers no decision is theatre." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-037.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-037-three-lines-of-defence-means-three-different-jobs.png Professor Kai London — Cybersecurity Principle 037: Three lines of defence means three different jobs Professor Kai London cybersecurity principle 37: "Three lines of defence means three different jobs." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-038.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-038-test-controls-do-not-admire-them.png Professor Kai London — Cybersecurity Principle 038: Test controls — do not admire them Professor Kai London cybersecurity principle 38: "Test controls — do not admire them." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-039.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-039-start-with-the-business-process-not-the-technology-stack.png Professor Kai London — Cybersecurity Principle 039: Start with the business process, not the technology stack Professor Kai London cybersecurity principle 39: "Start with the business process, not the technology stack." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-040.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-040-proportionality-is-the-discipline-of-serious-security.png Professor Kai London — Cybersecurity Principle 040: Proportionality is the discipline of serious security Professor Kai London cybersecurity principle 40: "Proportionality is the discipline of serious security." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-041.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-041-inherent-risk-shows-whether-controls-are-earning-their-place.png Professor Kai London — Cybersecurity Principle 041: Inherent risk shows whether controls are earning their place Professor Kai London cybersecurity principle 41: "Inherent risk shows whether controls are earning their place." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-042.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-042-trust-damage-rarely-follows-technical-severity.png Professor Kai London — Cybersecurity Principle 042: Trust damage rarely follows technical severity Professor Kai London cybersecurity principle 42: "Trust damage rarely follows technical severity." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-043.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-043-trust-earned-in-calm-is-the-capital-spent-in-crisis.png Professor Kai London — Cybersecurity Principle 043: Trust earned in calm is the capital spent in crisis Professor Kai London cybersecurity principle 43: "Trust earned in calm is the capital spent in crisis." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-044.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-044-the-containment-path-must-be-rehearsed-before-the-breach.png Professor Kai London — Cybersecurity Principle 044: The containment path must be rehearsed before the breach Professor Kai London cybersecurity principle 44: "The containment path must be rehearsed before the breach." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-045.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-045-structured-escalation-beats-silence-and-panic.png Professor Kai London — Cybersecurity Principle 045: Structured escalation beats silence and panic Professor Kai London cybersecurity principle 45: "Structured escalation beats silence and panic." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-046.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-046-win-avoid-prove-most-organisations-fail-the-third.png Professor Kai London — Cybersecurity Principle 046: Win, avoid, prove — most organisations fail the third Professor Kai London cybersecurity principle 46: "Win, avoid, prove — most organisations fail the third." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-047.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-047-the-morning-after-the-breach-is-the-only-honest-test.png Professor Kai London — Cybersecurity Principle 047: The morning after the breach is the only honest test Professor Kai London cybersecurity principle 47: "The morning after the breach is the only honest test." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-048.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-048-a-binder-on-a-shelf-is-not-a-security-programme.png Professor Kai London — Cybersecurity Principle 048: A binder on a shelf is not a security programme Professor Kai London cybersecurity principle 48: "A binder on a shelf is not a security programme." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-049.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-049-the-right-action-at-the-right-time-by-the-right-owner-with-e.png Professor Kai London — Cybersecurity Principle 049: The right action, at the right time, by the right owner — with evidence Professor Kai London cybersecurity principle 49: "The right action, at the right time, by the right owner — with evidence." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-050.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-050-governance-was-never-about-controls-it-was-about-the-trust-t.png Professor Kai London — Cybersecurity Principle 050: Governance was never about controls — it was about the trust they protect Professor Kai London cybersecurity principle 50: "Governance was never about controls — it was about the trust they protect." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-051.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-051-zero-trust-is-not-a-product-it-is-a-refusal-to-believe-witho.png Professor Kai London — Cybersecurity Principle 051: Zero Trust is not a product — it is a refusal to believe without proof Professor Kai London cybersecurity principle 51: "Zero Trust is not a product — it is a refusal to believe without proof." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-052.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-052-sase-is-not-remote-access-it-is-business-access-under-contin.png Professor Kai London — Cybersecurity Principle 052: SASE is not remote access — it is business access under continuous judgement Professor Kai London cybersecurity principle 52: "SASE is not remote access — it is business access under continuous judgement." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-053.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-053-xdr-is-not-more-alerts-it-is-decision-compression.png Professor Kai London — Cybersecurity Principle 053: XDR is not more alerts — it is decision compression Professor Kai London cybersecurity principle 53: "XDR is not more alerts — it is decision compression." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-054.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-054-identity-is-the-new-root-system-of-the-enterprise.png Professor Kai London — Cybersecurity Principle 054: Identity is the new root system of the enterprise Professor Kai London cybersecurity principle 54: "Identity is the new root system of the enterprise." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-055.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-055-every-privileged-account-is-a-loaded-weapon-with-a-username.png Professor Kai London — Cybersecurity Principle 055: Every privileged account is a loaded weapon with a username Professor Kai London cybersecurity principle 55: "Every privileged account is a loaded weapon with a username." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-056.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-056-the-perimeter-did-not-disappear-it-multiplied.png Professor Kai London — Cybersecurity Principle 056: The perimeter did not disappear — it multiplied Professor Kai London cybersecurity principle 56: "The perimeter did not disappear — it multiplied." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-057.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-057-a-firewall-rule-is-not-a-strategy.png Professor Kai London — Cybersecurity Principle 057: A firewall rule is not a strategy Professor Kai London cybersecurity principle 57: "A firewall rule is not a strategy." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-058.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-058-visibility-without-enforcement-is-observation-not-defence.png Professor Kai London — Cybersecurity Principle 058: Visibility without enforcement is observation, not defence Professor Kai London cybersecurity principle 58: "Visibility without enforcement is observation, not defence." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-059.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-059-the-attacker-needs-one-path-the-defender-must-know-which-pat.png Professor Kai London — Cybersecurity Principle 059: The attacker needs one path; the defender must know which paths matter Professor Kai London cybersecurity principle 59: "The attacker needs one path; the defender must know which paths matter." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-060.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-060-every-unmanaged-exception-is-a-future-incident-with-approval.png Professor Kai London — Cybersecurity Principle 060: Every unmanaged exception is a future incident with approval history Professor Kai London cybersecurity principle 60: "Every unmanaged exception is a future incident with approval history." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-061.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-061-security-debt-compounds-faster-than-technical-debt.png Professor Kai London — Cybersecurity Principle 061: Security debt compounds faster than technical debt Professor Kai London cybersecurity principle 61: "Security debt compounds faster than technical debt." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-062.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-062-the-most-dangerous-access-is-access-that-became-normal.png Professor Kai London — Cybersecurity Principle 062: The most dangerous access is access that became normal Professor Kai London cybersecurity principle 62: "The most dangerous access is access that became normal." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-063.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-063-a-policy-without-enforcement-is-corporate-poetry.png Professor Kai London — Cybersecurity Principle 063: A policy without enforcement is corporate poetry Professor Kai London cybersecurity principle 63: "A policy without enforcement is corporate poetry." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-064.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-064-a-control-without-an-owner-is-already-failing.png Professor Kai London — Cybersecurity Principle 064: A control without an owner is already failing Professor Kai London cybersecurity principle 64: "A control without an owner is already failing." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-065.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-065-threat-intelligence-is-only-valuable-when-it-changes-a-decis.png Professor Kai London — Cybersecurity Principle 065: Threat intelligence is only valuable when it changes a decision Professor Kai London cybersecurity principle 65: "Threat intelligence is only valuable when it changes a decision." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-066.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-066-the-board-does-not-need-more-alerts-it-needs-fewer-surprises.png Professor Kai London — Cybersecurity Principle 066: The board does not need more alerts — it needs fewer surprises Professor Kai London cybersecurity principle 66: "The board does not need more alerts — it needs fewer surprises." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-067.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-067-cybersecurity-is-no-longer-a-cost-centre-it-is-a-trust-engin.png Professor Kai London — Cybersecurity Principle 067: Cybersecurity is no longer a cost centre — it is a trust engine Professor Kai London cybersecurity principle 67: "Cybersecurity is no longer a cost centre — it is a trust engine." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-068.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-068-security-architecture-is-where-strategy-becomes-enforceable.png Professor Kai London — Cybersecurity Principle 068: Security architecture is where strategy becomes enforceable Professor Kai London cybersecurity principle 68: "Security architecture is where strategy becomes enforceable." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-069.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-069-the-cloud-did-not-remove-risk-it-made-weak-governance-scalab.png Professor Kai London — Cybersecurity Principle 069: The cloud did not remove risk — it made weak governance scalable Professor Kai London cybersecurity principle 69: "The cloud did not remove risk — it made weak governance scalable." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-070.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-070-hybrid-work-did-not-weaken-security-poor-access-design-did.png Professor Kai London — Cybersecurity Principle 070: Hybrid work did not weaken security — poor access design did Professor Kai London cybersecurity principle 70: "Hybrid work did not weaken security — poor access design did." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-071.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-071-the-helpdesk-is-now-part-of-the-attack-surface.png Professor Kai London — Cybersecurity Principle 071: The helpdesk is now part of the attack surface Professor Kai London cybersecurity principle 71: "The helpdesk is now part of the attack surface." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-072.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-072-an-api-is-a-door-treat-it-like-one.png Professor Kai London — Cybersecurity Principle 072: An API is a door — treat it like one Professor Kai London cybersecurity principle 72: "An API is a door — treat it like one." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-073.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-073-data-does-not-leak-only-through-breaches-it-leaks-through-ba.png Professor Kai London — Cybersecurity Principle 073: Data does not leak only through breaches — it leaks through bad design Professor Kai London cybersecurity principle 73: "Data does not leak only through breaches — it leaks through bad design." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-074.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-074-shadow-ai-is-shadow-it-with-executive-liability.png Professor Kai London — Cybersecurity Principle 074: Shadow AI is shadow IT with executive liability Professor Kai London cybersecurity principle 74: "Shadow AI is shadow IT with executive liability." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-075.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-075-the-answer-may-be-artificial-but-the-liability-is-real.png Professor Kai London — Cybersecurity Principle 075: The answer may be artificial, but the liability is real Professor Kai London cybersecurity principle 75: "The answer may be artificial, but the liability is real." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-076.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-076-cyber-insurance-does-not-replace-cyber-discipline.png Professor Kai London — Cybersecurity Principle 076: Cyber insurance does not replace cyber discipline Professor Kai London cybersecurity principle 76: "Cyber insurance does not replace cyber discipline." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-077.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-077-a-supplier-questionnaire-is-not-supplychain-security.png Professor Kai London — Cybersecurity Principle 077: A supplier questionnaire is not supply-chain security Professor Kai London cybersecurity principle 77: "A supplier questionnaire is not supply-chain security." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-078.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-078-a-green-dashboard-can-still-hide-a-red-business-risk.png Professor Kai London — Cybersecurity Principle 078: A green dashboard can still hide a red business risk Professor Kai London cybersecurity principle 78: "A green dashboard can still hide a red business risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-079.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-079-control-maturity-without-business-context-is-expensive-decor.png Professor Kai London — Cybersecurity Principle 079: Control maturity without business context is expensive decoration Professor Kai London cybersecurity principle 79: "Control maturity without business context is expensive decoration." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-080.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-080-the-best-cisos-reduce-ambiguity-before-they-reduce-risk.png Professor Kai London — Cybersecurity Principle 080: The best CISOs reduce ambiguity before they reduce risk Professor Kai London cybersecurity principle 80: "The best CISOs reduce ambiguity before they reduce risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-081.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-081-cyber-leadership-is-making-risk-visible-before-it-becomes-ob.png Professor Kai London — Cybersecurity Principle 081: Cyber leadership is making risk visible before it becomes obvious Professor Kai London cybersecurity principle 81: "Cyber leadership is making risk visible before it becomes obvious." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-082.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-082-security-culture-shows-itself-when-policy-is-inconvenient.png Professor Kai London — Cybersecurity Principle 082: Security culture shows itself when policy is inconvenient Professor Kai London cybersecurity principle 82: "Security culture shows itself when policy is inconvenient." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-083.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-083-the-breach-report-is-written-long-before-the-breach.png Professor Kai London — Cybersecurity Principle 083: The breach report is written long before the breach Professor Kai London cybersecurity principle 83: "The breach report is written long before the breach." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-084.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-084-forensics-begin-before-the-incident.png Professor Kai London — Cybersecurity Principle 084: Forensics begin before the incident Professor Kai London cybersecurity principle 84: "Forensics begin before the incident." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-085.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-085-the-attacker-does-not-care-who-owns-the-system.png Professor Kai London — Cybersecurity Principle 085: The attacker does not care who owns the system Professor Kai London cybersecurity principle 85: "The attacker does not care who owns the system." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-086.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-086-cyber-resilience-is-a-team-sport-with-named-players.png Professor Kai London — Cybersecurity Principle 086: Cyber resilience is a team sport with named players Professor Kai London cybersecurity principle 86: "Cyber resilience is a team sport with named players." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-087.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-087-the-faster-you-contain-the-less-you-explain.png Professor Kai London — Cybersecurity Principle 087: The faster you contain, the less you explain Professor Kai London cybersecurity principle 87: "The faster you contain, the less you explain." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-088.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-088-a-crisis-does-not-create-weakness-it-reveals-it.png Professor Kai London — Cybersecurity Principle 088: A crisis does not create weakness — it reveals it Professor Kai London cybersecurity principle 88: "A crisis does not create weakness — it reveals it." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-089.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-089-every-merger-imports-trust-every-integration-imports-risk.png Professor Kai London — Cybersecurity Principle 089: Every merger imports trust; every integration imports risk Professor Kai London cybersecurity principle 89: "Every merger imports trust; every integration imports risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-090.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-090-the-fastest-route-to-breach-is-often-the-route-approved-for-.png Professor Kai London — Cybersecurity Principle 090: The fastest route to breach is often the route approved for convenience Professor Kai London cybersecurity principle 90: "The fastest route to breach is often the route approved for convenience." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-091.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-091-a-secure-design-that-cannot-be-operated-is-not-secure.png Professor Kai London — Cybersecurity Principle 091: A secure design that cannot be operated is not secure Professor Kai London cybersecurity principle 91: "A secure design that cannot be operated is not secure." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-092.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-092-security-transformation-fails-when-evidence-is-designed-last.png Professor Kai London — Cybersecurity Principle 092: Security transformation fails when evidence is designed last Professor Kai London cybersecurity principle 92: "Security transformation fails when evidence is designed last." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-093.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-093-the-audit-should-not-be-the-first-time-a-control-is-tested.png Professor Kai London — Cybersecurity Principle 093: The audit should not be the first time a control is tested Professor Kai London cybersecurity principle 93: "The audit should not be the first time a control is tested." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-094.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-094-continuous-access-requires-continuous-assurance.png Professor Kai London — Cybersecurity Principle 094: Continuous access requires continuous assurance Professor Kai London cybersecurity principle 94: "Continuous access requires continuous assurance." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-095.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-095-a-control-that-cannot-fail-safely-can-fail-catastrophically.png Professor Kai London — Cybersecurity Principle 095: A control that cannot fail safely can fail catastrophically Professor Kai London cybersecurity principle 95: "A control that cannot fail safely can fail catastrophically." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-096.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-096-cyber-risk-is-not-reduced-by-noise-it-is-reduced-by-decision.png Professor Kai London — Cybersecurity Principle 096: Cyber risk is not reduced by noise — it is reduced by decisions Professor Kai London cybersecurity principle 96: "Cyber risk is not reduced by noise — it is reduced by decisions." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-097.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-097-trust-is-not-a-statement-it-is-an-operating-condition.png Professor Kai London — Cybersecurity Principle 097: Trust is not a statement — it is an operating condition Professor Kai London cybersecurity principle 97: "Trust is not a statement — it is an operating condition." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-098.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-098-the-elite-cyber-professional-protects-the-packet-the-policy-.png Professor Kai London — Cybersecurity Principle 098: The elite cyber professional protects the packet, the policy and the profit Professor Kai London cybersecurity principle 98: "The elite cyber professional protects the packet, the policy and the profit." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-099.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-099-do-not-sell-security-sell-confidence-under-scrutiny.png Professor Kai London — Cybersecurity Principle 099: Do not sell security — sell confidence under scrutiny Professor Kai London cybersecurity principle 99: "Do not sell security — sell confidence under scrutiny." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-100.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-100-professor-kai-london-prove-trust-before-pressure-exposes-the.png Professor Kai London — Cybersecurity Principle 100: Professor Kai London: prove trust before pressure exposes the fault Professor Kai London cybersecurity principle 100: "Professor Kai London: prove trust before pressure exposes the fault." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-101.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-101-security-is-a-promise-you-must-be-able-to-keep-on-your-worst.png Professor Kai London — Cybersecurity Principle 101: Security is a promise you must be able to keep on your worst day Professor Kai London cybersecurity principle 101: "Security is a promise you must be able to keep on your worst day." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-102.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-102-anticipate-the-breach-engineer-the-containment-evidence-the-.png Professor Kai London — Cybersecurity Principle 102: Anticipate the breach. Engineer the containment. Evidence the trust Professor Kai London cybersecurity principle 102: "Anticipate the breach. Engineer the containment. Evidence the trust." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-103.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-103-verification-is-cheaper-than-regret.png Professor Kai London — Cybersecurity Principle 103: Verification is cheaper than regret Professor Kai London cybersecurity principle 103: "Verification is cheaper than regret." