Insights
Writing on governance and delivery
Essays on how technology change is governed, built and evidenced. Each one is adapted from our director's writing.
Governance as code
Most governance lives in documents that no system reads. When policy is written as code, the system enforces classification, retention, lineage and access itself. Agentic AI makes that change necessary.
Agentic development governance
An AI agent that writes code needs the same controls as any other change to a system. We govern agent-written code with deny-by-default guardrails, an append-only audit trail and security evaluations before merge.
From security control to vendor decision
A security framework helps only when the people who approve the spend can act on it. We turn controls into testable requirements, evaluation criteria and a decision that a senior leader can sign.