Technology Risk Briefing

🔐 Identity Security: The Most Important Control You're Probably Not Managing Well EnoughIdentity has become the new security perimeter.In today's cloud-first, AI-enabled world, attackers increasingly don't need to break into organisations—they simply log in. As traditional network boundaries disappear, identity has become the foundation of security, operational resilience and trust.In this episode of the Technology Risk Podcast, David Horn takes a deep dive into the growing challenges surrounding Identity Security and why it has become one of the most important technology risk topics facing organisations today.Topics covered include:✅ Why attackers are increasingly targeting identities rather than vulnerabilities✅ The risks associated with privilege creep and excessive access✅ Privileged Access Management and why administrator accounts remain prime targets✅ Machine identities, service accounts and APIs – the hidden risks many organisations overlook✅ Third-party access and supplier-related identity risks✅ The emergence of AI agents and non-human identities✅ Why identity resilience is becoming a board-level concern✅ Practical warning signs organisations should look for and actions they can take to strengthen controlsWhether you're a technology leader, CISO, CIO, auditor, risk professional or board member, this episode provides practical insights into one of the most critical control areas in modern organisations.Presented by David HornSponsored by CauTix – Technology Risk and Control🎧 Key risks. Real insights. Practical actions you can take.#IdentitySecurity #CyberSecurity #TechnologyRisk #IAM #PAM #OperationalResilience #RiskManagement #TechnologyLeadership #AIGovernance #InformationSecurity #TechnologyControls #CauTix #TechnologyRiskPodcast

Artificial Intelligence is rapidly transforming enterprise operations, but the risk landscape is evolving just as quickly.This week's Technology Risk Weekly Briefing examines the emergence of AI agents as a significant governance and security challenge, major software supply-chain attacks impacting developers and cloud ecosystems, accelerating vulnerability exploitation driven by AI, and the growing importance of identity resilience as a core operational capability.Topics covered include:AI agents and enterprise governance risksAI-driven vulnerability exploitationMicrosoft-related supply chain compromisesIdentity resilience and cyber recoveryCloud and software ecosystem risksOperational resilience lessons for technology leadersSponsored by CAUTIX — helping organisations strengthen technology risk management, operational resilience, and digital trust.

This week’s Technology Risk Weekly Briefing explores several developments that highlight how rapidly the technology risk landscape is evolving.We examine the emergence of AI agents as a new cyber attack vector, major software supply chain compromises affecting enterprise development environments, critical vulnerabilities impacting widely used software, and the increasing focus on securing open-source ecosystems.The episode also explores what these developments mean for technology leaders, risk professionals, CISOs, and boards responsible for operational resilience and digital trust.Topics covered:AI agents and emerging cyber security risksSoftware supply chain attacks targeting CI/CD environmentsCritical vulnerabilities affecting enterprise softwareOpen-source security and dependency managementPractical resilience and control improvementsSponsored by CauTix — helping organisations strengthen secure and resilient digital operations through effective technology risk and control frameworks.

Artificial Intelligence is rapidly becoming embedded within core business operations, transforming everything from customer engagement and software development to analytics, decision-making and operational efficiency.But as adoption accelerates, many organisations are discovering that governance frameworks are struggling to keep pace.In this special deep-dive episode of the Technology Risk Podcast, David Horn explores why AI Governance has become one of the most critical technology risk challenges facing organisations today.The episode examines:What AI Governance actually is and why it mattersThe key challenges organisations face when implementing effective oversightThe risks of poor governance, including operational, regulatory, security and reputational impactsThe growing importance of accountability, transparency and controlPractical steps organisations can take to establish robust AI governance frameworksHow boards, executives and technology leaders can balance innovation with responsible risk managementWhether your organisation is just beginning its AI journey or already deploying AI at scale, this episode provides practical insights to help ensure AI remains secure, resilient, compliant and trusted.Presented by David HornSponsored by CauTix – Technology Risk and ControlHelping organisations design, assess and strengthen the frameworks that underpin secure and reliable digital operations.#AIGovernance #ArtificialIntelligence #TechnologyRisk #CyberSecurity #OperationalResilience #RiskManagement #Governance #DigitalTransformation #TechnologyControls #ResponsibleAI

AI recording devices are rapidly entering the workplace — from dedicated tools like Plaud Note and Pocket to smartphone apps, earbuds, and smartwatches capable of recording, transcribing, and summarising conversations in real time.But what happens when confidential meetings, customer discussions, HR conversations, or strategic plans are uploaded to external AI platforms outside corporate control?In this episode, CAUTIX explores the emerging security, privacy, legal, and governance risks created by AI-powered recording technology. We discuss:Shadow AI and uncontrolled data captureCloud processing and third-party AI providersPrivacy laws and consent requirementsRisks around retention, searchability, and data leakageThe impact on trust, culture, and compliancePractical steps organisations can take to reduce exposureAs AI transforms productivity, companies must decide where convenience ends — and where security begins.Because in the age of ambient AI, every conversation can become a dataset.

In this week’s Technology Risk Weekly Briefing, David Horn examines the latest developments reshaping the technology risk landscape, including increasing regulatory pressure on AI governance, rising identity and cloud access attacks, emerging open-source software supply chain vulnerabilities, and growing concerns around operational resilience and third-party technology dependencies.The episode explores:AI governance and model risk oversightCloud identity and privileged access exposureOpen-source software supply chain vulnerabilitiesThird-party ecosystem dependency riskPractical resilience and control improvements organisations should implement nowSponsored by CauTix — helping organisations strengthen secure and resilient digital operations through effective technology risk and control frameworks.

In this week’s Technology Risk Weekly Briefing, David Horn explores the rapidly evolving technology risk landscape, including IMF warnings about AI-enabled cyber attacks, the continued surge in identity-based breaches, growing concentration risks in cloud and AI infrastructure, and lessons organisations must learn about operational resilience and third-party dependency management.The episode covers:AI-enabled cyber threats and systemic financial stability concernsThe rise in password and identity attacksCloud and infrastructure concentration riskThird-party ecosystem vulnerabilitiesPractical resilience and control measures organisations should implement nowSponsored by CauTix — helping organisations strengthen secure and reliable digital operations.

This week, David Horn reviews the technology risk stories that matter: AI-driven vulnerability pressure, the emerging patch wave, physical disruption to cloud regions in the Middle East, developer supply-chain compromise, utility-sector third-party risk, and community concerns about whether cyber defence can keep pace. The episode translates the headlines into practical actions for technology, risk, security, resilience and audit teams.