Supply chain security lessons for AI integrations
The Miasma attack on Red Hat's npm packages highlights supply chain risks and credential theft, which are critical for AI integration security.
Anton Marrero 6 min read
CONTROLLED FINANCE
Information Security
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
Choose a topic
61 publications
Anton Marrero 6 min read
AI security platform: protecting AI services from prompt injection and data leaks
Protecting AI services from prompt injection and data leaks in 2026 requires a comprehensive approach and integration with existing cybersecurity tools.
Mykhailo Vyhovsky 7 min read
AI drives compliance audit automation
AI-driven compliance is transforming ISO/IEC 27001 and SOC 2 audits by automating evidence collection and non-compliance detection.
Mykhailo Vyhovsky 3 min read
Zero Trust for legacy systems: migration or adaptation?
Implementing the Zero Trust model for legacy systems presents a critical challenge, requiring in-depth analysis of architecture and business processes. The key question remains the choice between full migration and adapting existing solutions.
Mykhailo Vyhovsky 4 min read
DLP for AI Systems: The New Cybersecurity Reality of 2026
By 2026, over 70% of new AI systems will experience data breaches due to inadequate Data Loss Prevention (DLP) integration, necessitating a reevaluation of sensitive information protection in the age of artificial intelligence.
Yuriy Syvytsky 4 min read
Zero Trust for legacy systems: adaptation or full replacement by 2026?
Amidst growing cyber threats and tightening regulatory requirements, the Zero Trust concept is becoming critically important for corporate data protection. This issue is particularly acute for legacy systems, which form the foundation of many organizations.
Yuriy Syvytsky 4 min read
Securing data during employee offboarding by 2026
According to analytical reports, by 2026, up to 70% of corporate data breaches will be linked to insufficiently effective employee offboarding processes. This highlights the critical need to review and strengthen access management policies after termination.
Serhiy Balashuk 4 min read
DLP strategies for corporate content protection in distributed work
The rise of hybrid and remote work models significantly complicates the task of protecting corporate content. By 2026, effective DLP strategies must adapt to these changes, focusing on preventative measures and automation.
Anton Marrero 3 min read
AI-powered offboarding: defending against insider threats in 2026
Approximately 60% of corporate data breaches in 2025 were recorded after an employee's termination, while their access formally remained active. Insider threats continue to be one of the most complex cybersecurity challenges.
Serhiy Balashuk 5 min read
NIS2 and Cybersecurity: What the New EU Directive Means for IT Contractors
The NIS2 Directive introduces new cybersecurity requirements for companies operating in the EU market, presenting specific obligations and opportunities for Ukrainian IT contractors.
Anton Marrero 1 min read