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-104.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-104-assume-compromise-then-design-like-it-already-happened.png Professor Kai London — Cybersecurity Principle 104: Assume compromise, then design like it already happened Professor Kai London cybersecurity principle 104: "Assume compromise, then design like it already happened." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-105.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-105-the-best-incident-is-the-one-your-design-made-boring.png Professor Kai London — Cybersecurity Principle 105: The best incident is the one your design made boring Professor Kai London cybersecurity principle 105: "The best incident is the one your design made boring." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-106.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-106-trust-is-a-budget-spend-it-deliberately-never-by-default.png Professor Kai London — Cybersecurity Principle 106: Trust is a budget — spend it deliberately, never by default Professor Kai London cybersecurity principle 106: "Trust is a budget — spend it deliberately, never by default." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-107.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-107-you-dont-rise-to-the-threat-you-fall-to-your-weakest-rehears.png Professor Kai London — Cybersecurity Principle 107: You don't rise to the threat; you fall to your weakest rehearsal Professor Kai London cybersecurity principle 107: "You don't rise to the threat; you fall to your weakest rehearsal." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-108.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-108-an-unverified-login-is-a-stranger-you-handed-the-keys-to.png Professor Kai London — Cybersecurity Principle 108: An unverified login is a stranger you handed the keys to Professor Kai London cybersecurity principle 108: "An unverified login is a stranger you handed the keys to." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-109.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-109-security-that-slows-the-business-will-be-switched-off-in-the.png Professor Kai London — Cybersecurity Principle 109: Security that slows the business will be switched off in the dark Professor Kai London cybersecurity principle 109: "Security that slows the business will be switched off in the dark." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-110.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-110-the-cloud-rents-you-speed-and-lends-you-blind-spots.png Professor Kai London — Cybersecurity Principle 110: The cloud rents you speed and lends you blind spots Professor Kai London cybersecurity principle 110: "The cloud rents you speed and lends you blind spots." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-111.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-111-a-privilege-nobody-reviews-becomes-a-liability-nobody-owns.png Professor Kai London — Cybersecurity Principle 111: A privilege nobody reviews becomes a liability nobody owns Professor Kai London cybersecurity principle 111: "A privilege nobody reviews becomes a liability nobody owns." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-112.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-112-detection-you-never-tested-is-a-smoke-alarm-with-no-battery.png Professor Kai London — Cybersecurity Principle 112: Detection you never tested is a smoke alarm with no battery Professor Kai London cybersecurity principle 112: "Detection you never tested is a smoke alarm with no battery." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-113.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-113-resilience-is-bought-before-the-storm-not-borrowed-during-it.png Professor Kai London — Cybersecurity Principle 113: Resilience is bought before the storm, not borrowed during it Professor Kai London cybersecurity principle 113: "Resilience is bought before the storm, not borrowed during it." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-114.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-114-speak-risk-in-the-currency-of-the-room-revenue-not-red.png Professor Kai London — Cybersecurity Principle 114: Speak risk in the currency of the room: revenue, not red Professor Kai London cybersecurity principle 114: "Speak risk in the currency of the room: revenue, not red." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-115.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-115-every-integration-is-a-relationship-and-every-relationship-c.png Professor Kai London — Cybersecurity Principle 115: Every integration is a relationship, and every relationship carries risk Professor Kai London cybersecurity principle 115: "Every integration is a relationship, and every relationship carries risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-116.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-116-a-control-without-a-witness-cannot-defend-you-later.png Professor Kai London — Cybersecurity Principle 116: A control without a witness cannot defend you later Professor Kai London cybersecurity principle 116: "A control without a witness cannot defend you later." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-117.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-117-the-attacker-rehearses-your-environment-more-than-your-team-.png Professor Kai London — Cybersecurity Principle 117: The attacker rehearses your environment more than your team does Professor Kai London cybersecurity principle 117: "The attacker rehearses your environment more than your team does." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-118.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-118-secure-the-path-not-just-the-perimeter-the-journey-is-the-ta.png Professor Kai London — Cybersecurity Principle 118: Secure the path, not just the perimeter — the journey is the target Professor Kai London cybersecurity principle 118: "Secure the path, not just the perimeter — the journey is the target." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-119.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-119-visibility-without-action-is-just-expensive-watching.png Professor Kai London — Cybersecurity Principle 119: Visibility without action is just expensive watching Professor Kai London cybersecurity principle 119: "Visibility without action is just expensive watching." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-120.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-120-a-risk-you-cannot-name-you-cannot-fund.png Professor Kai London — Cybersecurity Principle 120: A risk you cannot name, you cannot fund Professor Kai London cybersecurity principle 120: "A risk you cannot name, you cannot fund." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-121.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-121-automation-is-leverage-for-the-defender-and-the-intruder-ali.png Professor Kai London — Cybersecurity Principle 121: Automation is leverage — for the defender and the intruder alike Professor Kai London cybersecurity principle 121: "Automation is leverage — for the defender and the intruder alike." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-122.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-122-the-quietest-risk-is-the-one-everyone-assumed-someone-else-o.png Professor Kai London — Cybersecurity Principle 122: The quietest risk is the one everyone assumed someone else owned Professor Kai London cybersecurity principle 122: "The quietest risk is the one everyone assumed someone else owned." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-123.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-123-encryption-protects-the-data-governance-protects-the-decisio.png Professor Kai London — Cybersecurity Principle 123: Encryption protects the data; governance protects the decision Professor Kai London cybersecurity principle 123: "Encryption protects the data; governance protects the decision." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-124.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-124-your-suppliers-weakest-day-is-on-your-balance-sheet.png Professor Kai London — Cybersecurity Principle 124: Your suppliers' weakest day is on your balance sheet Professor Kai London cybersecurity principle 124: "Your suppliers' weakest day is on your balance sheet." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-125.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-125-identity-is-the-new-firewall-and-it-is-always-logged-in.png Professor Kai London — Cybersecurity Principle 125: Identity is the new firewall — and it is always logged in Professor Kai London cybersecurity principle 125: "Identity is the new firewall — and it is always logged in." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-126.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-126-patience-is-the-adversarys-favourite-exploit.png Professor Kai London — Cybersecurity Principle 126: Patience is the adversary's favourite exploit Professor Kai London cybersecurity principle 126: "Patience is the adversary's favourite exploit." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-127.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-127-a-policy-nobody-can-follow-is-a-risk-you-wrote-down.png Professor Kai London — Cybersecurity Principle 127: A policy nobody can follow is a risk you wrote down Professor Kai London cybersecurity principle 127: "A policy nobody can follow is a risk you wrote down." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-128.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-128-recovery-time-is-a-promise-test-it-before-you-make-it.png Professor Kai London — Cybersecurity Principle 128: Recovery time is a promise; test it before you make it Professor Kai London cybersecurity principle 128: "Recovery time is a promise; test it before you make it." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-129.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-129-the-board-doesnt-fear-the-breach-it-fears-the-surprise.png Professor Kai London — Cybersecurity Principle 129: The board doesn't fear the breach; it fears the surprise Professor Kai London cybersecurity principle 129: "The board doesn't fear the breach; it fears the surprise." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-130.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-130-ai-without-oversight-is-confidence-without-accountability.png Professor Kai London — Cybersecurity Principle 130: AI without oversight is confidence without accountability Professor Kai London cybersecurity principle 130: "AI without oversight is confidence without accountability." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-131.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-131-shadow-tools-cast-real-shadows-on-the-audit.png Professor Kai London — Cybersecurity Principle 131: Shadow tools cast real shadows on the audit Professor Kai London cybersecurity principle 131: "Shadow tools cast real shadows on the audit." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-132.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-132-the-strongest-lock-fails-at-the-weakest-hinge-the-human-one.png Professor Kai London — Cybersecurity Principle 132: The strongest lock fails at the weakest hinge — the human one Professor Kai London cybersecurity principle 132: "The strongest lock fails at the weakest hinge — the human one." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-133.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-133-maturity-is-doing-the-unglamorous-control-consistently.png Professor Kai London — Cybersecurity Principle 133: Maturity is doing the unglamorous control consistently Professor Kai London cybersecurity principle 133: "Maturity is doing the unglamorous control consistently." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-134.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-134-a-metric-that-changes-no-decision-is-just-a-number-wearing-a.png Professor Kai London — Cybersecurity Principle 134: A metric that changes no decision is just a number wearing a badge Professor Kai London cybersecurity principle 134: "A metric that changes no decision is just a number wearing a badge." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-135.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-135-containment-is-a-design-choice-you-make-long-before-the-alar.png Professor Kai London — Cybersecurity Principle 135: Containment is a design choice you make long before the alarm Professor Kai London cybersecurity principle 135: "Containment is a design choice you make long before the alarm." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-136.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-136-trust-must-be-renewed-never-assumed-to-be-permanent.png Professor Kai London — Cybersecurity Principle 136: Trust must be renewed, never assumed to be permanent Professor Kai London cybersecurity principle 136: "Trust must be renewed, never assumed to be permanent." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-137.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-137-the-first-casualty-of-a-breach-is-the-story-nobody-prepared.png Professor Kai London — Cybersecurity Principle 137: The first casualty of a breach is the story nobody prepared Professor Kai London cybersecurity principle 137: "The first casualty of a breach is the story nobody prepared." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-138.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-138-good-security-makes-the-right-thing-the-easy-thing.png Professor Kai London — Cybersecurity Principle 138: Good security makes the right thing the easy thing Professor Kai London cybersecurity principle 138: "Good security makes the right thing the easy thing." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-139.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-139-an-exception-with-no-expiry-is-a-permanent-vulnerability-wit.png Professor Kai London — Cybersecurity Principle 139: An exception with no expiry is a permanent vulnerability with paperwork Professor Kai London cybersecurity principle 139: "An exception with no expiry is a permanent vulnerability with paperwork." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-140.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-140-the-breach-report-is-drafted-by-the-decisions-you-make-today.png Professor Kai London — Cybersecurity Principle 140: The breach report is drafted by the decisions you make today Professor Kai London cybersecurity principle 140: "The breach report is drafted by the decisions you make today." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-141.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-141-complexity-is-the-cost-the-attacker-hopes-you-keep-paying.png Professor Kai London — Cybersecurity Principle 141: Complexity is the cost the attacker hopes you keep paying Professor Kai London cybersecurity principle 141: "Complexity is the cost the attacker hopes you keep paying." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-142.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-142-you-cannot-outsource-accountability-only-the-activity.png Professor Kai London — Cybersecurity Principle 142: You cannot outsource accountability, only the activity Professor Kai London cybersecurity principle 142: "You cannot outsource accountability, only the activity." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-143.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-143-the-dangerous-configuration-is-the-one-nobody-remembers-sett.png Professor Kai London — Cybersecurity Principle 143: The dangerous configuration is the one nobody remembers setting Professor Kai London cybersecurity principle 143: "The dangerous configuration is the one nobody remembers setting." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-144.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-144-threat-intelligence-earns-its-keep-only-when-it-changes-a-co.png Professor Kai London — Cybersecurity Principle 144: Threat intelligence earns its keep only when it changes a control Professor Kai London cybersecurity principle 144: "Threat intelligence earns its keep only when it changes a control." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-145.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-145-privacy-designed-in-costs-less-than-privacy-litigated-out.png Professor Kai London — Cybersecurity Principle 145: Privacy designed in costs less than privacy litigated out Professor Kai London cybersecurity principle 145: "Privacy designed in costs less than privacy litigated out." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-146.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-146-your-weakest-identity-is-your-true-security-level.png Professor Kai London — Cybersecurity Principle 146: Your weakest identity is your true security level Professor Kai London cybersecurity principle 146: "Your weakest identity is your true security level." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-147.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-147-a-backup-you-have-never-restored-is-a-hope-not-a-safeguard.png Professor Kai London — Cybersecurity Principle 147: A backup you have never restored is a hope, not a safeguard Professor Kai London cybersecurity principle 147: "A backup you have never restored is a hope, not a safeguard." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-148.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-148-security-culture-is-what-people-do-when-no-control-is-watchi.png Professor Kai London — Cybersecurity Principle 148: Security culture is what people do when no control is watching Professor Kai London cybersecurity principle 148: "Security culture is what people do when no control is watching." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-149.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-149-speed-without-guardrails-is-just-a-faster-way-to-fail.png Professor Kai London — Cybersecurity Principle 149: Speed without guardrails is just a faster way to fail Professor Kai London cybersecurity principle 149: "Speed without guardrails is just a faster way to fail." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-150.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-150-govern-the-new-technology-before-it-governs-your-risk.png Professor Kai London — Cybersecurity Principle 150: Govern the new technology before it governs your risk Professor Kai London cybersecurity principle 150: "Govern the new technology before it governs your risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-151.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-151-the-map-is-not-the-network-verify-what-is-actually-connected.png Professor Kai London — Cybersecurity Principle 151: The map is not the network — verify what is actually connected Professor Kai London cybersecurity principle 151: "The map is not the network — verify what is actually connected." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-152.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-152-least-privilege-is-kindness-to-your-future-self.png Professor Kai London — Cybersecurity Principle 152: Least privilege is kindness to your future self Professor Kai London cybersecurity principle 152: "Least privilege is kindness to your future self." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-153.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-153-a-soc-drowning-in-alerts-is-blind-in-plain-sight.png Professor Kai London — Cybersecurity Principle 153: A SOC drowning in alerts is blind in plain sight Professor Kai London cybersecurity principle 153: "A SOC drowning in alerts is blind in plain sight." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-154.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-154-resilience-is-measured-in-how-fast-you-return-not-whether-yo.png Professor Kai London — Cybersecurity Principle 154: Resilience is measured in how fast you return, not whether you fall Professor Kai London cybersecurity principle 154: "Resilience is measured in how fast you return, not whether you fall." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-155.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-155-the-contract-is-a-control-read-it-like-a-firewall-rule.png Professor Kai London — Cybersecurity Principle 155: The contract is a control — read it like a firewall rule Professor Kai London cybersecurity principle 155: "The contract is a control — read it like a firewall rule." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-156.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-156-data-you-dont-need-is-risk-you-chose-to-keep.png Professor Kai London — Cybersecurity Principle 156: Data you don't need is risk you chose to keep Professor Kai London cybersecurity principle 156: "Data you don't need is risk you chose to keep." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-157.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-157-machinespeed-attacks-demand-machinespeed-answers.png Professor Kai London — Cybersecurity Principle 157: Machine-speed attacks demand machine-speed answers Professor Kai London cybersecurity principle 157: "Machine-speed attacks demand machine-speed answers." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-158.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-158-every-alert-you-ignore-trains-you-to-ignore-the-next-one.png Professor Kai London — Cybersecurity Principle 158: Every alert you ignore trains you to ignore the next one Professor Kai London cybersecurity principle 158: "Every alert you ignore trains you to ignore the next one." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-159.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-159-the-perimeter-went-home-to-the-caf-and-into-the-phone.png Professor Kai London — Cybersecurity Principle 159: The perimeter went home, to the café, and into the phone Professor Kai London cybersecurity principle 159: "The perimeter went home, to the café, and into the phone." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-160.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-160-assurance-is-a-sales-asset-not-just-a-safeguard.png Professor Kai London — Cybersecurity Principle 160: Assurance is a sales asset, not just a safeguard Professor Kai London cybersecurity principle 160: "Assurance is a sales asset, not just a safeguard." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-161.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-161-a-risk-accepted-in-silence-is-a-risk-owned-by-no-one.png Professor Kai London — Cybersecurity Principle 161: A risk accepted in silence is a risk owned by no one Professor Kai London cybersecurity principle 161: "A risk accepted in silence is a risk owned by no one." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-162.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-162-segmentation-decides-whether-one-fire-stays-one-room.png Professor Kai London — Cybersecurity Principle 162: Segmentation decides whether one fire stays one room Professor Kai London cybersecurity principle 162: "Segmentation decides whether one fire stays one room." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-163.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-163-the-exploit-you-patch-slowly-the-attacker-uses-quickly.png Professor Kai London — Cybersecurity Principle 163: The exploit you patch slowly, the attacker uses quickly Professor Kai London cybersecurity principle 163: "The exploit you patch slowly, the attacker uses quickly." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-164.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-164-confidence-is-not-a-control-evidence-is.png Professor Kai London — Cybersecurity Principle 164: Confidence is not a control; evidence is Professor Kai London cybersecurity principle 164: "Confidence is not a control; evidence is." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-165.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-165-an-api-key-in-the-wrong-place-is-a-master-key-in-the-open.png Professor Kai London — Cybersecurity Principle 165: An API key in the wrong place is a master key in the open Professor Kai London cybersecurity principle 165: "An API key in the wrong place is a master key in the open." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-166.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-166-govern-the-model-not-just-the-data-it-learned-from.png Professor Kai London — Cybersecurity Principle 166: Govern the model, not just the data it learned from Professor Kai London cybersecurity principle 166: "Govern the model, not just the data it learned from." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-167.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-167-the-honest-dashboard-shows-what-is-broken-not-what-is-busy.png Professor Kai London — Cybersecurity Principle 167: The honest dashboard shows what is broken, not what is busy Professor Kai London cybersecurity principle 167: "The honest dashboard shows what is broken, not what is busy." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-168.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-168-you-secure-what-you-can-see-and-lose-what-you-cannot.png Professor Kai London — Cybersecurity Principle 168: You secure what you can see, and lose what you cannot Professor Kai London cybersecurity principle 168: "You secure what you can see, and lose what you cannot." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-169.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-169-a-breach-tests-your-architecture-a-coverup-tests-your-career.png Professor Kai London — Cybersecurity Principle 169: A breach tests your architecture; a cover-up tests your career Professor Kai London cybersecurity principle 169: "A breach tests your architecture; a cover-up tests your career." