AI

The AI KPI We May Be Missing: Sustainable Productivity

AI is making us faster, more capable, and more creative across almost every field. In cybersecurity, sales, finance, marketing, engineering, operations, and HR, employees can now build dashboards, automate workflows, improve analysis, generate presentations, and turn ideas into working solutions with remarkable speed. But, are we using AI to achieve more within the working day, or are we simply raising the volume of work until every available hour is full again?

Sep 18, 2026

Blocked agent > Open Consequences

Blocking an AI agent contains the immediate threat. It does not complete the response. Once an alert is confirmed and the agent or affected instance is blocked, the security team needs to answer a harder question: what did the agent do before we stopped it?

Sep 16, 2026

• Agent 365
• Defender XDR
• Entra
• Purview

Who is your agent acting as? A Closer Look at Entra Conditional Access Policy

Your "All users" policy does not cover every account an AI agent can use. That matters when the agent has its own mailbox and access to business data. A policy name that sounds comprehensive can hide a gap in who it actually covers. Microsoft Entra Conditional Access follows the identity requesting access.

Sep 10, 2026

• Entra

BYO MCP servers under centralized governance and observability

The riskiest part of an MCP integration is not the connection. It is the authority that crosses it! An approval should describe authority, not only connectivity. The effective authority of an MCP integration is created by six things.

Aug 10, 2026

• Agent 365
• MCP

Agent Incident Investigation <> Governance Accountabilities

Identity provides traceability. Governance provides answers. An agent can have a valid security principal and still lack a complete governance record.

Aug 06, 2026

• Agent 365
• Copilot
• Defender XDR
• Sentinel

Agent Security Incident Decision Topology

An agent incident can involve nine teams and still leave one critical question unanswered: "Who is allowed to decide what happens next?" The problem is not always missing technology. It is often that actors, products, evidence, actions, and decisions are drawn as if they mean the same thing.

Aug 04, 2026

• Agent 365
• Defender XDR
• Purview
• Sentinel

Production Agent Technical Control Stack

"Does the agent work?" - Most agent governance problems begin with this wrong production question! While a successful demo answers that question, a production approval has to answer a different one: "Can this agent operate with bounded authority, observable behavior, and a clear human decision owner?"

Jul 21, 2026

• Agent 365
• Defender XDR
• Purview
• Sentinel

Agent governance needs clearer language

Be careful with some of the shorthand we use. When we say organizations need visibility, permissions, and traceability for agents, that can easily sound as if no controls exist today. That is not accurate, and any average security team will challenge it immediately.

Jun 25, 2026

• Agent 365

CTOs and CISOs: Test Your Agent Governance Model

CTOs, CISOs, and AI leaders: try this with your teams. Pick the different agent examples shown in the visual and ask one question: Would we govern, secure, and control each of these the same way

May 27, 2026

• Agent 365

The Agent Estate Is Here. Can You See It, Govern It, and Secure It?

As organizations move from isolated AI experiments to a mixed agent ecosystem, the hard part is no longer only creating agents. The hard part is seeing them clearly, understanding where they came from, knowing who is accountable, controlling what they can reach, and connecting their activity to security and compliance signals.

May 25, 2026

• Agent 365