Long-form notes from AI security review.
What AI Committees ask for, what regulators read, and what is missing from most threat models. Written for security architects, AI governance leads, and DPOs.
New posts in your inbox,
when they publish.
Threat modeling, governance evidence, and what AI Committees actually need — written for security architects and AI governance leads. No cadence promises.
Assessing third-party AI vendors — the questions procurement skips
Third-party AI vendor assessments typically cover data processing agreements and SOC 2. They miss model governance, incident notification for model updates, and the evidence required to re-assess when the vendor changes the underlying model.
A worked example: AI Risk Disposition for a Copilot Studio procurement agent
Every section of the disposition filled in with real content — decision, rationale, required controls, residual risk acceptance, evidence gaps, re-assessment triggers, and sign-off log. The same system used in the Drel demo dossier.
Threat modeling an MCP server — the parts AppSec tools miss
MCP servers have four distinct attack surfaces: transport, tool surface, prompt context injection, and auth boundary. Traditional threat modeling tools model the first and miss the other three. Here is the full threat model with controls.
EU AI Act Article 9 risk management — what evidence is required
Article 9 of the EU AI Act requires a risk management system for high-risk AI. This piece translates each of its six requirements into specific evidence artefacts — what an auditor will ask for, and the gaps that appear most often when organisations try to produce it.
OWASP Agentic Top 10 mapped to required controls
The OWASP Agentic Top 10 names the threats. This piece maps each one to the controls that close it, the lifecycle gate where each control must be in place, and the evidence required to verify it — so your AI Committee has a working checklist, not just a threat list.
What an AI Risk Disposition actually contains
AI Committees keep approving systems they can't defend later. The Risk Disposition memo is the artifact that fixes this — here is what goes into one, section by section, with examples from a real assessed system.
Free resources
Practical templates for every framework covered here.
AI Security Review Template
Full review pack with threat model, controls, and evidence grading.
OWASP Agentic Top 10 Controls
Each risk mapped to required controls and lifecycle gates.
AI Risk Disposition Memo
Clearance decision template with rationale and sign-off log.
AI Go-Live Security Checklist
Production gate checklist for security architects and CISOs.