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-170.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-170-the-cheapest-control-is-the-bad-habit-you-never-started.png Professor Kai London — Cybersecurity Principle 170: The cheapest control is the bad habit you never started Professor Kai London cybersecurity principle 170: "The cheapest control is the bad habit you never started." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-171.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-171-identity-sprawl-is-attack-surface-you-forgot-you-hired.png Professor Kai London — Cybersecurity Principle 171: Identity sprawl is attack surface you forgot you hired Professor Kai London cybersecurity principle 171: "Identity sprawl is attack surface you forgot you hired." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-172.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-172-plan-for-the-failure-of-the-thing-you-trust-the-most.png Professor Kai London — Cybersecurity Principle 172: Plan for the failure of the thing you trust the most Professor Kai London cybersecurity principle 172: "Plan for the failure of the thing you trust the most." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-173.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-173-security-debt-charges-interest-in-incidents.png Professor Kai London — Cybersecurity Principle 173: Security debt charges interest in incidents Professor Kai London cybersecurity principle 173: "Security debt charges interest in incidents." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-174.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-174-a-vendors-certificate-proves-intent-not-effectiveness.png Professor Kai London — Cybersecurity Principle 174: A vendor's certificate proves intent, not effectiveness Professor Kai London cybersecurity principle 174: "A vendor's certificate proves intent, not effectiveness." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-175.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-175-make-the-secure-path-the-default-path.png Professor Kai London — Cybersecurity Principle 175: Make the secure path the default path Professor Kai London cybersecurity principle 175: "Make the secure path the default path." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-176.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-176-the-strongest-signal-is-a-trend-not-a-snapshot.png Professor Kai London — Cybersecurity Principle 176: The strongest signal is a trend, not a snapshot Professor Kai London cybersecurity principle 176: "The strongest signal is a trend, not a snapshot." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-177.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-177-an-attacker-only-needs-the-door-you-stopped-checking.png Professor Kai London — Cybersecurity Principle 177: An attacker only needs the door you stopped checking Professor Kai London cybersecurity principle 177: "An attacker only needs the door you stopped checking." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-178.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-178-resilience-is-a-team-with-named-roles-not-a-document-with-a-.png Professor Kai London — Cybersecurity Principle 178: Resilience is a team with named roles, not a document with a title Professor Kai London cybersecurity principle 178: "Resilience is a team with named roles, not a document with a title." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-179.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-179-the-model-can-be-artificial-the-consequence-never-is.png Professor Kai London — Cybersecurity Principle 179: The model can be artificial; the consequence never is Professor Kai London cybersecurity principle 179: "The model can be artificial; the consequence never is." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-180.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-180-convenience-is-the-side-door-most-breaches-walk-through.png Professor Kai London — Cybersecurity Principle 180: Convenience is the side door most breaches walk through Professor Kai London cybersecurity principle 180: "Convenience is the side door most breaches walk through." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-181.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-181-test-the-control-before-the-auditor-and-before-the-attacker.png Professor Kai London — Cybersecurity Principle 181: Test the control before the auditor — and before the attacker Professor Kai London cybersecurity principle 181: "Test the control before the auditor — and before the attacker." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-182.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-182-decommissioning-is-a-security-task-not-a-cleanup-chore.png Professor Kai London — Cybersecurity Principle 182: Decommissioning is a security task, not a cleanup chore Professor Kai London cybersecurity principle 182: "Decommissioning is a security task, not a cleanup chore." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-183.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-183-the-crisis-reveals-the-gaps-the-calm-let-you-ignore.png Professor Kai London — Cybersecurity Principle 183: The crisis reveals the gaps the calm let you ignore Professor Kai London cybersecurity principle 183: "The crisis reveals the gaps the calm let you ignore." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-184.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-184-a-control-that-cannot-fail-safely-will-fail-badly.png Professor Kai London — Cybersecurity Principle 184: A control that cannot fail safely will fail badly Professor Kai London cybersecurity principle 184: "A control that cannot fail safely will fail badly." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-185.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-185-mergers-buy-revenue-and-inherit-someone-elses-risk.png Professor Kai London — Cybersecurity Principle 185: Mergers buy revenue and inherit someone else's risk Professor Kai London cybersecurity principle 185: "Mergers buy revenue and inherit someone else's risk." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-186.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-186-security-is-a-leadership-behaviour-before-it-is-a-technology.png Professor Kai London — Cybersecurity Principle 186: Security is a leadership behaviour before it is a technology Professor Kai London cybersecurity principle 186: "Security is a leadership behaviour before it is a technology." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-187.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-187-the-unread-log-is-the-witness-you-silenced-in-advance.png Professor Kai London — Cybersecurity Principle 187: The unread log is the witness you silenced in advance Professor Kai London cybersecurity principle 187: "The unread log is the witness you silenced in advance." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-188.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-188-build-for-the-question-you-will-be-asked-under-oath.png Professor Kai London — Cybersecurity Principle 188: Build for the question you will be asked under oath Professor Kai London cybersecurity principle 188: "Build for the question you will be asked under oath." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-189.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-189-operational-security-dies-in-the-gap-between-projects.png Professor Kai London — Cybersecurity Principle 189: Operational security dies in the gap between projects Professor Kai London cybersecurity principle 189: "Operational security dies in the gap between projects." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-190.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-190-a-standing-connection-is-a-standing-invitation-review-it.png Professor Kai London — Cybersecurity Principle 190: A standing connection is a standing invitation — review it Professor Kai London cybersecurity principle 190: "A standing connection is a standing invitation — review it." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-191.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-191-phishing-succeeds-on-hurry-not-on-stupidity.png Professor Kai London — Cybersecurity Principle 191: Phishing succeeds on hurry, not on stupidity Professor Kai London cybersecurity principle 191: "Phishing succeeds on hurry, not on stupidity." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-192.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-192-the-quantum-clock-is-already-ticking-on-todays-secrets.png Professor Kai London — Cybersecurity Principle 192: The quantum clock is already ticking on today's secrets Professor Kai London cybersecurity principle 192: "The quantum clock is already ticking on today's secrets." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-193.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-193-ot-failures-cost-in-safety-not-just-in-data.png Professor Kai London — Cybersecurity Principle 193: OT failures cost in safety, not just in data Professor Kai London cybersecurity principle 193: "OT failures cost in safety, not just in data." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-194.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-194-a-risk-owner-without-authority-is-a-scapegoat-with-a-title.png Professor Kai London — Cybersecurity Principle 194: A risk owner without authority is a scapegoat with a title Professor Kai London cybersecurity principle 194: "A risk owner without authority is a scapegoat with a title." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-195.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-195-continuous-access-demands-continuous-proof.png Professor Kai London — Cybersecurity Principle 195: Continuous access demands continuous proof Professor Kai London cybersecurity principle 195: "Continuous access demands continuous proof." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-196.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-196-the-intruder-loves-a-flat-network-the-way-water-loves-a-slop.png Professor Kai London — Cybersecurity Principle 196: The intruder loves a flat network the way water loves a slope Professor Kai London cybersecurity principle 196: "The intruder loves a flat network the way water loves a slope." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-197.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-197-reputation-is-recovered-slower-than-systems.png Professor Kai London — Cybersecurity Principle 197: Reputation is recovered slower than systems Professor Kai London cybersecurity principle 197: "Reputation is recovered slower than systems." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-198.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-198-the-professional-who-can-prove-it-outranks-the-one-who-claim.png Professor Kai London — Cybersecurity Principle 198: The professional who can prove it outranks the one who claims it Professor Kai London cybersecurity principle 198: "The professional who can prove it outranks the one who claims it." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-199.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-199-dont-sell-fear-sell-the-confidence-to-withstand-scrutiny.png Professor Kai London — Cybersecurity Principle 199: Don't sell fear — sell the confidence to withstand scrutiny Professor Kai London cybersecurity principle 199: "Don't sell fear — sell the confidence to withstand scrutiny." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles/principle-200.html https://professorkailondon.com/principles/cards/professor-kai-london-ciso-cyber-security-principle-200-professor-kai-london-i-engineer-the-trust-your-business-cann.png Professor Kai London — Cybersecurity Principle 200: Professor Kai London: I engineer the trust your business cannot afford to lose Professor Kai London cybersecurity principle 200: "Professor Kai London: I engineer the trust your business cannot afford to lose." — CISO, AI security & cyber resilience advisor. https://professorkailondon.com/principles.html https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-21.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-22.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-23.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-24.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-25.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-26.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-27.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-28.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-29.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-30.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-31.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-32.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-33.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-34.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-35.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-36.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-37.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-38.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-39.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-40.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-41.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-51.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-52.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-53.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-54.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-55.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-56.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-57.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-58.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-59.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-60.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-61.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-62.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-01.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-02.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-03.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-04.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-05.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-06.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-07.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-08.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-09.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-cyber-resilience-principle-10.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-11.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-12.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-13.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-14.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-15.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-16.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-17.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-18.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-19.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-professor-kai-london-principle-20.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-01.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-02.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-03.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-04.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-05.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-06.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-07.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-08.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-09.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-10.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-100-alt.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-100.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-63.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-64.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-65.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-66.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-67.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-68.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-69.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-70.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-71.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-72.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-73.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-74.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-75.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-76.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-77.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-78.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-79.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-80.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-81.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-82.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-83.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-84.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-85.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-86.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-87.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-88.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-89.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-90.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-91.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-92.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-93.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-94.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-95.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-96.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-97.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-98.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-cyber-resilience-authority-card-card-99.png Professor Kai London — cybersecurity & cyber resilience authority principle card Cybersecurity leadership principle card by Professor Kai London — CISO, AI security & cyber resilience advisor. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-kailondon-emblem-transparent.png Professor Kai London — official brand logo (CISO & cybersecurity advisor) Official Professor Kai London brand mark — cybersecurity, AI security and cyber resilience advisory. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-kailondon-logo-horizontal-dark.png Professor Kai London — official brand logo (CISO & cybersecurity advisor) Official Professor Kai London brand mark — cybersecurity, AI security and cyber resilience advisory. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-kailondon-logo-vertical-dark.png Professor Kai London — official brand logo (CISO & cybersecurity advisor) Official Professor Kai London brand mark — cybersecurity, AI security and cyber resilience advisory. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-kailondon-logo-vertical-transparent.png Professor Kai London — official brand logo (CISO & cybersecurity advisor) Official Professor Kai London brand mark — cybersecurity, AI security and cyber resilience advisory. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-ai-security-principles-ai-principles1.png Professor Kai London — AI security & governance principles AI security and governance principles by Professor Kai London — CISO and AI security strategist. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-ai-security-principles-ai-principles2.png Professor Kai London — AI security & governance principles AI security and governance principles by Professor Kai London — CISO and AI security strategist. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-ai-security-principles-ai-principles3.png Professor Kai London — AI security & governance principles AI security and governance principles by Professor Kai London — CISO and AI security strategist. professorkailondon.com https://professorkailondon.com/principles/gallery/professor-kai-london-ai-security-principles-logo.png Professor Kai London — AI security & governance principles AI security and governance principles by Professor Kai London — CISO and AI security strategist. professorkailondon.com https://professorkailondon.com/principles/set2/principle-001.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-001-trust-is-won-before-pressure-arrives-and-proven-when-pressure-tests-th.png Professor Kai London — Cyber Security Principle 001: Trust is won before pressure arrives and proven when pressure tests th Trust is won before pressure arrives and proven when pressure tests the enterprise. — Professor Kai London, CISO. Principle 1 of 300 on Cyber Resilience. https://professorkailondon.com/principles/set2/principle-002.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-002-evidence-converts-security-from-confidence-into-defensible-commercial-.png Professor Kai London — Cyber Security Principle 002: Evidence converts security from confidence into defensible commercial Evidence converts security from confidence into defensible commercial assurance. — Professor Kai London, CISO. Principle 2 of 300 on Evidence / GRC. https://professorkailondon.com/principles/set2/principle-003.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-003-cybersecurity-belongs-in-the-boardroom-because-digital-trust-now-prote.png Professor Kai London — Cyber Security Principle 003: Cybersecurity belongs in the boardroom because digital trust now prote Cybersecurity belongs in the boardroom because digital trust now protects enterprise value. — Professor Kai London, CISO. Principle 3 of 300 on Board Governance. https://professorkailondon.com/principles/set2/principle-004.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-004-a-mature-board-does-not-ask-for-fear-it-asks-for-choices-exposure-and-.png Professor Kai London — Cyber Security Principle 004: A mature board does not ask for fear; it asks for choices, exposure an A mature board does not ask for fear; it asks for choices, exposure and proof. — Professor Kai London, CISO. Principle 4 of 300 on Board Reporting. https://professorkailondon.com/principles/set2/principle-005.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-005-security-without-ownership-becomes-theatre-ownership-without-evidence-.png Professor Kai London — Cyber Security Principle 005: Security without ownership becomes theatre; ownership without evidence Security without ownership becomes theatre; ownership without evidence becomes exposure. — Professor Kai London, CISO. Principle 5 of 300 on Governance. https://professorkailondon.com/principles/set2/principle-006.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-006-the-best-security-leaders-make-complex-risk-simple-enough-to-govern.png Professor Kai London — Cyber Security Principle 006: The best security leaders make complex risk simple enough to govern. The best security leaders make complex risk simple enough to govern. — Professor Kai London, CISO. Principle 6 of 300 on Leadership. https://professorkailondon.com/principles/set2/principle-007.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-007-compliance-is-the-starting-line-resilience-is-the-value-clients-pay-to.png Professor Kai London — Cyber Security Principle 007: Compliance is the starting line; resilience is the value clients pay t Compliance is the starting line; resilience is the value clients pay to secure. — Professor Kai London, CISO. Principle 7 of 300 on Compliance / Resilience. https://professorkailondon.com/principles/set2/principle-008.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-008-a-cyber-strategy-wins-when-it-protects-growth-as-clearly-as-it-reduces.png Professor Kai London — Cyber Security Principle 008: A cyber strategy wins when it protects growth as clearly as it reduces A cyber strategy wins when it protects growth as clearly as it reduces risk. — Professor Kai London, CISO. Principle 8 of 300 on Strategy. https://professorkailondon.com/principles/set2/principle-009.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-009-the-strongest-control-is-one-the-business-can-operate-after-the-consul.png Professor Kai London — Cyber Security Principle 009: The strongest control is one the business can operate after the consul The strongest control is one the business can operate after the consultant exits. — Professor Kai London, CISO. Principle 9 of 300 on Delivery. https://professorkailondon.com/principles/set2/principle-010.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-010-great-consultants-do-not-sell-complexity-they-remove-uncertainty.png Professor Kai London — Cyber Security Principle 010: Great consultants do not sell complexity; they remove uncertainty. Great consultants do not sell complexity; they remove uncertainty. — Professor Kai London, CISO. Principle 10 of 300 on Advisory. https://professorkailondon.com/principles/set2/principle-011.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-011-a-good-architect-designs-controls-a-great-architect-designs-confidence.png Professor Kai London — Cyber Security Principle 011: A good architect designs controls; a great architect designs confidenc A good architect designs controls; a great architect designs confidence. — Professor Kai London, CISO. Principle 11 of 300 on Security Architecture. https://professorkailondon.com/principles/set2/principle-012.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-012-resilience-is-the-discipline-of-keeping-business-promises-under-abnorm.png Professor Kai London — Cyber Security Principle 012: Resilience is the discipline of keeping business promises under abnorm Resilience is the discipline of keeping business promises under abnormal conditions. — Professor Kai London, CISO. Principle 12 of 300 on Operational Resilience. https://professorkailondon.com/principles/set2/principle-013.