Why good employees break AI rules
Why employees use unapproved AI tools, what shadow AI reveals about how people work and why effective AI governance needs visibility as well as policy.
Insights Tagged: AI risk
Why AI is becoming harder to budget for
Why AI is becoming harder to budget for and why better visibility of AI tools, usage and costs is essential for managing spend and wider risk.
AI agents are finding ways around their controls. How do you test yours?
As AI agents are given more access and autonomy, testing needs to go beyond whether they follow instructions. Katie Barnett looks at recent incidents involving OpenAI and other AI agents, and what they tell us about permissions, controls and testing what an agent is actually capable of doing.
Openai Hugging face what happened and what does it mean for UK cisos
Katie Barnett, Toro’s Director of Cyber Security, was quoted in SC Media UK following incidents involving AI models from OpenAI and Anthropic during security testing. The article looks beyond the “rogue AI” headlines to examine what the incidents mean for CISOs, including agent permissions, sandboxing, monitoring and the need for greater visibility over how AI agents are being used.
Mythos – What it means and what to do about it
Anthropic’s Mythos highlights a shift in cybersecurity: AI can now find and exploit vulnerabilities at scale. Explore what this means for risk, remediation, and securing AI systems.