Health care is putting AI agents into production faster than it can govern them. Most of the conversation about AI agent incident response stops at the front door: who gets access, with what credentials, for how long. That work matters. It is also the easy half. The harder question is what your organization does after …
The Response Window Just Collapsed. Your Crisis Plan Still Assumes Days.
Anthropic published its September 2026 threat intelligence report last month. It documents eight months of AI misuse the company detected and shut down on its own platform. Most of the coverage, including CyberScoop’s, focused on the headline: lone operators now run campaigns that used to require a state intelligence service. That is true. It is …
The Response Window Just Collapsed. Your Crisis Plan Still Assumes Days.Read More
The AI Labs Just Warned You About AI-Enabled Cyber Attacks. Here Is What They Left Out.
Last week, OpenAI and Anthropic signed the same letter. So did Microsoft, Google, AWS, CrowdStrike, Palo Alto Networks, Mastercard, Visa, AT&T, and more than a hundred other organizations. The letter, A Call for Collective Action on Cyber Defense, says AI-enabled cyber attacks “will become far more widespread and sophisticated” in the coming months, and that …
The AI Labs Just Warned You About AI-Enabled Cyber Attacks. Here Is What They Left Out.Read More
Your Crisis Decision History Is a Single Point of Failure
Hour three of a ransomware response. Someone on the call says what someone always says. “Didn’t we work through this in the spring?” They did. There was a tabletop in April that ran this exact scenario. The team reached a decision on the payment question, wrote down the criteria, and named who owned the call. …
Your Crisis Decision History Is a Single Point of FailureRead More
Crisis Leadership When the Playbook Fails: Dutch Leonard’s Framework, Six Years Later
In March 2020, days into the first COVID-19 lockdowns, Harvard Business School put Professor Dutch Leonard on its Managing Through Crisis webcast to answer the question every executive was suddenly asking: how do you lead when nobody knows what to do? I recently went back and rewatched that conversation. Six years on, it is the …
Crisis Leadership When the Playbook Fails: Dutch Leonard’s Framework, Six Years LaterRead More
Geopolitical Scenario Planning Is the Easy Part. Exercises Are Where Leaders Break.
A McKinsey survey published this month found something I see in nearly every engagement: organizations will happily study the future, but they will not put their leaders inside it. The numbers are blunt. Fewer than a third of the executives McKinsey surveyed call their geopolitical risk management “mature.” A majority, 53 percent, say scenario planning …
Geopolitical Scenario Planning Is the Easy Part. Exercises Are Where Leaders Break.Read More
The Cyber Threat Landscape Has Shifted Under You
The cyberattack your organization planned for in 2024 is not the cyberattack you will face in 2026. That is not hyperbole. It is what the data shows, and it is what we see in the resilience and crisis work we do with clients across financial services, healthcare, technology, and critical infrastructure. The change is not …
The Practice Plan: Why Intention and Evaluation Matter in Crisis Management Exercises
Coach Liam stood at the edge of the practice field, watching his group of young players run through their warm-ups. The energy and enthusiasm were there, but something was missing. Week after week, he had been running practices, letting the kids scrimmage, giving them a few pointers, and hoping they’d improve through experience. But game …
The Practice Plan: Why Intention and Evaluation Matter in Crisis Management ExercisesRead More