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-013-cybersecurity-earns-trust-when-it-speaks-in-outcomes-instead-of-acrony.png Professor Kai London — Cyber Security Principle 013: Cybersecurity earns trust when it speaks in outcomes instead of acrony Cybersecurity earns trust when it speaks in outcomes instead of acronyms. — Professor Kai London, CISO. Principle 13 of 300 on Communication. https://professorkailondon.com/principles/set2/principle-014.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-014-the-winning-roadmap-shows-what-to-fix-first-why-it-matters-and-how-suc.png Professor Kai London — Cyber Security Principle 014: The winning roadmap shows what to fix first, why it matters and how su The winning roadmap shows what to fix first, why it matters and how success will be proven. — Professor Kai London, CISO. Principle 14 of 300 on Roadmap. https://professorkailondon.com/principles/set2/principle-015.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-015-risk-reduction-persuades-faster-than-technical-perfection.png Professor Kai London — Cyber Security Principle 015: Risk reduction persuades faster than technical perfection. Risk reduction persuades faster than technical perfection. — Professor Kai London, CISO. Principle 15 of 300 on Delivery. https://professorkailondon.com/principles/set2/principle-016.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-016-the-true-risk-appetite-of-an-organisation-is-revealed-by-what-it-funds.png Professor Kai London — Cyber Security Principle 016: The true risk appetite of an organisation is revealed by what it funds The true risk appetite of an organisation is revealed by what it funds consistently. — Professor Kai London, CISO. Principle 16 of 300 on Risk Management. https://professorkailondon.com/principles/set2/principle-017.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-017-a-dashboard-no-executive-acts-on-is-decoration-not-governance.png Professor Kai London — Cyber Security Principle 017: A dashboard no executive acts on is decoration, not governance. A dashboard no executive acts on is decoration, not governance. — Professor Kai London, CISO. Principle 17 of 300 on Reporting. https://professorkailondon.com/principles/set2/principle-018.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-018-boards-need-fewer-metrics-sharper-signals-and-clearer-decisions.png Professor Kai London — Cyber Security Principle 018: Boards need fewer metrics, sharper signals and clearer decisions. Boards need fewer metrics, sharper signals and clearer decisions. — Professor Kai London, CISO. Principle 18 of 300 on Board Reporting. https://professorkailondon.com/principles/set2/principle-019.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-019-a-mature-cyber-function-gives-the-board-fewer-surprises-and-better-opt.png Professor Kai London — Cyber Security Principle 019: A mature cyber function gives the board fewer surprises and better opt A mature cyber function gives the board fewer surprises and better options. — Professor Kai London, CISO. Principle 19 of 300 on Governance. https://professorkailondon.com/principles/set2/principle-021.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-021-every-control-needs-an-owner-a-purpose-a-cadence-and-proof.png Professor Kai London — Cyber Security Principle 021: Every control needs an owner, a purpose, a cadence and proof. Every control needs an owner, a purpose, a cadence and proof. — Professor Kai London, CISO. Principle 21 of 300 on Controls. https://professorkailondon.com/principles/set2/principle-022.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-022-a-control-without-ownership-is-a-future-audit-finding-waiting-politely.png Professor Kai London — Cyber Security Principle 022: A control without ownership is a future audit finding waiting politely A control without ownership is a future audit finding waiting politely. — Professor Kai London, CISO. Principle 22 of 300 on Audit Readiness. https://professorkailondon.com/principles/set2/principle-023.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-023-a-policy-without-adoption-is-only-a-document-with-ambition.png Professor Kai London — Cyber Security Principle 023: A policy without adoption is only a document with ambition. A policy without adoption is only a document with ambition. — Professor Kai London, CISO. Principle 23 of 300 on Governance. https://professorkailondon.com/principles/set2/principle-024.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-024-cyber-leadership-turns-uncertainty-into-accountable-decisions.png Professor Kai London — Cyber Security Principle 024: Cyber leadership turns uncertainty into accountable decisions. Cyber leadership turns uncertainty into accountable decisions. — Professor Kai London, CISO. Principle 24 of 300 on Leadership. https://professorkailondon.com/principles/set2/principle-025.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-025-the-client-buys-confidence-before-capability-and-renewal-before-perfec.png Professor Kai London — Cyber Security Principle 025: The client buys confidence before capability and renewal before perfec The client buys confidence before capability and renewal before perfection. — Professor Kai London, CISO. Principle 25 of 300 on Consulting. https://professorkailondon.com/principles/set2/principle-026.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-026-a-first-conversation-should-make-the-client-feel-safer-clearer-and-bet.png Professor Kai London — Cyber Security Principle 026: A first conversation should make the client feel safer, clearer and be A first conversation should make the client feel safer, clearer and better led. — Professor Kai London, CISO. Principle 26 of 300 on Advisory. https://professorkailondon.com/principles/set2/principle-027.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-027-serious-execution-attracts-serious-contracts.png Professor Kai London — Cyber Security Principle 027: Serious execution attracts serious contracts. Serious execution attracts serious contracts. — Professor Kai London, CISO. Principle 27 of 300 on Professional Brand. https://professorkailondon.com/principles/set2/principle-028.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-028-calm-precision-wins-more-trust-than-exaggerated-urgency.png Professor Kai London — Cyber Security Principle 028: Calm precision wins more trust than exaggerated urgency. Calm precision wins more trust than exaggerated urgency. — Professor Kai London, CISO. Principle 28 of 300 on Executive Tone. https://professorkailondon.com/principles/set2/principle-029.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-029-the-stronger-the-evidence-trail-the-easier-the-commercial-decision-bec.png Professor Kai London — Cyber Security Principle 029: The stronger the evidence trail, the easier the commercial decision be The stronger the evidence trail, the easier the commercial decision becomes. — Professor Kai London, CISO. Principle 29 of 300 on Evidence. https://professorkailondon.com/principles/set2/principle-030.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-030-a-premium-consultant-brings-judgement-not-just-knowledge.png Professor Kai London — Cyber Security Principle 030: A premium consultant brings judgement, not just knowledge. A premium consultant brings judgement, not just knowledge. — Professor Kai London, CISO. Principle 30 of 300 on Advisory. https://professorkailondon.com/principles/set2/principle-031.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-031-technical-depth-wins-respect-commercial-clarity-wins-contracts.png Professor Kai London — Cyber Security Principle 031: Technical depth wins respect; commercial clarity wins contracts. Technical depth wins respect; commercial clarity wins contracts. — Professor Kai London, CISO. Principle 31 of 300 on Personal Brand. https://professorkailondon.com/principles/set2/principle-032.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-032-authority-grows-when-competence-is-repeatedly-proven-through-outcomes.png Professor Kai London — Cyber Security Principle 032: Authority grows when competence is repeatedly proven through outcomes. Authority grows when competence is repeatedly proven through outcomes. — Professor Kai London, CISO. Principle 32 of 300 on Reputation. https://professorkailondon.com/principles/set2/principle-033.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-033-original-thinking-attracts-attention-useful-thinking-attracts-work.png Professor Kai London — Cyber Security Principle 033: Original thinking attracts attention; useful thinking attracts work. Original thinking attracts attention; useful thinking attracts work. — Professor Kai London, CISO. Principle 33 of 300 on Thought Leadership. https://professorkailondon.com/principles/set2/principle-034.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-034-the-strongest-brand-signal-is-a-reliable-body-of-delivered-work.png Professor Kai London — Cyber Security Principle 034: The strongest brand signal is a reliable body of delivered work. The strongest brand signal is a reliable body of delivered work. — Professor Kai London, CISO. Principle 34 of 300 on Brand Authority. https://professorkailondon.com/principles/set2/principle-035.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-035-the-market-remembers-specialists-who-make-difficult-work-feel-controll.png Professor Kai London — Cyber Security Principle 035: The market remembers specialists who make difficult work feel controll The market remembers specialists who make difficult work feel controlled. — Professor Kai London, CISO. Principle 35 of 300 on Positioning. https://professorkailondon.com/principles/set2/principle-036.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-036-a-strong-market-position-is-specific-memorable-and-defensible.png Professor Kai London — Cyber Security Principle 036: A strong market position is specific, memorable and defensible. A strong market position is specific, memorable and defensible. — Professor Kai London, CISO. Principle 36 of 300 on Branding. https://professorkailondon.com/principles/set2/principle-037.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-037-being-easy-to-trust-makes-being-hired-easier.png Professor Kai London — Cyber Security Principle 037: Being easy to trust makes being hired easier. Being easy to trust makes being hired easier. — Professor Kai London, CISO. Principle 37 of 300 on Contract Readiness. https://professorkailondon.com/principles/set2/principle-038.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-038-deliver-more-certainty-than-the-client-expected-to-buy.png Professor Kai London — Cyber Security Principle 038: Deliver more certainty than the client expected to buy. Deliver more certainty than the client expected to buy. — Professor Kai London, CISO. Principle 38 of 300 on Consulting Value. https://professorkailondon.com/principles/set2/principle-039.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-039-durable-reputations-are-built-on-repeatable-value-not-one-off-visibili.png Professor Kai London — Cyber Security Principle 039: Durable reputations are built on repeatable value, not one-off visibil Durable reputations are built on repeatable value, not one-off visibility. — Professor Kai London, CISO. Principle 39 of 300 on Reputation. https://professorkailondon.com/principles/set2/principle-040.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-040-the-best-professional-voice-is-confident-useful-and-restrained.png Professor Kai London — Cyber Security Principle 040: The best professional voice is confident, useful and restrained. The best professional voice is confident, useful and restrained. — Professor Kai London, CISO. Principle 40 of 300 on Executive Presence. https://professorkailondon.com/principles/set2/principle-041.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-041-defence-is-not-the-absence-of-compromise-it-is-the-compression-of-impa.png Professor Kai London — Cyber Security Principle 041: Defence is not the absence of compromise; it is the compression of imp Defence is not the absence of compromise; it is the compression of impact. — Professor Kai London, CISO. Principle 41 of 300 on Cyber Defence. https://professorkailondon.com/principles/set2/principle-042.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-042-assume-breach-but-never-assume-defeat.png Professor Kai London — Cyber Security Principle 042: Assume breach, but never assume defeat. Assume breach, but never assume defeat. — Professor Kai London, CISO. Principle 42 of 300 on Resilience. https://professorkailondon.com/principles/set2/principle-043.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-043-an-attacker-needs-one-path-the-defender-must-understand-the-full-map.png Professor Kai London — Cyber Security Principle 043: An attacker needs one path; the defender must understand the full map. An attacker needs one path; the defender must understand the full map. — Professor Kai London, CISO. Principle 43 of 300 on Threat Defence. https://professorkailondon.com/principles/set2/principle-044.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-044-detection-without-triage-is-expensive-noise.png Professor Kai London — Cyber Security Principle 044: Detection without triage is expensive noise. Detection without triage is expensive noise. — Professor Kai London, CISO. Principle 44 of 300 on SecOps. https://professorkailondon.com/principles/set2/principle-045.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-045-normal-behaviour-must-be-visible-before-abnormal-behaviour-can-be-trus.png Professor Kai London — Cyber Security Principle 045: Normal behaviour must be visible before abnormal behaviour can be trus Normal behaviour must be visible before abnormal behaviour can be trusted. — Professor Kai London, CISO. Principle 45 of 300 on Detection. https://professorkailondon.com/principles/set2/principle-046.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-046-backups-are-not-resilience-until-restoration-is-proven-under-pressure.png Professor Kai London — Cyber Security Principle 046: Backups are not resilience until restoration is proven under pressure. Backups are not resilience until restoration is proven under pressure. — Professor Kai London, CISO. Principle 46 of 300 on Recovery. https://professorkailondon.com/principles/set2/principle-047.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-047-patch-velocity-is-leadership-discipline-expressed-through-technology-o.png Professor Kai London — Cyber Security Principle 047: Patch velocity is leadership discipline expressed through technology o Patch velocity is leadership discipline expressed through technology operations. — Professor Kai London, CISO. Principle 47 of 300 on Vulnerability Management. https://professorkailondon.com/principles/set2/principle-048.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-048-identity-is-the-control-plane-of-modern-enterprise-trust.png Professor Kai London — Cyber Security Principle 048: Identity is the control plane of modern enterprise trust. Identity is the control plane of modern enterprise trust. — Professor Kai London, CISO. Principle 48 of 300 on IAM / Zero Trust. https://professorkailondon.com/principles/set2/principle-049.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-049-least-privilege-is-not-a-setting-it-is-a-habit-the-organisation-must-k.png Professor Kai London — Cyber Security Principle 049: Least privilege is not a setting; it is a habit the organisation must Least privilege is not a setting; it is a habit the organisation must keep. — Professor Kai London, CISO. Principle 49 of 300 on Access Control. https://professorkailondon.com/principles/set2/principle-050.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-050-every-credential-is-a-key-and-every-forgotten-key-is-unmanaged-risk.png Professor Kai London — Cyber Security Principle 050: Every credential is a key, and every forgotten key is unmanaged risk. Every credential is a key, and every forgotten key is unmanaged risk. — Professor Kai London, CISO. Principle 50 of 300 on Identity Security. https://professorkailondon.com/principles/set2/principle-051.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-051-privileged-access-is-where-accountability-must-be-strongest.png Professor Kai London — Cyber Security Principle 051: Privileged access is where accountability must be strongest. Privileged access is where accountability must be strongest. — Professor Kai London, CISO. Principle 51 of 300 on PAM. https://professorkailondon.com/principles/set2/principle-052.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-052-zero-trust-works-best-as-business-trust-with-technical-verification.png Professor Kai London — Cyber Security Principle 052: Zero Trust works best as business trust with technical verification. Zero Trust works best as business trust with technical verification. — Professor Kai London, CISO. Principle 52 of 300 on Zero Trust. https://professorkailondon.com/principles/set2/principle-053.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-053-access-should-be-simple-for-the-right-person-and-difficult-for-everyon.png Professor Kai London — Cyber Security Principle 053: Access should be simple for the right person and difficult for everyon Access should be simple for the right person and difficult for everyone else. — Professor Kai London, CISO. Principle 53 of 300 on IAM. https://professorkailondon.com/principles/set2/principle-054.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-054-segmentation-turns-enterprise-compromise-into-contained-impact.png Professor Kai London — Cyber Security Principle 054: Segmentation turns enterprise compromise into contained impact. Segmentation turns enterprise compromise into contained impact. — Professor Kai London, CISO. Principle 54 of 300 on Network Security. https://professorkailondon.com/principles/set2/principle-055.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-055-the-control-you-never-test-becomes-the-control-the-attacker-tests-firs.png Professor Kai London — Cyber Security Principle 055: The control you never test becomes the control the attacker tests firs The control you never test becomes the control the attacker tests first. — Professor Kai London, CISO. Principle 55 of 300 on Assurance. https://professorkailondon.com/principles/set2/principle-056.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-056-encryption-protects-data-key-governance-protects-encryption.png Professor Kai London — Cyber Security Principle 056: Encryption protects data; key governance protects encryption. Encryption protects data; key governance protects encryption. — Professor Kai London, CISO. Principle 56 of 300 on Data Protection. https://professorkailondon.com/principles/set2/principle-057.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-057-a-security-tool-that-cannot-be-operated-is-risk-with-a-licence-fee.png Professor Kai London — Cyber Security Principle 057: A security tool that cannot be operated is risk with a licence fee. A security tool that cannot be operated is risk with a licence fee. — Professor Kai London, CISO. Principle 57 of 300 on SecOps. https://professorkailondon.com/principles/set2/principle-058.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-058-complexity-is-an-attack-surface-no-vendor-fully-removes.png Professor Kai London — Cyber Security Principle 058: Complexity is an attack surface no vendor fully removes. Complexity is an attack surface no vendor fully removes. — Professor Kai London, CISO. Principle 58 of 300 on Architecture. https://professorkailondon.com/principles/set2/principle-059.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-059-recovery-time-is-a-promise-recovery-evidence-is-the-proof.png Professor Kai London — Cyber Security Principle 059: Recovery time is a promise; recovery evidence is the proof. Recovery time is a promise; recovery evidence is the proof. — Professor Kai London, CISO. Principle 59 of 300 on Continuity. https://professorkailondon.com/principles/set2/principle-060.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-060-hardening-is-respect-for-adversary-patience.png Professor Kai London — Cyber Security Principle 060: Hardening is respect for adversary patience. Hardening is respect for adversary patience. — Professor Kai London, CISO. Principle 60 of 300 on Defence. https://professorkailondon.com/principles/set2/principle-061.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-061-logs-only-create-value-when-someone-can-read-correlate-and-act-on-them.png Professor Kai London — Cyber Security Principle 061: Logs only create value when someone can read, correlate and act on the Logs only create value when someone can read, correlate and act on them. — Professor Kai London, CISO. Principle 61 of 300 on Monitoring. https://professorkailondon.com/principles/set2/principle-062.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-062-a-strong-firewall-cannot-compensate-for-weak-judgement-at-the-inbox.png Professor Kai London — Cyber Security Principle 062: A strong firewall cannot compensate for weak judgement at the inbox. A strong firewall cannot compensate for weak judgement at the inbox. — Professor Kai London, CISO. Principle 62 of 300 on Human Risk. https://professorkailondon.com/principles/set2/principle-063.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-063-endpoint-security-succeeds-when-behaviour-identity-and-context-meet.png Professor Kai London — Cyber Security Principle 063: Endpoint security succeeds when behaviour, identity and context meet. Endpoint security succeeds when behaviour, identity and context meet. — Professor Kai London, CISO. Principle 63 of 300 on Endpoint Security. https://professorkailondon.com/principles/set2/principle-064.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-064-vulnerability-management-is-prioritisation-under-business-constraint.png Professor Kai London — Cyber Security Principle 064: Vulnerability management is prioritisation under business constraint. Vulnerability management is prioritisation under business constraint. — Professor Kai London, CISO. Principle 64 of 300 on Vulnerability Management. https://professorkailondon.com/principles/set2/principle-065.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-065-the-best-defence-programmes-know-which-systems-matter-most-before-the-.png Professor Kai London — Cyber Security Principle 065: The best defence programmes know which systems matter most before the The best defence programmes know which systems matter most before the attack starts. — Professor Kai London, CISO. Principle 65 of 300 on Asset Criticality. https://professorkailondon.com/principles/set2/principle-066.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-066-resilience-is-measured-on-the-worst-day-not-the-average-quarter.png Professor Kai London — Cyber Security Principle 066: Resilience is measured on the worst day, not the average quarter. Resilience is measured on the worst day, not the average quarter. — Professor Kai London, CISO. Principle 66 of 300 on Resilience. https://professorkailondon.com/principles/set2/principle-067.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-067-security-posture-is-only-real-when-continuously-measured.png Professor Kai London — Cyber Security Principle 067: Security posture is only real when continuously measured. Security posture is only real when continuously measured. — Professor Kai London, CISO. Principle 67 of 300 on Continuous Assurance. https://professorkailondon.com/principles/set2/principle-068.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-068-a-secure-architecture-must-explain-itself-to-engineers-auditors-and-ex.png Professor Kai London — Cyber Security Principle 068: A secure architecture must explain itself to engineers, auditors and e A secure architecture must explain itself to engineers, auditors and executives. — Professor Kai London, CISO. Principle 68 of 300 on Architecture. https://professorkailondon.com/principles/set2/principle-069.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-069-security-operations-should-reduce-uncertainty-faster-than-the-attacker.png Professor Kai London — Cyber Security Principle 069: Security operations should reduce uncertainty faster than the attacker Security operations should reduce uncertainty faster than the attacker creates it. — Professor Kai London, CISO. Principle 69 of 300 on SecOps. https://professorkailondon.com/principles/set2/principle-070.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-070-threat-response-fails-when-escalation-paths-are-discovered-during-the-.png Professor Kai London — Cyber Security Principle 070: Threat response fails when escalation paths are discovered during the Threat response fails when escalation paths are discovered during the incident. — Professor Kai London, CISO. Principle 70 of 300 on Incident Response. https://professorkailondon.com/principles/set2/principle-071.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-071-ai-security-starts-where-data-accountability-begins.png Professor Kai London — Cyber Security Principle 071: AI security starts where data accountability begins. AI security starts where data accountability begins. — Professor Kai London, CISO. Principle 71 of 300 on AI Security. https://professorkailondon.com/principles/set2/principle-072.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-072-ai-is-a-privacy-and-security-challenge-before-it-becomes-an-innovation.png Professor Kai London — Cyber Security Principle 072: AI is a privacy and security challenge before it becomes an innovation AI is a privacy and security challenge before it becomes an innovation story. — Professor Kai London, CISO. Principle 72 of 300 on AI Governance. https://professorkailondon.com/principles/set2/principle-073.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-073-a-model-you-cannot-explain-is-a-decision-you-cannot-defend.png Professor Kai London — Cyber Security Principle 073: A model you cannot explain is a decision you cannot defend. A model you cannot explain is a decision you cannot defend. — Professor Kai London, CISO. Principle 73 of 300 on AI Assurance. https://professorkailondon.com/principles/set2/principle-074.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-074-ungoverned-ai-hides-human-judgement-behind-automated-confidence.png Professor Kai London — Cyber Security Principle 074: Ungoverned AI hides human judgement behind automated confidence. Ungoverned AI hides human judgement behind automated confidence. — Professor Kai London, CISO. Principle 74 of 300 on AI Risk. https://professorkailondon.com/principles/set2/principle-075.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-075-every-model-inherits-the-quality-bias-and-secrets-of-the-data-that-sha.png Professor Kai London — Cyber Security Principle 075: Every model inherits the quality, bias and secrets of the data that sh Every model inherits the quality, bias and secrets of the data that shaped it. — Professor Kai London, CISO. Principle 75 of 300 on AI Data Risk. https://professorkailondon.com/principles/set2/principle-076.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-076-shadow-ai-is-best-solved-with-guardrails-visibility-and-safe-alternati.png Professor Kai London — Cyber Security Principle 076: Shadow AI is best solved with guardrails, visibility and safe alternat Shadow AI is best solved with guardrails, visibility and safe alternatives. — Professor Kai London, CISO. Principle 76 of 300 on Shadow AI. https://professorkailondon.com/principles/set2/principle-077.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-077-shadow-ai-becomes-insider-risk-when-data-leaves-approved-control-paths.png Professor Kai London — Cyber Security Principle 077: Shadow AI becomes insider risk when data leaves approved control paths Shadow AI becomes insider risk when data leaves approved control paths. — Professor Kai London, CISO. Principle 77 of 300 on AI Risk. https://professorkailondon.com/principles/set2/principle-078.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-078-if-you-cannot-audit-the-prompt-you-cannot-certify-the-outcome.png Professor Kai London — Cyber Security Principle 078: If you cannot audit the prompt, you cannot certify the outcome. If you cannot audit the prompt, you cannot certify the outcome. — Professor Kai London, CISO. Principle 78 of 300 on AI Assurance. https://professorkailondon.com/principles/set2/principle-079.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-079-automation-scales-strong-decisions-and-weak-controls-with-equal-speed.png Professor Kai London — Cyber Security Principle 079: Automation scales strong decisions and weak controls with equal speed. Automation scales strong decisions and weak controls with equal speed. — Professor Kai London, CISO. Principle 79 of 300 on AI Risk. https://professorkailondon.com/principles/set2/principle-080.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-080-the-ai-question-is-not-only-what-it-can-do-but-who-answers-when-it-fai.png Professor Kai London — Cyber Security Principle 080: The AI question is not only what it can do, but who answers when it fa The AI question is not only what it can do, but who answers when it fails. — Professor Kai London, CISO. Principle 80 of 300 on AI Accountability. https://professorkailondon.com/principles/set2/principle-081.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-081-training-data-is-a-supply-chain-and-deserves-supply-chain-discipline.png Professor Kai London — Cyber Security Principle 081: Training data is a supply chain and deserves supply-chain discipline. Training data is a supply chain and deserves supply-chain discipline. — Professor Kai London, CISO. Principle 81 of 300 on AI Supply Chain. https://professorkailondon.com/principles/set2/principle-082.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-082-an-unmonitored-ai-guardrail-is-only-a-suggestion.png Professor Kai London — Cyber Security Principle 082: An unmonitored AI guardrail is only a suggestion. An unmonitored AI guardrail is only a suggestion. — Professor Kai London, CISO. Principle 82 of 300 on AI Controls. https://professorkailondon.com/principles/set2/principle-083.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-083-human-in-the-loop-fails-when-the-human-is-trained-only-to-approve.png Professor Kai London — Cyber Security Principle 083: Human-in-the-loop fails when the human is trained only to approve. Human-in-the-loop fails when the human is trained only to approve. — Professor Kai London, CISO. Principle 83 of 300 on AI Oversight. https://professorkailondon.com/principles/set2/principle-084.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-084-ai-governance-means-controlling-machine-speed-decisions-with-human-con.png Professor Kai London — Cyber Security Principle 084: AI governance means controlling machine-speed decisions with human con AI governance means controlling machine-speed decisions with human consequences. — Professor Kai London, CISO. Principle 84 of 300 on AI Governance. https://professorkailondon.com/principles/set2/principle-085.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-085-the-most-dangerous-ai-output-is-the-plausible-one.png Professor Kai London — Cyber Security Principle 085: The most dangerous AI output is the plausible one. The most dangerous AI output is the plausible one. — Professor Kai London, CISO. Principle 85 of 300 on AI Risk. https://professorkailondon.com/principles/set2/principle-086.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-086-ethics-cannot-be-bolted-on-after-a-system-has-learned-to-optimise-with.png Professor Kai London — Cyber Security Principle 086: Ethics cannot be bolted on after a system has learned to optimise with Ethics cannot be bolted on after a system has learned to optimise without it. — Professor Kai London, CISO. Principle 86 of 300 on AI by Design. https://professorkailondon.com/principles/set2/principle-087.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-087-model-performance-is-a-lab-metric-model-behaviour-is-enterprise-risk.png Professor Kai London — Cyber Security Principle 087: Model performance is a lab metric; model behaviour is enterprise risk. Model performance is a lab metric; model behaviour is enterprise risk. — Professor Kai London, CISO. Principle 87 of 300 on AI Governance. https://professorkailondon.com/principles/set2/principle-088.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-088-an-ai-system-is-trustworthy-only-when-it-can-be-paused-explained-and-c.png Professor Kai London — Cyber Security Principle 088: An AI system is trustworthy only when it can be paused, explained and An AI system is trustworthy only when it can be paused, explained and controlled. — Professor Kai London, CISO. Principle 88 of 300 on AI Safety. https://professorkailondon.com/principles/set2/principle-089.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-089-every-autonomous-agent-needs-a-boundary-a-log-and-a-named-owner.png Professor Kai London — Cyber Security Principle 089: Every autonomous agent needs a boundary, a log and a named owner. Every autonomous agent needs a boundary, a log and a named owner. — Professor Kai London, CISO. Principle 89 of 300 on Agentic AI. https://professorkailondon.com/principles/set2/principle-090.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-090-data-minimisation-is-the-cheapest-ai-risk-control-ever-invented.png Professor Kai London — Cyber Security Principle 090: Data minimisation is the cheapest AI risk control ever invented. Data minimisation is the cheapest AI risk control ever invented. — Professor Kai London, CISO. Principle 90 of 300 on Privacy / AI. https://professorkailondon.com/principles/set2/principle-091.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-091-if-the-model-touches-personal-data-governance-must-already-be-in-the-r.png Professor Kai London — Cyber Security Principle 091: If the model touches personal data, governance must already be in the If the model touches personal data, governance must already be in the room. — Professor Kai London, CISO. Principle 91 of 300 on AI Compliance. https://professorkailondon.com/principles/set2/principle-092.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-092-defensive-prompt-discipline-is-now-part-of-the-enterprise-control-fram.png Professor Kai London — Cyber Security Principle 092: Defensive prompt discipline is now part of the enterprise control fram Defensive prompt discipline is now part of the enterprise control framework. — Professor Kai London, CISO. Principle 92 of 300 on AI Security. https://professorkailondon.com/principles/set2/principle-093.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-093-output-validation-is-the-bridge-between-ai-usefulness-and-operational-.png Professor Kai London — Cyber Security Principle 093: Output validation is the bridge between AI usefulness and operational Output validation is the bridge between AI usefulness and operational trust. — Professor Kai London, CISO. Principle 93 of 300 on AI Controls. https://professorkailondon.com/principles/set2/principle-094.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-094-vector-databases-hold-enterprise-memory-and-must-be-secured-as-critica.png Professor Kai London — Cyber Security Principle 094: Vector databases hold enterprise memory and must be secured as critica Vector databases hold enterprise memory and must be secured as critical assets. — Professor Kai London, CISO. Principle 94 of 300 on AI / Data Security. https://professorkailondon.com/principles/set2/principle-095.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-095-ai-red-teaming-must-evolve-at-the-pace-of-the-systems-it-tests.png Professor Kai London — Cyber Security Principle 095: AI red-teaming must evolve at the pace of the systems it tests. AI red-teaming must evolve at the pace of the systems it tests. — Professor Kai London, CISO. Principle 95 of 300 on AI Assurance. https://professorkailondon.com/principles/set2/principle-096.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-096-data-poisoning-turns-ai-adoption-into-a-supply-chain-security-problem.png Professor Kai London — Cyber Security Principle 096: Data poisoning turns AI adoption into a supply-chain security problem. Data poisoning turns AI adoption into a supply-chain security problem. — Professor Kai London, CISO. Principle 96 of 300 on AI Security. https://professorkailondon.com/principles/set2/principle-097.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-097-algorithmic-transparency-is-a-market-advantage-when-systems-affect-peo.png Professor Kai London — Cyber Security Principle 097: Algorithmic transparency is a market advantage when systems affect peo Algorithmic transparency is a market advantage when systems affect people. — Professor Kai London, CISO. Principle 97 of 300 on AI Governance. https://professorkailondon.com/principles/set2/principle-098.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-098-responsible-ai-is-not-brand-decoration-it-is-operational-eligibility.png Professor Kai London — Cyber Security Principle 098: Responsible AI is not brand decoration; it is operational eligibility. Responsible AI is not brand decoration; it is operational eligibility. — Professor Kai London, CISO. Principle 98 of 300 on AI Ethics. https://professorkailondon.com/principles/set2/principle-099.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-099-ai-assurance-should-be-designed-before-ai-scale-is-achieved.png Professor Kai London — Cyber Security Principle 099: AI assurance should be designed before AI scale is achieved. AI assurance should be designed before AI scale is achieved. — Professor Kai London, CISO. Principle 99 of 300 on AI Assurance. https://professorkailondon.com/principles/set2/principle-100.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-100-agentic-ai-needs-delegated-authority-but-never-delegated-accountabilit.png Professor Kai London — Cyber Security Principle 100: Agentic AI needs delegated authority, but never delegated accountabili Agentic AI needs delegated authority, but never delegated accountability. — Professor Kai London, CISO. Principle 100 of 300 on Agentic AI. https://professorkailondon.com/principles/set2/principle-101.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-101-ot-security-protects-continuity-safety-and-trust-not-just-networks.png Professor Kai London — Cyber Security Principle 101: OT security protects continuity, safety and trust, not just networks. OT security protects continuity, safety and trust, not just networks. — Professor Kai London, CISO. Principle 101 of 300 on OT Security. https://professorkailondon.com/principles/set2/principle-102.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-102-in-ot-security-must-protect-operations-without-disrupting-them.png Professor Kai London — Cyber Security Principle 102: In OT, security must protect operations without disrupting them. In OT, security must protect operations without disrupting them. — Professor Kai London, CISO. Principle 102 of 300 on OT Resilience. https://professorkailondon.com/principles/set2/principle-103.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-103-critical-systems-need-security-that-understands-consequence-not-only-c.png Professor Kai London — Cyber Security Principle 103: Critical systems need security that understands consequence, not only Critical systems need security that understands consequence, not only configuration. — Professor Kai London, CISO. Principle 103 of 300 on Critical Infrastructure. https://professorkailondon.com/principles/set2/principle-104.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-104-in-it-downtime-disrupts-service-in-ot-failure-can-affect-safety.png Professor Kai London — Cyber Security Principle 104: In IT, downtime disrupts service; in OT, failure can affect safety. In IT, downtime disrupts service; in OT, failure can affect safety. — Professor Kai London, CISO. Principle 104 of 300 on OT Governance. https://professorkailondon.com/principles/set2/principle-105.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-105-availability-is-the-first-language-of-the-plant-floor.png Professor Kai London — Cyber Security Principle 105: Availability is the first language of the plant floor. Availability is the first language of the plant floor. — Professor Kai London, CISO. Principle 105 of 300 on OT Priorities. https://professorkailondon.com/principles/set2/principle-106.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-106-the-gap-between-it-and-ot-is-where-attackers-look-for-bridges.png Professor Kai London — Cyber Security Principle 106: The gap between IT and OT is where attackers look for bridges. The gap between IT and OT is where attackers look for bridges. — Professor Kai London, CISO. Principle 106 of 300 on IT / OT Convergence. https://professorkailondon.com/principles/set2/principle-107.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-107-safety-systems-and-security-systems-must-not-conflict-during-an-incide.png Professor Kai London — Cyber Security Principle 107: Safety systems and security systems must not conflict during an incide Safety systems and security systems must not conflict during an incident. — Professor Kai London, CISO. Principle 107 of 300 on Safety / Security. https://professorkailondon.com/principles/set2/principle-108.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-108-legacy-is-not-an-excuse-it-is-a-risk-with-an-owner-and-a-plan.png Professor Kai London — Cyber Security Principle 108: Legacy is not an excuse; it is a risk with an owner and a plan. Legacy is not an excuse; it is a risk with an owner and a plan. — Professor Kai London, CISO. Principle 108 of 300 on OT Risk. https://professorkailondon.com/principles/set2/principle-109.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-109-plant-floor-visibility-is-stewardship-not-surveillance.png Professor Kai London — Cyber Security Principle 109: Plant-floor visibility is stewardship, not surveillance. Plant-floor visibility is stewardship, not surveillance. — Professor Kai London, CISO. Principle 109 of 300 on OT Monitoring. https://professorkailondon.com/principles/set2/principle-110.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-110-remote-access-into-ot-must-be-treated-as-a-critical-control-path.png Professor Kai London — Cyber Security Principle 110: Remote access into OT must be treated as a critical control path. Remote access into OT must be treated as a critical control path. — Professor Kai London, CISO. Principle 110 of 300 on OT Access. https://professorkailondon.com/principles/set2/principle-111.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-111-the-engineer-who-keeps-the-line-running-is-one-of-the-strongest-securi.png Professor Kai London — Cyber Security Principle 111: The engineer who keeps the line running is one of the strongest securi The engineer who keeps the line running is one of the strongest security controls. — Professor Kai London, CISO. Principle 111 of 300 on OT Culture. https://professorkailondon.com/principles/set2/principle-112.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-112-uptime-and-security-are-not-opponents-separating-them-weakens-both.png Professor Kai London — Cyber Security Principle 112: Uptime and security are not opponents; separating them weakens both. Uptime and security are not opponents; separating them weakens both. — Professor Kai London, CISO. Principle 112 of 300 on OT Strategy. https://professorkailondon.com/principles/set2/principle-113.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-113-know-the-safe-state-before-an-incident-forces-the-question.png Professor Kai London — Cyber Security Principle 113: Know the safe state before an incident forces the question. Know the safe state before an incident forces the question. — Professor Kai London, CISO. Principle 113 of 300 on OT Safety. https://professorkailondon.com/principles/set2/principle-114.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-114-in-critical-infrastructure-resilience-is-a-public-duty-and-a-business-.png Professor Kai London — Cyber Security Principle 114: In critical infrastructure, resilience is a public duty and a business In critical infrastructure, resilience is a public duty and a business responsibility. — Professor Kai London, CISO. Principle 114 of 300 on CNI. https://professorkailondon.com/principles/set2/principle-115.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-115-every-unverified-digital-input-in-ot-may-create-physical-world-consequ.png Professor Kai London — Cyber Security Principle 115: Every unverified digital input in OT may create physical-world consequ Every unverified digital input in OT may create physical-world consequence. — Professor Kai London, CISO. Principle 115 of 300 on OT / ICS. https://professorkailondon.com/principles/set2/principle-116.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-116-industrial-systems-need-behavioural-monitoring-based-on-process-realit.png Professor Kai London — Cyber Security Principle 116: Industrial systems need behavioural monitoring based on process realit Industrial systems need behavioural monitoring based on process reality. — Professor Kai London, CISO. Principle 116 of 300 on OT Security. https://professorkailondon.com/principles/set2/principle-117.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-117-an-air-gap-should-be-validated-as-a-control-not-assumed-as-a-comfort.png Professor Kai London — Cyber Security Principle 117: An air gap should be validated as a control, not assumed as a comfort. An air gap should be validated as a control, not assumed as a comfort. — Professor Kai London, CISO. Principle 117 of 300 on OT Security. https://professorkailondon.com/principles/set2/principle-118.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-118-legacy-scada-requires-compensating-controls-that-respect-operational-c.png Professor Kai London — Cyber Security Principle 118: Legacy SCADA requires compensating controls that respect operational c Legacy SCADA requires compensating controls that respect operational constraint. — Professor Kai London, CISO. Principle 118 of 300 on ICS Security. https://professorkailondon.com/principles/set2/principle-119.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-119-iot-security-must-include-certificate-lifecycle-renewal-and-retirement.png Professor Kai London — Cyber Security Principle 119: IoT security must include certificate lifecycle, renewal and retiremen IoT security must include certificate lifecycle, renewal and retirement planning. — Professor Kai London, CISO. Principle 119 of 300 on IoT Security. https://professorkailondon.com/principles/set2/principle-120.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-120-vendor-access-to-industrial-systems-must-be-governed-as-a-high-consequ.png Professor Kai London — Cyber Security Principle 120: Vendor access to industrial systems must be governed as a high-consequ Vendor access to industrial systems must be governed as a high-consequence pathway. — Professor Kai London, CISO. Principle 120 of 300 on OT Third-Party Risk. https://professorkailondon.com/principles/set2/principle-121.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-121-it-and-ot-convergence-needs-one-risk-language-across-data-process-and-.png Professor Kai London — Cyber Security Principle 121: IT and OT convergence needs one risk language across data, process and IT and OT convergence needs one risk language across data, process and physics. — Professor Kai London, CISO. Principle 121 of 300 on IT / OT Convergence. https://professorkailondon.com/principles/set2/principle-122.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-122-passive-visibility-is-often-the-safest-first-step-in-fragile-ot-enviro.png Professor Kai London — Cyber Security Principle 122: Passive visibility is often the safest first step in fragile OT enviro Passive visibility is often the safest first step in fragile OT environments. — Professor Kai London, CISO. Principle 122 of 300 on OT Monitoring. https://professorkailondon.com/principles/set2/principle-123.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-123-plc-security-matters-because-digital-compromise-can-become-physical-ac.png Professor Kai London — Cyber Security Principle 123: PLC security matters because digital compromise can become physical ac PLC security matters because digital compromise can become physical action. — Professor Kai London, CISO. Principle 123 of 300 on PLC Security. https://professorkailondon.com/principles/set2/principle-124.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-124-ot-incident-response-must-include-engineering-reality-not-only-it-proc.png Professor Kai London — Cyber Security Principle 124: OT incident response must include engineering reality, not only IT pro OT incident response must include engineering reality, not only IT procedure. — Professor Kai London, CISO. Principle 124 of 300 on OT IR. https://professorkailondon.com/principles/set2/principle-125.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-125-critical-infrastructure-defence-moves-at-the-speed-of-trust-between-op.png Professor Kai London — Cyber Security Principle 125: Critical infrastructure defence moves at the speed of trust between op Critical infrastructure defence moves at the speed of trust between operations and security. — Professor Kai London, CISO. Principle 125 of 300 on OT Culture. https://professorkailondon.com/principles/set2/principle-126.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-126-third-party-risk-remains-first-party-accountability.png Professor Kai London — Cyber Security Principle 126: Third-party risk remains first-party accountability. Third-party risk remains first-party accountability. — Professor Kai London, CISO. Principle 126 of 300 on Supplier Risk. https://professorkailondon.com/principles/set2/principle-127.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-127-a-supplier-s-weakest-control-can-become-your-strongest-regulatory-expo.png Professor Kai London — Cyber Security Principle 127: A supplier's weakest control can become your strongest regulatory expo A supplier's weakest control can become your strongest regulatory exposure. — Professor Kai London, CISO. Principle 127 of 300 on Vendor Risk. https://professorkailondon.com/principles/set2/principle-128.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-128-work-can-be-outsourced-accountability-cannot.png Professor Kai London — Cyber Security Principle 128: Work can be outsourced; accountability cannot. Work can be outsourced; accountability cannot. — Professor Kai London, CISO. Principle 128 of 300 on Supply Chain. https://professorkailondon.com/principles/set2/principle-129.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-129-a-questionnaire-is-a-promise-evidence-is-the-proof.png Professor Kai London — Cyber Security Principle 129: A questionnaire is a promise; evidence is the proof. A questionnaire is a promise; evidence is the proof. — Professor Kai London, CISO. Principle 129 of 300 on Assurance. https://professorkailondon.com/principles/set2/principle-130.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-130-the-cloud-may-run-elsewhere-but-accountability-remains-with-the-busine.png Professor Kai London — Cyber Security Principle 130: The cloud may run elsewhere, but accountability remains with the busin The cloud may run elsewhere, but accountability remains with the business. — Professor Kai London, CISO. Principle 130 of 300 on Cloud Risk. https://professorkailondon.com/principles/set2/principle-131.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-131-concentration-risk-is-the-quiet-cost-of-everyone-trusting-the-same-pro.png Professor Kai London — Cyber Security Principle 131: Concentration risk is the quiet cost of everyone trusting the same pro Concentration risk is the quiet cost of everyone trusting the same provider. — Professor Kai London, CISO. Principle 131 of 300 on Systemic Risk. https://professorkailondon.com/principles/set2/principle-132.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-132-a-contract-without-security-obligations-signs-risk-in-advance.png Professor Kai London — Cyber Security Principle 132: A contract without security obligations signs risk in advance. A contract without security obligations signs risk in advance. — Professor Kai London, CISO. Principle 132 of 300 on Procurement. https://professorkailondon.com/principles/set2/principle-133.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-133-fourth-party-exposure-matters-because-risk-rarely-stops-at-the-first-s.png Professor Kai London — Cyber Security Principle 133: Fourth-party exposure matters because risk rarely stops at the first s Fourth-party exposure matters because risk rarely stops at the first supplier. — Professor Kai London, CISO. Principle 133 of 300 on Supply Chain. https://professorkailondon.com/principles/set2/principle-134.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-134-due-diligence-that-ends-at-signing-becomes-delayed-exposure.png Professor Kai London — Cyber Security Principle 134: Due diligence that ends at signing becomes delayed exposure. Due diligence that ends at signing becomes delayed exposure. — Professor Kai London, CISO. Principle 134 of 300 on Third-Party Risk. https://professorkailondon.com/principles/set2/principle-135.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-135-a-good-exit-plan-is-part-of-a-good-supplier-strategy.png Professor Kai London — Cyber Security Principle 135: A good exit plan is part of a good supplier strategy. A good exit plan is part of a good supplier strategy. — Professor Kai London, CISO. Principle 135 of 300 on Resilience. https://professorkailondon.com/principles/set2/principle-136.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-136-supplier-assurance-should-make-risk-visible-before-signatures-are-exch.png Professor Kai London — Cyber Security Principle 136: Supplier assurance should make risk visible before signatures are exch Supplier assurance should make risk visible before signatures are exchanged. — Professor Kai London, CISO. Principle 136 of 300 on Vendor Risk. https://professorkailondon.com/principles/set2/principle-137.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-137-a-vendor-relationship-is-secure-only-when-obligations-and-evidence-sta.png Professor Kai London — Cyber Security Principle 137: A vendor relationship is secure only when obligations and evidence sta A vendor relationship is secure only when obligations and evidence stay current. — Professor Kai London, CISO. Principle 137 of 300 on Third-Party Governance. https://professorkailondon.com/principles/set2/principle-138.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-138-contract-security-clauses-matter-most-when-the-incident-starts.png Professor Kai London — Cyber Security Principle 138: Contract security clauses matter most when the incident starts. Contract security clauses matter most when the incident starts. — Professor Kai London, CISO. Principle 138 of 300 on Contract Assurance. https://professorkailondon.com/principles/set2/principle-139.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-139-third-party-code-becomes-first-party-risk-when-it-enters-the-product.png Professor Kai London — Cyber Security Principle 139: Third-party code becomes first-party risk when it enters the product. Third-party code becomes first-party risk when it enters the product. — Professor Kai London, CISO. Principle 139 of 300 on Software Supply Chain. https://professorkailondon.com/principles/set2/principle-140.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-140-supplier-resilience-must-be-assessed-against-the-services-the-business.png Professor Kai London — Cyber Security Principle 140: Supplier resilience must be assessed against the services the business Supplier resilience must be assessed against the services the business cannot afford to lose. — Professor Kai London, CISO. Principle 140 of 300 on Operational Risk. https://professorkailondon.com/principles/set2/principle-141.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-141-a-processor-register-is-only-useful-if-it-reflects-operational-reality.png Professor Kai London — Cyber Security Principle 141: A processor register is only useful if it reflects operational reality A processor register is only useful if it reflects operational reality. — Professor Kai London, CISO. Principle 141 of 300 on Privacy / Vendor. https://professorkailondon.com/principles/set2/principle-142.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-142-supplier-risk-cannot-be-managed-by-annual-paperwork-alone.png Professor Kai London — Cyber Security Principle 142: Supplier risk cannot be managed by annual paperwork alone. Supplier risk cannot be managed by annual paperwork alone. — Professor Kai London, CISO. Principle 142 of 300 on TPRM. https://professorkailondon.com/principles/set2/principle-143.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-143-critical-vendors-deserve-evidence-reviews-not-reputation-based-trust.png Professor Kai London — Cyber Security Principle 143: Critical vendors deserve evidence reviews, not reputation-based trust. Critical vendors deserve evidence reviews, not reputation-based trust. — Professor Kai London, CISO. Principle 143 of 300 on Supplier Assurance. https://professorkailondon.com/principles/set2/principle-144.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-144-outsourcing-works-best-when-responsibility-lines-are-visible-before-fa.png Professor Kai London — Cyber Security Principle 144: Outsourcing works best when responsibility lines are visible before fa Outsourcing works best when responsibility lines are visible before failure. — Professor Kai London, CISO. Principle 144 of 300 on Governance. https://professorkailondon.com/principles/set2/principle-145.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-145-the-safest-supplier-ecosystem-has-clear-ownership-tested-exits-and-cur.png Professor Kai London — Cyber Security Principle 145: The safest supplier ecosystem has clear ownership, tested exits and cu The safest supplier ecosystem has clear ownership, tested exits and current evidence. — Professor Kai London, CISO. Principle 145 of 300 on Supply Chain. https://professorkailondon.com/principles/set2/principle-146.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-146-privacy-engineering-belongs-in-design-architecture-and-code-before-leg.png Professor Kai London — Cyber Security Principle 146: Privacy engineering belongs in design, architecture and code before le Privacy engineering belongs in design, architecture and code before legal review. — Professor Kai London, CISO. Principle 146 of 300 on Privacy Engineering. https://professorkailondon.com/principles/set2/principle-147.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-147-data-sovereignty-turns-cloud-geography-into-a-governance-decision.png Professor Kai London — Cyber Security Principle 147: Data sovereignty turns cloud geography into a governance decision. Data sovereignty turns cloud geography into a governance decision. — Professor Kai London, CISO. Principle 147 of 300 on Data Governance. https://professorkailondon.com/principles/set2/principle-148.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-148-consent-is-a-living-permission-model-not-a-static-checkbox.png Professor Kai London — Cyber Security Principle 148: Consent is a living permission model, not a static checkbox. Consent is a living permission model, not a static checkbox. — Professor Kai London, CISO. Principle 148 of 300 on Privacy. https://professorkailondon.com/principles/set2/principle-149.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-149-data-minimisation-reduces-risk-by-removing-what-the-attacker-cannot-st.png Professor Kai London — Cyber Security Principle 149: Data minimisation reduces risk by removing what the attacker cannot st Data minimisation reduces risk by removing what the attacker cannot steal. — Professor Kai London, CISO. Principle 149 of 300 on Data Protection. https://professorkailondon.com/principles/set2/principle-150.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-150-anonymisation-needs-mathematical-confidence-pseudonymisation-needs-dis.png Professor Kai London — Cyber Security Principle 150: Anonymisation needs mathematical confidence; pseudonymisation needs di Anonymisation needs mathematical confidence; pseudonymisation needs disciplined protection. — Professor Kai London, CISO. Principle 150 of 300 on Privacy Engineering. https://professorkailondon.com/principles/set2/principle-151.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-151-cross-border-data-flows-require-lifecycle-mapping-before-risk-can-be-m.png Professor Kai London — Cyber Security Principle 151: Cross-border data flows require lifecycle mapping before risk can be m Cross-border data flows require lifecycle mapping before risk can be managed. — Professor Kai London, CISO. Principle 151 of 300 on Data Transfers. https://professorkailondon.com/principles/set2/principle-152.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-152-a-privacy-notice-should-clarify-trust-not-hide-it-in-legal-complexity.png Professor Kai London — Cyber Security Principle 152: A privacy notice should clarify trust, not hide it in legal complexity A privacy notice should clarify trust, not hide it in legal complexity. — Professor Kai London, CISO. Principle 152 of 300 on Transparency. https://professorkailondon.com/principles/set2/principle-153.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-153-biometric-data-deserves-exceptional-protection-because-it-cannot-be-re.png Professor Kai London — Cyber Security Principle 153: Biometric data deserves exceptional protection because it cannot be re Biometric data deserves exceptional protection because it cannot be reset like a password. — Professor Kai London, CISO. Principle 153 of 300 on Data Security. https://professorkailondon.com/principles/set2/principle-154.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-154-erasure-rights-require-architecture-that-can-find-isolate-and-remove-d.png Professor Kai London — Cyber Security Principle 154: Erasure rights require architecture that can find, isolate and remove Erasure rights require architecture that can find, isolate and remove data. — Professor Kai London, CISO. Principle 154 of 300 on GDPR / Lifecycle. https://professorkailondon.com/principles/set2/principle-155.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-155-reputational-damage-often-lasts-longer-than-the-regulatory-fine.png Professor Kai London — Cyber Security Principle 155: Reputational damage often lasts longer than the regulatory fine. Reputational damage often lasts longer than the regulatory fine. — Professor Kai London, CISO. Principle 155 of 300 on Reputation. https://professorkailondon.com/principles/set2/principle-156.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-156-a-data-map-is-not-paperwork-it-is-the-enterprise-trust-map.png Professor Kai London — Cyber Security Principle 156: A data map is not paperwork; it is the enterprise trust map. A data map is not paperwork; it is the enterprise trust map. — Professor Kai London, CISO. Principle 156 of 300 on Data Governance. https://professorkailondon.com/principles/set2/principle-157.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-157-the-business-cannot-protect-data-it-cannot-locate-classify-or-explain.png Professor Kai London — Cyber Security Principle 157: The business cannot protect data it cannot locate, classify or explain The business cannot protect data it cannot locate, classify or explain. — Professor Kai London, CISO. Principle 157 of 300 on Data Security. https://professorkailondon.com/principles/set2/principle-158.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-158-data-retention-without-purpose-is-liability-in-storage.png Professor Kai London — Cyber Security Principle 158: Data retention without purpose is liability in storage. Data retention without purpose is liability in storage. — Professor Kai London, CISO. Principle 158 of 300 on Retention. https://professorkailondon.com/principles/set2/principle-159.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-159-deletion-is-not-an-it-chore-it-is-a-trust-promise-fulfilled.png Professor Kai London — Cyber Security Principle 159: Deletion is not an IT chore; it is a trust promise fulfilled. Deletion is not an IT chore; it is a trust promise fulfilled. — Professor Kai London, CISO. Principle 159 of 300 on Erasure. https://professorkailondon.com/principles/set2/principle-160.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-160-a-dsar-is-a-stress-test-of-the-data-estate.png Professor Kai London — Cyber Security Principle 160: A DSAR is a stress test of the data estate. A DSAR is a stress test of the data estate. — Professor Kai London, CISO. Principle 160 of 300 on DSAR. https://professorkailondon.com/principles/set2/principle-161.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-161-if-data-cannot-be-found-for-the-individual-it-cannot-be-protected-for-.png Professor Kai London — Cyber Security Principle 161: If data cannot be found for the individual, it cannot be protected for If data cannot be found for the individual, it cannot be protected for the enterprise. — Professor Kai London, CISO. Principle 161 of 300 on DSAR / Security. https://professorkailondon.com/principles/set2/principle-162.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-162-every-dsar-reveals-where-data-governance-is-strong-or-fragile.png Professor Kai London — Cyber Security Principle 162: Every DSAR reveals where data governance is strong or fragile. Every DSAR reveals where data governance is strong or fragile. — Professor Kai London, CISO. Principle 162 of 300 on DSAR. https://professorkailondon.com/principles/set2/principle-163.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-163-privacy-by-design-means-governance-enters-before-launch-not-after-comp.png Professor Kai London — Cyber Security Principle 163: Privacy by design means governance enters before launch, not after com Privacy by design means governance enters before launch, not after complaint. — Professor Kai London, CISO. Principle 163 of 300 on Privacy by Design. https://professorkailondon.com/principles/set2/principle-164.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-164-product-design-can-create-regulatory-exposure-faster-than-legal-can-re.png Professor Kai London — Cyber Security Principle 164: Product design can create regulatory exposure faster than legal can re Product design can create regulatory exposure faster than legal can repair it. — Professor Kai London, CISO. Principle 164 of 300 on UX / Privacy. https://professorkailondon.com/principles/set2/principle-165.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-165-when-refusal-is-harder-than-acceptance-consent-is-already-weakened.png Professor Kai London — Cyber Security Principle 165: When refusal is harder than acceptance, consent is already weakened. When refusal is harder than acceptance, consent is already weakened. — Professor Kai London, CISO. Principle 165 of 300 on Consent. https://professorkailondon.com/principles/set2/principle-166.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-166-children-s-data-turns-compliance-weakness-into-public-trust-risk.png Professor Kai London — Cyber Security Principle 166: Children's data turns compliance weakness into public trust risk. Children's data turns compliance weakness into public trust risk. — Professor Kai London, CISO. Principle 166 of 300 on Children's Privacy. https://professorkailondon.com/principles/set2/principle-167.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-167-age-assurance-is-a-risk-based-control-not-a-decorative-pop-up.png Professor Kai London — Cyber Security Principle 167: Age assurance is a risk-based control, not a decorative pop-up. Age assurance is a risk-based control, not a decorative pop-up. — Professor Kai London, CISO. Principle 167 of 300 on Age Assurance. https://professorkailondon.com/principles/set2/principle-168.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-168-employee-monitoring-requires-lawful-purpose-proportionality-and-trust-.png Professor Kai London — Cyber Security Principle 168: Employee monitoring requires lawful purpose, proportionality and trust Employee monitoring requires lawful purpose, proportionality and trust-aware governance. — Professor Kai London, CISO. Principle 168 of 300 on Workplace Privacy. https://professorkailondon.com/principles/set2/principle-169.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-169-financial-services-privacy-risk-is-multiplied-by-operational-resilienc.png Professor Kai London — Cyber Security Principle 169: Financial-services privacy risk is multiplied by operational resilienc Financial-services privacy risk is multiplied by operational resilience obligations. — Professor Kai London, CISO. Principle 169 of 300 on Financial Services. https://professorkailondon.com/principles/set2/principle-170.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-170-healthcare-privacy-failures-carry-legal-ethical-and-human-consequences.png Professor Kai London — Cyber Security Principle 170: Healthcare privacy failures carry legal, ethical and human consequence Healthcare privacy failures carry legal, ethical and human consequences. — Professor Kai London, CISO. Principle 170 of 300 on Healthcare. https://professorkailondon.com/principles/set2/principle-171.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-171-cloud-security-is-shared-responsibility-plus-continuous-posture-manage.png Professor Kai London — Cyber Security Principle 171: Cloud security is shared responsibility plus continuous posture manage Cloud security is shared responsibility plus continuous posture management. — Professor Kai London, CISO. Principle 171 of 300 on Cloud Security. https://professorkailondon.com/principles/set2/principle-172.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-172-infrastructure-as-code-scales-resilience-or-risk-at-deployment-speed.png Professor Kai London — Cyber Security Principle 172: Infrastructure-as-Code scales resilience or risk at deployment speed. Infrastructure-as-Code scales resilience or risk at deployment speed. — Professor Kai London, CISO. Principle 172 of 300 on DevSecOps / Cloud. https://professorkailondon.com/principles/set2/principle-173.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-173-serverless-reduces-infrastructure-burden-while-increasing-service-leve.png Professor Kai London — Cyber Security Principle 173: Serverless reduces infrastructure burden while increasing service-leve Serverless reduces infrastructure burden while increasing service-level visibility needs. — Professor Kai London, CISO. Principle 173 of 300 on Cloud Security. https://professorkailondon.com/principles/set2/principle-174.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-174-apis-are-enterprise-nerve-paths-unprotected-endpoints-become-open-rout.png Professor Kai London — Cyber Security Principle 174: APIs are enterprise nerve paths; unprotected endpoints become open rou APIs are enterprise nerve paths; unprotected endpoints become open routes to value. — Professor Kai London, CISO. Principle 174 of 300 on API Security. https://professorkailondon.com/principles/set2/principle-175.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-175-cnapp-succeeds-when-code-to-cloud-visibility-improves-security-without.png Professor Kai London — Cyber Security Principle 175: CNAPP succeeds when code-to-cloud visibility improves security without CNAPP succeeds when code-to-cloud visibility improves security without slowing engineers. — Professor Kai London, CISO. Principle 175 of 300 on Cloud-Native Security. https://professorkailondon.com/principles/set2/principle-176.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-176-ephemeral-workloads-need-security-controls-that-move-at-ephemeral-spee.png Professor Kai London — Cyber Security Principle 176: Ephemeral workloads need security controls that move at ephemeral spee Ephemeral workloads need security controls that move at ephemeral speed. — Professor Kai London, CISO. Principle 176 of 300 on Cloud Security. https://professorkailondon.com/principles/set2/principle-177.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-177-multi-cloud-reduces-dependency-while-increasing-identity-visibility-an.png Professor Kai London — Cyber Security Principle 177: Multi-cloud reduces dependency while increasing identity, visibility a Multi-cloud reduces dependency while increasing identity, visibility and key-management complexity. — Professor Kai London, CISO. Principle 177 of 300 on Cloud Governance. https://professorkailondon.com/principles/set2/principle-178.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-178-sensitive-data-discovery-is-half-the-battle-in-cloud-risk-management.png Professor Kai London — Cyber Security Principle 178: Sensitive-data discovery is half the battle in cloud risk management. Sensitive-data discovery is half the battle in cloud risk management. — Professor Kai London, CISO. Principle 178 of 300 on DSPM. https://professorkailondon.com/principles/set2/principle-179.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-179-cloud-misconfiguration-is-best-prevented-through-automated-checks-not-.png Professor Kai London — Cyber Security Principle 179: Cloud misconfiguration is best prevented through automated checks, not Cloud misconfiguration is best prevented through automated checks, not manual hope. — Professor Kai London, CISO. Principle 179 of 300 on Cloud Compliance. https://professorkailondon.com/principles/set2/principle-180.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-180-real-time-cloud-assurance-converts-uncertainty-into-operational-confid.png Professor Kai London — Cyber Security Principle 180: Real-time cloud assurance converts uncertainty into operational confid Real-time cloud assurance converts uncertainty into operational confidence. — Professor Kai London, CISO. Principle 180 of 300 on Cloud Assurance. https://professorkailondon.com/principles/set2/principle-181.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-181-a-secure-cloud-begins-with-ownership-configuration-monitoring-and-evid.png Professor Kai London — Cyber Security Principle 181: A secure cloud begins with ownership, configuration, monitoring and ev A secure cloud begins with ownership, configuration, monitoring and evidence. — Professor Kai London, CISO. Principle 181 of 300 on Cloud Governance. https://professorkailondon.com/principles/set2/principle-182.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-182-identity-sprawl-is-the-hidden-tax-of-unmanaged-cloud-expansion.png Professor Kai London — Cyber Security Principle 182: Identity sprawl is the hidden tax of unmanaged cloud expansion. Identity sprawl is the hidden tax of unmanaged cloud expansion. — Professor Kai London, CISO. Principle 182 of 300 on Cloud IAM. https://professorkailondon.com/principles/set2/principle-183.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-183-every-api-needs-authentication-authorisation-monitoring-and-retirement.png Professor Kai London — Cyber Security Principle 183: Every API needs authentication, authorisation, monitoring and retireme Every API needs authentication, authorisation, monitoring and retirement discipline. — Professor Kai London, CISO. Principle 183 of 300 on API Governance. https://professorkailondon.com/principles/set2/principle-184.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-184-cloud-resilience-fails-when-backups-keys-and-identities-share-the-same.png Professor Kai London — Cyber Security Principle 184: Cloud resilience fails when backups, keys and identities share the sam Cloud resilience fails when backups, keys and identities share the same blast radius. — Professor Kai London, CISO. Principle 184 of 300 on Cloud Resilience. https://professorkailondon.com/principles/set2/principle-185.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-185-cloud-control-must-be-embedded-into-pipelines-not-inspected-after-depl.png Professor Kai London — Cyber Security Principle 185: Cloud control must be embedded into pipelines, not inspected after dep Cloud control must be embedded into pipelines, not inspected after deployment. — Professor Kai London, CISO. Principle 185 of 300 on DevSecOps. https://professorkailondon.com/principles/set2/principle-186.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-186-cryptographic-agility-must-begin-before-quantum-risk-becomes-operation.png Professor Kai London — Cyber Security Principle 186: Cryptographic agility must begin before quantum risk becomes operation Cryptographic agility must begin before quantum risk becomes operational reality. — Professor Kai London, CISO. Principle 186 of 300 on Quantum / Crypto. https://professorkailondon.com/principles/set2/principle-187.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-187-harvest-now-decrypt-later-makes-today-s-encrypted-exposure-tomorrow-s-.png Professor Kai London — Cyber Security Principle 187: Harvest-now-decrypt-later makes today's encrypted exposure tomorrow's Harvest-now-decrypt-later makes today's encrypted exposure tomorrow's disclosure risk. — Professor Kai London, CISO. Principle 187 of 300 on Quantum Security. https://professorkailondon.com/principles/set2/principle-188.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-188-key-rotation-should-be-an-automated-health-function-not-a-manual-after.png Professor Kai London — Cyber Security Principle 188: Key rotation should be an automated health function, not a manual afte Key rotation should be an automated health function, not a manual afterthought. — Professor Kai London, CISO. Principle 188 of 300 on Key Management. https://professorkailondon.com/principles/set2/principle-189.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-189-post-quantum-planning-must-include-firmware-devices-applications-and-s.png Professor Kai London — Cyber Security Principle 189: Post-quantum planning must include firmware, devices, applications and Post-quantum planning must include firmware, devices, applications and suppliers. — Professor Kai London, CISO. Principle 189 of 300 on PQC. https://professorkailondon.com/principles/set2/principle-190.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-190-privacy-preserving-analytics-should-unlock-insight-without-exposing-ra.png Professor Kai London — Cyber Security Principle 190: Privacy-preserving analytics should unlock insight without exposing ra Privacy-preserving analytics should unlock insight without exposing raw data. — Professor Kai London, CISO. Principle 190 of 300 on Encryption / Analytics. https://professorkailondon.com/principles/set2/principle-191.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-191-strong-encryption-depends-on-strong-entropy-disciplined-keys-and-gover.png Professor Kai London — Cyber Security Principle 191: Strong encryption depends on strong entropy, disciplined keys and gove Strong encryption depends on strong entropy, disciplined keys and governed custody. — Professor Kai London, CISO. Principle 191 of 300 on Cryptography. https://professorkailondon.com/principles/set2/principle-192.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-192-customer-controlled-key-models-strengthen-cloud-trust-when-implemented.png Professor Kai London — Cyber Security Principle 192: Customer-controlled key models strengthen cloud trust when implemented Customer-controlled key models strengthen cloud trust when implemented with discipline. — Professor Kai London, CISO. Principle 192 of 300 on BYOK / HYOK. https://professorkailondon.com/principles/set2/principle-193.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-193-internal-traffic-needs-cryptographic-protection-because-trusted-networ.png Professor Kai London — Cyber Security Principle 193: Internal traffic needs cryptographic protection because trusted networ Internal traffic needs cryptographic protection because trusted networks no longer exist. — Professor Kai London, CISO. Principle 193 of 300 on Network Security. https://professorkailondon.com/principles/set2/principle-194.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-194-digital-certificates-are-trust-passports-expiry-failure-can-become-ent.png Professor Kai London — Cyber Security Principle 194: Digital certificates are trust passports; expiry failure can become en Digital certificates are trust passports; expiry failure can become enterprise outage. — Professor Kai London, CISO. Principle 194 of 300 on Certificate Management. https://professorkailondon.com/principles/set2/principle-195.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-195-a-cryptographic-key-is-only-as-secure-as-the-environment-protecting-it.png Professor Kai London — Cyber Security Principle 195: A cryptographic key is only as secure as the environment protecting it A cryptographic key is only as secure as the environment protecting it. — Professor Kai London, CISO. Principle 195 of 300 on HSM / KMS. https://professorkailondon.com/principles/set2/principle-196.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-196-crypto-inventory-is-the-first-step-toward-post-quantum-readiness.png Professor Kai London — Cyber Security Principle 196: Crypto inventory is the first step toward post-quantum readiness. Crypto inventory is the first step toward post-quantum readiness. — Professor Kai London, CISO. Principle 196 of 300 on PQC Planning. https://professorkailondon.com/principles/set2/principle-197.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-197-key-ownership-must-be-clear-before-key-compromise-becomes-a-business-c.png Professor Kai London — Cyber Security Principle 197: Key ownership must be clear before key compromise becomes a business c Key ownership must be clear before key compromise becomes a business crisis. — Professor Kai London, CISO. Principle 197 of 300 on Key Governance. https://professorkailondon.com/principles/set2/principle-198.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-198-certificate-lifecycle-management-is-resilience-work-disguised-as-admin.png Professor Kai London — Cyber Security Principle 198: Certificate lifecycle management is resilience work disguised as admin Certificate lifecycle management is resilience work disguised as administration. — Professor Kai London, CISO. Principle 198 of 300 on Certificate Ops. https://professorkailondon.com/principles/set2/principle-199.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-199-encryption-strategy-must-cover-data-at-rest-in-motion-in-use-and-in-ev.png Professor Kai London — Cyber Security Principle 199: Encryption strategy must cover data at rest, in motion, in use and in Encryption strategy must cover data at rest, in motion, in use and in evidence. — Professor Kai London, CISO. Principle 199 of 300 on Data Protection. https://professorkailondon.com/principles/set2/principle-200.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-200-the-strongest-cryptography-still-fails-under-weak-process-and-poor-cus.png Professor Kai London — Cyber Security Principle 200: The strongest cryptography still fails under weak process and poor cus The strongest cryptography still fails under weak process and poor custody. — Professor Kai London, CISO. Principle 200 of 300 on Crypto Governance. https://professorkailondon.com/principles/set2/principle-201.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-201-devsecops-works-when-security-becomes-an-engineering-habit-not-a-relea.png Professor Kai London — Cyber Security Principle 201: DevSecOps works when security becomes an engineering habit, not a rele DevSecOps works when security becomes an engineering habit, not a release delay. — Professor Kai London, CISO. Principle 201 of 300 on DevSecOps. https://professorkailondon.com/principles/set2/principle-202.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-202-shift-left-succeeds-only-when-developers-receive-actionable-remediatio.png Professor Kai London — Cyber Security Principle 202: Shift-left succeeds only when developers receive actionable remediatio Shift-left succeeds only when developers receive actionable remediation. — Professor Kai London, CISO. Principle 202 of 300 on DevSecOps. https://professorkailondon.com/principles/set2/principle-203.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-203-an-sbom-is-the-digital-product-label-every-secure-enterprise-needs.png Professor Kai London — Cyber Security Principle 203: An SBOM is the digital product label every secure enterprise needs. An SBOM is the digital product label every secure enterprise needs. — Professor Kai London, CISO. Principle 203 of 300 on Software Supply Chain. https://professorkailondon.com/principles/set2/principle-204.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-204-open-source-dependencies-carry-inherited-exposure-and-must-be-governed.png Professor Kai London — Cyber Security Principle 204: Open-source dependencies carry inherited exposure and must be governed Open-source dependencies carry inherited exposure and must be governed accordingly. — Professor Kai London, CISO. Principle 204 of 300 on AppSec. https://professorkailondon.com/principles/set2/principle-205.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-205-hardcoded-secrets-turn-source-code-into-an-access-path.png Professor Kai London — Cyber Security Principle 205: Hardcoded secrets turn source code into an access path. Hardcoded secrets turn source code into an access path. — Professor Kai London, CISO. Principle 205 of 300 on DevSecOps. https://professorkailondon.com/principles/set2/principle-206.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-206-security-champions-convert-security-from-a-gate-into-an-engineering-cu.png Professor Kai London — Cyber Security Principle 206: Security champions convert security from a gate into an engineering cu Security champions convert security from a gate into an engineering culture. — Professor Kai London, CISO. Principle 206 of 300 on Security Culture. https://professorkailondon.com/principles/set2/principle-207.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-207-ci-cd-pipelines-are-crown-jewel-systems-because-they-shape-every-futur.png Professor Kai London — Cyber Security Principle 207: CI/CD pipelines are crown-jewel systems because they shape every futur CI/CD pipelines are crown-jewel systems because they shape every future release. — Professor Kai London, CISO. Principle 207 of 300 on Pipeline Security. https://professorkailondon.com/principles/set2/principle-208.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-208-immutable-infrastructure-reduces-persistence-by-making-change-traceabl.png Professor Kai London — Cyber Security Principle 208: Immutable infrastructure reduces persistence by making change traceabl Immutable infrastructure reduces persistence by making change traceable. — Professor Kai London, CISO. Principle 208 of 300 on Cloud / DevSecOps. https://professorkailondon.com/principles/set2/principle-209.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-209-vulnerability-chaining-shows-how-small-weaknesses-combine-into-serious.png Professor Kai London — Cyber Security Principle 209: Vulnerability chaining shows how small weaknesses combine into serious Vulnerability chaining shows how small weaknesses combine into serious exposure. — Professor Kai London, CISO. Principle 209 of 300 on AppSec. https://professorkailondon.com/principles/set2/principle-210.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-210-release-velocity-and-security-posture-improve-together-when-automation.png Professor Kai London — Cyber Security Principle 210: Release velocity and security posture improve together when automation Release velocity and security posture improve together when automation is designed well. — Professor Kai London, CISO. Principle 210 of 300 on DevSecOps. https://professorkailondon.com/principles/set2/principle-211.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-211-secure-sdlc-is-strongest-when-threat-modelling-happens-before-code-har.png Professor Kai London — Cyber Security Principle 211: Secure SDLC is strongest when threat modelling happens before code har Secure SDLC is strongest when threat modelling happens before code hardens into cost. — Professor Kai London, CISO. Principle 211 of 300 on SDLC. https://professorkailondon.com/principles/set2/principle-212.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-212-static-findings-need-business-context-before-they-become-engineering-p.png Professor Kai London — Cyber Security Principle 212: Static findings need business context before they become engineering p Static findings need business context before they become engineering priorities. — Professor Kai London, CISO. Principle 212 of 300 on AppSec. https://professorkailondon.com/principles/set2/principle-213.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-213-secrets-management-is-not-a-tool-purchase-it-is-a-custody-discipline.png Professor Kai London — Cyber Security Principle 213: Secrets management is not a tool purchase; it is a custody discipline. Secrets management is not a tool purchase; it is a custody discipline. — Professor Kai London, CISO. Principle 213 of 300 on DevSecOps. https://professorkailondon.com/principles/set2/principle-214.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-214-pipeline-access-should-be-governed-like-production-access.png Professor Kai London — Cyber Security Principle 214: Pipeline access should be governed like production access. Pipeline access should be governed like production access. — Professor Kai London, CISO. Principle 214 of 300 on CI/CD Security. https://professorkailondon.com/principles/set2/principle-215.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-215-secure-release-management-is-evidence-led-change-control-at-engineerin.png Professor Kai London — Cyber Security Principle 215: Secure release management is evidence-led change control at engineerin Secure release management is evidence-led change control at engineering speed. — Professor Kai London, CISO. Principle 215 of 300 on DevSecOps / GRC. https://professorkailondon.com/principles/set2/principle-216.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-216-compliance-shows-regulatory-awareness-threat-hunting-shows-adversary-a.png Professor Kai London — Cyber Security Principle 216: Compliance shows regulatory awareness; threat hunting shows adversary Compliance shows regulatory awareness; threat hunting shows adversary awareness. — Professor Kai London, CISO. Principle 216 of 300 on Threat Intelligence. https://professorkailondon.com/principles/set2/principle-217.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-217-behavioural-indicators-reveal-intent-where-static-indicators-reveal-hi.png Professor Kai London — Cyber Security Principle 217: Behavioural indicators reveal intent where static indicators reveal hi Behavioural indicators reveal intent where static indicators reveal history. — Professor Kai London, CISO. Principle 217 of 300 on Detection. https://professorkailondon.com/principles/set2/principle-218.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-218-threat-intelligence-becomes-valuable-only-when-relevant-to-sector-asse.png Professor Kai London — Cyber Security Principle 218: Threat intelligence becomes valuable only when relevant to sector, ass Threat intelligence becomes valuable only when relevant to sector, assets and exposure. — Professor Kai London, CISO. Principle 218 of 300 on Threat Intel. https://professorkailondon.com/principles/set2/principle-219.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-219-deception-controls-shift-advantage-by-making-attackers-reveal-themselv.png Professor Kai London — Cyber Security Principle 219: Deception controls shift advantage by making attackers reveal themselv Deception controls shift advantage by making attackers reveal themselves early. — Professor Kai London, CISO. Principle 219 of 300 on Deception Technology. https://professorkailondon.com/principles/set2/principle-220.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-220-attack-surface-management-requires-continuous-curiosity-about-how-the-.png Professor Kai London — Cyber Security Principle 220: Attack surface management requires continuous curiosity about how the Attack surface management requires continuous curiosity about how the enterprise appears externally. — Professor Kai London, CISO. Principle 220 of 300 on ASM. https://professorkailondon.com/principles/set2/principle-221.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-221-exposure-markets-turn-yesterday-s-leakage-into-tomorrow-s-intrusion-pa.png Professor Kai London — Cyber Security Principle 221: Exposure markets turn yesterday's leakage into tomorrow's intrusion pa Exposure markets turn yesterday's leakage into tomorrow's intrusion path. — Professor Kai London, CISO. Principle 221 of 300 on Threat Intel. https://professorkailondon.com/principles/set2/principle-222.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-222-mean-time-to-detect-often-decides-whether-an-incident-stays-contained-.png Professor Kai London — Cyber Security Principle 222: Mean time to detect often decides whether an incident stays contained Mean time to detect often decides whether an incident stays contained or becomes public. — Professor Kai London, CISO. Principle 222 of 300 on SOC Metrics. https://professorkailondon.com/principles/set2/principle-223.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-223-soc-automation-should-reduce-fatigue-while-preserving-human-judgement.png Professor Kai London — Cyber Security Principle 223: SOC automation should reduce fatigue while preserving human judgement. SOC automation should reduce fatigue while preserving human judgement. — Professor Kai London, CISO. Principle 223 of 300 on SOC Automation. https://professorkailondon.com/principles/set2/principle-224.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-224-adversaries-exploit-seams-between-tools-integration-closes-those-seams.png Professor Kai London — Cyber Security Principle 224: Adversaries exploit seams between tools; integration closes those seam Adversaries exploit seams between tools; integration closes those seams. — Professor Kai London, CISO. Principle 224 of 300 on Security Architecture. https://professorkailondon.com/principles/set2/principle-225.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-225-proactive-defence-needs-mapped-behaviours-not-improvised-guesses-durin.png Professor Kai London — Cyber Security Principle 225: Proactive defence needs mapped behaviours, not improvised guesses duri Proactive defence needs mapped behaviours, not improvised guesses during intrusion. — Professor Kai London, CISO. Principle 225 of 300 on MITRE ATT&CK. https://professorkailondon.com/principles/set2/principle-226.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-226-threat-hunting-begins-where-dashboards-stop-answering-the-hard-questio.png Professor Kai London — Cyber Security Principle 226: Threat hunting begins where dashboards stop answering the hard questio Threat hunting begins where dashboards stop answering the hard question. — Professor Kai London, CISO. Principle 226 of 300 on Threat Hunting. https://professorkailondon.com/principles/set2/principle-227.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-227-intelligence-without-action-is-research-not-defence.png Professor Kai London — Cyber Security Principle 227: Intelligence without action is research, not defence. Intelligence without action is research, not defence. — Professor Kai London, CISO. Principle 227 of 300 on Threat Intel. https://professorkailondon.com/principles/set2/principle-228.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-228-detection-engineering-should-turn-known-attacker-behaviour-into-repeat.png Professor Kai London — Cyber Security Principle 228: Detection engineering should turn known attacker behaviour into repeat Detection engineering should turn known attacker behaviour into repeatable control logic. — Professor Kai London, CISO. Principle 228 of 300 on Detection Engineering. https://professorkailondon.com/principles/set2/principle-229.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-229-the-best-soc-measures-confidence-context-and-containment-not-alert-vol.png Professor Kai London — Cyber Security Principle 229: The best SOC measures confidence, context and containment, not alert v The best SOC measures confidence, context and containment, not alert volume. — Professor Kai London, CISO. Principle 229 of 300 on SOC Metrics. https://professorkailondon.com/principles/set2/principle-230.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-230-attack-paths-must-be-prioritised-by-consequence-not-curiosity-alone.png Professor Kai London — Cyber Security Principle 230: Attack paths must be prioritised by consequence, not curiosity alone. Attack paths must be prioritised by consequence, not curiosity alone. — Professor Kai London, CISO. Principle 230 of 300 on Exposure Management. https://professorkailondon.com/principles/set2/principle-231.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-231-cyber-resilience-is-measured-by-continuity-during-the-attacks-that-get.png Professor Kai London — Cyber Security Principle 231: Cyber resilience is measured by continuity during the attacks that get Cyber resilience is measured by continuity during the attacks that get through. — Professor Kai London, CISO. Principle 231 of 300 on Incident Response. https://professorkailondon.com/principles/set2/principle-232.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-232-automated-response-needs-deterministic-guardrails-before-acting-at-ent.png Professor Kai London — Cyber Security Principle 232: Automated response needs deterministic guardrails before acting at ent Automated response needs deterministic guardrails before acting at enterprise speed. — Professor Kai London, CISO. Principle 232 of 300 on SOAR / IR. https://professorkailondon.com/principles/set2/principle-233.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-233-ransomware-resilience-is-strongest-when-recovery-makes-extortion-less-.png Professor Kai London — Cyber Security Principle 233: Ransomware resilience is strongest when recovery makes extortion less Ransomware resilience is strongest when recovery makes extortion less powerful. — Professor Kai London, CISO. Principle 233 of 300 on Ransomware. https://professorkailondon.com/principles/set2/principle-234.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-234-backups-must-not-share-the-same-trust-plane-as-the-compromised-environ.png Professor Kai London — Cyber Security Principle 234: Backups must not share the same trust plane as the compromised environ Backups must not share the same trust plane as the compromised environment. — Professor Kai London, CISO. Principle 234 of 300 on Recovery. https://professorkailondon.com/principles/set2/principle-235.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-235-tabletop-exercises-should-include-lost-communications-leadership-press.png Professor Kai London — Cyber Security Principle 235: Tabletop exercises should include lost communications, leadership pres Tabletop exercises should include lost communications, leadership pressure and incomplete facts. — Professor Kai London, CISO. Principle 235 of 300 on Crisis Simulation. https://professorkailondon.com/principles/set2/principle-236.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-236-legal-privilege-in-incident-response-must-be-considered-at-the-start.png Professor Kai London — Cyber Security Principle 236: Legal privilege in incident response must be considered at the start. Legal privilege in incident response must be considered at the start. — Professor Kai London, CISO. Principle 236 of 300 on Legal / IR. https://professorkailondon.com/principles/set2/principle-237.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-237-breach-communication-needs-one-source-of-technical-truth.png Professor Kai London — Cyber Security Principle 237: Breach communication needs one source of technical truth. Breach communication needs one source of technical truth. — Professor Kai London, CISO. Principle 237 of 300 on Crisis Comms. https://professorkailondon.com/principles/set2/principle-238.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-238-forensics-depends-on-chain-of-custody-because-evidence-must-survive-sc.png Professor Kai London — Cyber Security Principle 238: Forensics depends on chain of custody because evidence must survive sc Forensics depends on chain of custody because evidence must survive scrutiny. — Professor Kai London, CISO. Principle 238 of 300 on Digital Forensics. https://professorkailondon.com/principles/set2/principle-239.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-239-breach-cost-includes-recovery-confidence-trust-and-future-opportunity.png Professor Kai London — Cyber Security Principle 239: Breach cost includes recovery, confidence, trust and future opportunit Breach cost includes recovery, confidence, trust and future opportunity. — Professor Kai London, CISO. Principle 239 of 300 on Business Impact. https://professorkailondon.com/principles/set2/principle-240.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-240-post-incident-review-should-be-blameless-precise-and-focused-on-archit.png Professor Kai London — Cyber Security Principle 240: Post-incident review should be blameless, precise and focused on archi Post-incident review should be blameless, precise and focused on architectural improvement. — Professor Kai London, CISO. Principle 240 of 300 on Lessons Learned. https://professorkailondon.com/principles/set2/principle-241.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-241-the-incident-room-should-not-be-the-first-place-roles-are-understood.png Professor Kai London — Cyber Security Principle 241: The incident room should not be the first place roles are understood. The incident room should not be the first place roles are understood. — Professor Kai London, CISO. Principle 241 of 300 on IR Governance. https://professorkailondon.com/principles/set2/principle-242.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-242-the-first-hour-of-an-incident-should-follow-a-rehearsed-path.png Professor Kai London — Cyber Security Principle 242: The first hour of an incident should follow a rehearsed path. The first hour of an incident should follow a rehearsed path. — Professor Kai London, CISO. Principle 242 of 300 on IR Readiness. https://professorkailondon.com/principles/set2/principle-243.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-243-a-good-response-protects-people-operations-evidence-and-reputation.png Professor Kai London — Cyber Security Principle 243: A good response protects people, operations, evidence and reputation. A good response protects people, operations, evidence and reputation. — Professor Kai London, CISO. Principle 243 of 300 on Crisis Management. https://professorkailondon.com/principles/set2/principle-244.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-244-reputation-is-protected-by-preparation-not-statements.png Professor Kai London — Cyber Security Principle 244: Reputation is protected by preparation, not statements. Reputation is protected by preparation, not statements. — Professor Kai London, CISO. Principle 244 of 300 on Crisis Comms. https://professorkailondon.com/principles/set2/principle-245.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-245-speed-matters-in-crisis-but-accuracy-protects-credibility.png Professor Kai London — Cyber Security Principle 245: Speed matters in crisis, but accuracy protects credibility. Speed matters in crisis, but accuracy protects credibility. — Professor Kai London, CISO. Principle 245 of 300 on Incident Response. https://professorkailondon.com/principles/set2/principle-246.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-246-the-best-incident-simulation-exposes-weakness-without-creating-blame.png Professor Kai London — Cyber Security Principle 246: The best incident simulation exposes weakness without creating blame. The best incident simulation exposes weakness without creating blame. — Professor Kai London, CISO. Principle 246 of 300 on Tabletop Exercise. https://professorkailondon.com/principles/set2/principle-247.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-247-crisis-leadership-is-calm-factual-and-evidence-led.png Professor Kai London — Cyber Security Principle 247: Crisis leadership is calm, factual and evidence-led. Crisis leadership is calm, factual and evidence-led. — Professor Kai London, CISO. Principle 247 of 300 on Crisis Leadership. https://professorkailondon.com/principles/set2/principle-248.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-248-cyber-resilience-is-strongest-when-legal-security-operations-and-commu.png Professor Kai London — Cyber Security Principle 248: Cyber resilience is strongest when legal, security, operations and com Cyber resilience is strongest when legal, security, operations and communications move together. — Professor Kai London, CISO. Principle 248 of 300 on War Room. https://professorkailondon.com/principles/set2/principle-249.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-249-a-crisis-plan-is-useful-only-when-people-have-practised-using-it.png Professor Kai London — Cyber Security Principle 249: A crisis plan is useful only when people have practised using it. A crisis plan is useful only when people have practised using it. — Professor Kai London, CISO. Principle 249 of 300 on Preparedness. https://professorkailondon.com/principles/set2/principle-250.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-250-incident-evidence-should-be-preserved-as-carefully-as-systems-are-rest.png Professor Kai London — Cyber Security Principle 250: Incident evidence should be preserved as carefully as systems are rest Incident evidence should be preserved as carefully as systems are restored. — Professor Kai London, CISO. Principle 250 of 300 on Forensics / GRC. https://professorkailondon.com/principles/set2/principle-251.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-251-regulatory-readiness-is-the-ability-to-answer-hard-questions-with-curr.png Professor Kai London — Cyber Security Principle 251: Regulatory readiness is the ability to answer hard questions with curr Regulatory readiness is the ability to answer hard questions with current evidence. — Professor Kai London, CISO. Principle 251 of 300 on Regulatory. https://professorkailondon.com/principles/set2/principle-252.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-252-evidence-is-the-new-compliance-assumption-is-the-new-liability.png Professor Kai London — Cyber Security Principle 252: Evidence is the new compliance; assumption is the new liability. Evidence is the new compliance; assumption is the new liability. — Professor Kai London, CISO. Principle 252 of 300 on GRC. https://professorkailondon.com/principles/set2/principle-253.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-253-a-regulator-ready-enterprise-builds-the-evidence-pack-before-the-reque.png Professor Kai London — Cyber Security Principle 253: A regulator-ready enterprise builds the evidence pack before the reque A regulator-ready enterprise builds the evidence pack before the request arrives. — Professor Kai London, CISO. Principle 253 of 300 on Compliance. https://professorkailondon.com/principles/set2/principle-254.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-254-board-minutes-can-become-protection-when-they-show-active-governance.png Professor Kai London — Cyber Security Principle 254: Board minutes can become protection when they show active governance. Board minutes can become protection when they show active governance. — Professor Kai London, CISO. Principle 254 of 300 on Board Evidence. https://professorkailondon.com/principles/set2/principle-255.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-255-risk-registers-matter-only-when-they-drive-decisions-owners-and-closur.png Professor Kai London — Cyber Security Principle 255: Risk registers matter only when they drive decisions, owners and closu Risk registers matter only when they drive decisions, owners and closure. — Professor Kai London, CISO. Principle 255 of 300 on Risk Management. https://professorkailondon.com/principles/set2/principle-256.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-256-continuous-controls-monitoring-turns-compliance-into-live-operating-in.png Professor Kai London — Cyber Security Principle 256: Continuous controls monitoring turns compliance into live operating in Continuous controls monitoring turns compliance into live operating intelligence. — Professor Kai London, CISO. Principle 256 of 300 on CCM. https://professorkailondon.com/principles/set2/principle-257.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-257-a-finding-is-not-closed-until-the-risk-is-reduced-and-the-evidence-is-.png Professor Kai London — Cyber Security Principle 257: A finding is not closed until the risk is reduced and the evidence is A finding is not closed until the risk is reduced and the evidence is retrievable. — Professor Kai London, CISO. Principle 257 of 300 on Audit Remediation. https://professorkailondon.com/principles/set2/principle-258.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-258-governance-works-when-the-right-decision-becomes-repeatable-under-pres.png Professor Kai London — Cyber Security Principle 258: Governance works when the right decision becomes repeatable under pres Governance works when the right decision becomes repeatable under pressure. — Professor Kai London, CISO. Principle 258 of 300 on Operating Model. https://professorkailondon.com/principles/set2/principle-259.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-259-board-reporting-should-answer-what-changed-what-matters-and-what-needs.png Professor Kai London — Cyber Security Principle 259: Board reporting should answer what changed, what matters and what need Board reporting should answer what changed, what matters and what needs approval. — Professor Kai London, CISO. Principle 259 of 300 on Executive Reporting. https://professorkailondon.com/principles/set2/principle-260.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-260-regulatory-confidence-grows-when-documentation-predates-the-question.png Professor Kai London — Cyber Security Principle 260: Regulatory confidence grows when documentation predates the question. Regulatory confidence grows when documentation predates the question. — Professor Kai London, CISO. Principle 260 of 300 on Compliance Evidence. https://professorkailondon.com/principles/set2/principle-261.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-261-privacy-cyber-and-ai-governance-now-form-one-trust-discipline.png Professor Kai London — Cyber Security Principle 261: Privacy, cyber and AI governance now form one trust discipline. Privacy, cyber and AI governance now form one trust discipline. — Professor Kai London, CISO. Principle 261 of 300 on Integrated Governance. https://professorkailondon.com/principles/set2/principle-262.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-262-a-risk-accepted-without-evidence-is-only-a-hope-with-a-signature.png Professor Kai London — Cyber Security Principle 262: A risk accepted without evidence is only a hope with a signature. A risk accepted without evidence is only a hope with a signature. — Professor Kai London, CISO. Principle 262 of 300 on Risk Acceptance. https://professorkailondon.com/principles/set2/principle-263.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-263-audit-readiness-is-not-a-season-it-is-an-operating-habit.png Professor Kai London — Cyber Security Principle 263: Audit readiness is not a season; it is an operating habit. Audit readiness is not a season; it is an operating habit. — Professor Kai London, CISO. Principle 263 of 300 on Assurance. https://professorkailondon.com/principles/set2/principle-264.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-264-the-strongest-programmes-can-prove-not-only-what-they-did-but-why-they.png Professor Kai London — Cyber Security Principle 264: The strongest programmes can prove not only what they did, but why the The strongest programmes can prove not only what they did, but why they did it. — Professor Kai London, CISO. Principle 264 of 300 on Decision Evidence. https://professorkailondon.com/principles/set2/principle-265.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-265-documentation-is-powerful-when-it-reflects-real-control-not-decorative.png Professor Kai London — Cyber Security Principle 265: Documentation is powerful when it reflects real control, not decorativ Documentation is powerful when it reflects real control, not decorative compliance. — Professor Kai London, CISO. Principle 265 of 300 on GRC. https://professorkailondon.com/principles/set2/principle-266.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-266-executive-assurance-must-connect-risk-cost-control-and-consequence.png Professor Kai London — Cyber Security Principle 266: Executive assurance must connect risk, cost, control and consequence. Executive assurance must connect risk, cost, control and consequence. — Professor Kai London, CISO. Principle 266 of 300 on Board Assurance. https://professorkailondon.com/principles/set2/principle-267.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-267-a-governance-committee-is-useful-only-when-it-changes-outcomes.png Professor Kai London — Cyber Security Principle 267: A governance committee is useful only when it changes outcomes. A governance committee is useful only when it changes outcomes. — Professor Kai London, CISO. Principle 267 of 300 on Governance. https://professorkailondon.com/principles/set2/principle-268.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-268-regulatory-survival-depends-on-clarity-before-inquiry-and-discipline-d.png Professor Kai London — Cyber Security Principle 268: Regulatory survival depends on clarity before inquiry and discipline d Regulatory survival depends on clarity before inquiry and discipline during inquiry. — Professor Kai London, CISO. Principle 268 of 300 on Regulatory Response. https://professorkailondon.com/principles/set2/principle-269.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-269-compliance-automation-should-remove-manual-fragility-not-obscure-respo.png Professor Kai London — Cyber Security Principle 269: Compliance automation should remove manual fragility, not obscure resp Compliance automation should remove manual fragility, not obscure responsibility. — Professor Kai London, CISO. Principle 269 of 300 on GRC Automation. https://professorkailondon.com/principles/set2/principle-270.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-270-evidence-led-delivery-wins-audits-renewals-and-trust.png Professor Kai London — Cyber Security Principle 270: Evidence-led delivery wins audits, renewals and trust. Evidence-led delivery wins audits, renewals and trust. — Professor Kai London, CISO. Principle 270 of 300 on Evidence / Consulting. https://professorkailondon.com/principles/set2/principle-271.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-271-security-culture-is-what-people-do-when-the-policy-is-not-watching.png Professor Kai London — Cyber Security Principle 271: Security culture is what people do when the policy is not watching. Security culture is what people do when the policy is not watching. — Professor Kai London, CISO. Principle 271 of 300 on Culture. https://professorkailondon.com/principles/set2/principle-272.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-272-blame-teaches-people-to-hide-incidents-curiosity-teaches-them-to-repor.png Professor Kai London — Cyber Security Principle 272: Blame teaches people to hide incidents; curiosity teaches them to repo Blame teaches people to hide incidents; curiosity teaches them to report early. — Professor Kai London, CISO. Principle 272 of 300 on Culture. https://professorkailondon.com/principles/set2/principle-273.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-273-awareness-training-that-bores-is-awareness-training-that-fails.png Professor Kai London — Cyber Security Principle 273: Awareness training that bores is awareness training that fails. Awareness training that bores is awareness training that fails. — Professor Kai London, CISO. Principle 273 of 300 on Human Factor. https://professorkailondon.com/principles/set2/principle-274.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-274-the-strongest-human-control-is-a-person-who-feels-safe-raising-a-conce.png Professor Kai London — Cyber Security Principle 274: The strongest human control is a person who feels safe raising a conce The strongest human control is a person who feels safe raising a concern. — Professor Kai London, CISO. Principle 274 of 300 on Culture. https://professorkailondon.com/principles/set2/principle-275.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-275-a-ciso-s-job-is-not-to-say-no-faster-it-is-to-make-yes-safer.png Professor Kai London — Cyber Security Principle 275: A CISO's job is not to say no faster; it is to make yes safer. A CISO's job is not to say no faster; it is to make yes safer. — Professor Kai London, CISO. Principle 275 of 300 on Leadership. https://professorkailondon.com/principles/set2/principle-276.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-276-translate-risk-into-business-language-or-be-translated-out-of-the-deci.png Professor Kai London — Cyber Security Principle 276: Translate risk into business language or be translated out of the deci Translate risk into business language or be translated out of the decision room. — Professor Kai London, CISO. Principle 276 of 300 on Communication. https://professorkailondon.com/principles/set2/principle-277.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-277-security-is-led-best-when-everyone-else-feels-responsible-for-it.png Professor Kai London — Cyber Security Principle 277: Security is led best when everyone else feels responsible for it. Security is led best when everyone else feels responsible for it. — Professor Kai London, CISO. Principle 277 of 300 on Leadership. https://professorkailondon.com/principles/set2/principle-278.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-278-resilience-is-a-team-sport-heroism-is-usually-failure-seen-too-late.png Professor Kai London — Cyber Security Principle 278: Resilience is a team sport; heroism is usually failure seen too late. Resilience is a team sport; heroism is usually failure seen too late. — Professor Kai London, CISO. Principle 278 of 300 on Culture. https://professorkailondon.com/principles/set2/principle-279.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-279-the-tabletop-nobody-enjoys-may-become-the-incident-everyone-survives.png Professor Kai London — Cyber Security Principle 279: The tabletop nobody enjoys may become the incident everyone survives. The tabletop nobody enjoys may become the incident everyone survives. — Professor Kai London, CISO. Principle 279 of 300 on Preparedness. https://professorkailondon.com/principles/set2/principle-280.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-280-clarity-under-pressure-is-built-before-pressure-arrives.png Professor Kai London — Cyber Security Principle 280: Clarity under pressure is built before pressure arrives. Clarity under pressure is built before pressure arrives. — Professor Kai London, CISO. Principle 280 of 300 on Crisis Leadership. https://professorkailondon.com/principles/set2/principle-281.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-281-hire-for-judgement-tools-can-be-taught-but-integrity-cannot-be-patched.png Professor Kai London — Cyber Security Principle 281: Hire for judgement; tools can be taught, but integrity cannot be patch Hire for judgement; tools can be taught, but integrity cannot be patched. — Professor Kai London, CISO. Principle 281 of 300 on Talent. https://professorkailondon.com/principles/set2/principle-282.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-282-every-security-decision-is-a-trust-decision-wearing-technical-clothing.png Professor Kai London — Cyber Security Principle 282: Every security decision is a trust decision wearing technical clothing Every security decision is a trust decision wearing technical clothing. — Professor Kai London, CISO. Principle 282 of 300 on Leadership. https://professorkailondon.com/principles/set2/principle-283.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-283-programme-maturity-is-measured-by-how-quietly-it-handles-a-bad-day.png Professor Kai London — Cyber Security Principle 283: Programme maturity is measured by how quietly it handles a bad day. Programme maturity is measured by how quietly it handles a bad day. — Professor Kai London, CISO. Principle 283 of 300 on Maturity. https://professorkailondon.com/principles/set2/principle-284.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-284-culture-improves-when-security-explains-the-why-not-just-the-rule.png Professor Kai London — Cyber Security Principle 284: Culture improves when security explains the why, not just the rule. Culture improves when security explains the why, not just the rule. — Professor Kai London, CISO. Principle 284 of 300 on Culture. https://professorkailondon.com/principles/set2/principle-285.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-285-the-best-leaders-make-complex-risk-feel-manageable-without-making-it-s.png Professor Kai London — Cyber Security Principle 285: The best leaders make complex risk feel manageable without making it s The best leaders make complex risk feel manageable without making it seem small. — Professor Kai London, CISO. Principle 285 of 300 on Leadership. https://professorkailondon.com/principles/set2/principle-286.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-286-psychological-safety-is-an-incident-response-control.png Professor Kai London — Cyber Security Principle 286: Psychological safety is an incident-response control. Psychological safety is an incident-response control. — Professor Kai London, CISO. Principle 286 of 300 on Culture / IR. https://professorkailondon.com/principles/set2/principle-287.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-287-security-adoption-rises-when-people-see-protection-as-help-not-obstruc.png Professor Kai London — Cyber Security Principle 287: Security adoption rises when people see protection as help, not obstru Security adoption rises when people see protection as help, not obstruction. — Professor Kai London, CISO. Principle 287 of 300 on Security Culture. https://professorkailondon.com/principles/set2/principle-288.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-288-a-resilient-organisation-learns-faster-than-the-threat-adapts.png Professor Kai London — Cyber Security Principle 288: A resilient organisation learns faster than the threat adapts. A resilient organisation learns faster than the threat adapts. — Professor Kai London, CISO. Principle 288 of 300 on Resilience. https://professorkailondon.com/principles/set2/principle-289.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-289-leadership-is-the-ability-to-create-order-without-pretending-certainty.png Professor Kai London — Cyber Security Principle 289: Leadership is the ability to create order without pretending certainty Leadership is the ability to create order without pretending certainty exists. — Professor Kai London, CISO. Principle 289 of 300 on Executive Leadership. https://professorkailondon.com/principles/set2/principle-290.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-290-trust-compounds-when-competence-restraint-and-delivery-repeat.png Professor Kai London — Cyber Security Principle 290: Trust compounds when competence, restraint and delivery repeat. Trust compounds when competence, restraint and delivery repeat. — Professor Kai London, CISO. Principle 290 of 300 on Reputation. https://professorkailondon.com/principles/set2/principle-291.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-291-contract-value-increases-when-every-recommendation-is-practical-eviden.png Professor Kai London — Cyber Security Principle 291: Contract value increases when every recommendation is practical, evide Contract value increases when every recommendation is practical, evidenced and owned. — Professor Kai London, CISO. Principle 291 of 300 on Consulting Delivery. https://professorkailondon.com/principles/set2/principle-292.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-292-a-first-deliverable-should-create-confidence-not-dependency.png Professor Kai London — Cyber Security Principle 292: A first deliverable should create confidence, not dependency. A first deliverable should create confidence, not dependency. — Professor Kai London, CISO. Principle 292 of 300 on Advisory. https://professorkailondon.com/principles/set2/principle-293.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-293-the-client-remembers-the-consultant-who-made-the-problem-smaller.png Professor Kai London — Cyber Security Principle 293: The client remembers the consultant who made the problem smaller. The client remembers the consultant who made the problem smaller. — Professor Kai London, CISO. Principle 293 of 300 on Consulting. https://professorkailondon.com/principles/set2/principle-294.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-294-winning-work-starts-with-being-clear-to-understand-and-easy-to-trust.png Professor Kai London — Cyber Security Principle 294: Winning work starts with being clear to understand and easy to trust. Winning work starts with being clear to understand and easy to trust. — Professor Kai London, CISO. Principle 294 of 300 on Contract Readiness. https://professorkailondon.com/principles/set2/principle-295.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-295-the-sharper-the-positioning-the-easier-it-is-to-be-remembered.png Professor Kai London — Cyber Security Principle 295: The sharper the positioning, the easier it is to be remembered. The sharper the positioning, the easier it is to be remembered. — Professor Kai London, CISO. Principle 295 of 300 on Brand Positioning. https://professorkailondon.com/principles/set2/principle-296.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-296-useful-authority-is-built-by-proving-value-before-asking-for-attention.png Professor Kai London — Cyber Security Principle 296: Useful authority is built by proving value before asking for attention Useful authority is built by proving value before asking for attention. — Professor Kai London, CISO. Principle 296 of 300 on Thought Leadership. https://professorkailondon.com/principles/set2/principle-297.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-297-the-strongest-profile-combines-cyber-depth-ai-governance-ot-awareness-.png Professor Kai London — Cyber Security Principle 297: The strongest profile combines cyber depth, AI governance, OT awarenes The strongest profile combines cyber depth, AI governance, OT awareness and delivery proof. — Professor Kai London, CISO. Principle 297 of 300 on Personal Brand. https://professorkailondon.com/principles/set2/principle-298.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-298-professor-kai-london-stands-for-security-that-is-intelligent-practical.png Professor Kai London — Cyber Security Principle 298: Professor Kai London stands for security that is intelligent, practica Professor Kai London stands for security that is intelligent, practical and defensible. — Professor Kai London, CISO. Principle 298 of 300 on Brand Positioning. https://professorkailondon.com/principles/set2/principle-299.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-299-protect-trust-enable-resilience-and-deliver-value-with-evidence.png Professor Kai London — Cyber Security Principle 299: Protect trust, enable resilience and deliver value with evidence. Protect trust, enable resilience and deliver value with evidence. — Professor Kai London, CISO. Principle 299 of 300 on Signature Doctrine. https://professorkailondon.com/principles/set2/principle-300.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-300-trust-under-pressure-is-the-modern-measure-of-cyber-leadership.png Professor Kai London — Cyber Security Principle 300: Trust under pressure is the modern measure of cyber leadership. Trust under pressure is the modern measure of cyber leadership. — Professor Kai London, CISO. Principle 300 of 300 on Executive Doctrine. https://professorkailondon.com/principles/set2/principle-020.html https://professorkailondon.com/principles/set2/cards/professor-kai-london-cyber-security-principle-set2-020-security-maturity-is-not-what-is-written-it-is-what-can-be-demonstrate.png Professor Kai London — Cyber Security Principle 020: Security maturity is not what is written; it is what can be demonstrat Security maturity is not what is written; it is what can be demonstrated. — Professor Kai London, CISO. Principle 20 of 300 on Assurance.