AI Governance and Cyber Risk Insights

AI Governance

November 12, 2026

Extending a Cyber Risk Quantification Program to AI

Most of a CRQ program transfers to AI exposure. Three parts do not, and those three decide how the extension is built.

AI Governance

November 11, 2026

How to Evaluate a Shadow AI Detection Tool in a Trial

A detection tool reports what it found. Scoring a trial means establishing what it should have found first.

AI Governance

November 10, 2026

AI Vendor Questions, and How to Check the Answers

The questions are not the hard part. Verifying answers that arrive as a yes, and catching the failure no AI question asks about, is.

AI Governance

November 9, 2026

Where Kovrr Fits Across the Four AI TRiSM Layers

A mapping of Kovrr's capabilities against the four AI TRiSM layers, including what sits outside the platform.

Cyber Risk Quantification

November 8, 2026

Are Proprietary Cyber Risk Quantification Models Black Boxes?

Whether a model is proprietary describes who owns it. Whether its figures can be traced to the events behind them is a different question.

AI Governance

November 6, 2026

Apple's 10-K Describes Agent Risk Without a Number

Apple described how AI agents fail in operational detail and attached no figure to any of it, which is what a risk factor does.

Cyber Risk Quantification

November 3, 2026

How Kovrr's Cyber Risk Quantification Model Works

The framework a platform names and the evidence it can produce are different questions, and only one of them is checkable.

Cyber Risk Quantification

November 2, 2026

Kovrr’s Event Catalog Brings Unmatched Transparency to the Dashboard

The Event Catalog puts every simulated event in the platform, with each headline metric traced back to the rows, offering full transparency.

AI Governance

November 1, 2026

The CIO Answers for AI They Never Approved

Authority over AI dispersed across the business. Answerability stayed with the CIO, which is a structural position rather than a failure.

Agentic AI

October 29, 2026

The Best Identity Security Vendors for AI Agents

Every vendor claims agent identity. What separates them is what happens when the builder leaves.

AI Asset Visibility

October 29, 2026

How to Identify and Track AI Use Across Business Units

Learn more about the methods that global enterprises are using to discover and monitor AI across every business unit.

AI Security

October 28, 2026

AI Supply Chain Attacks Come Through the Plumbing

LiteLLM was compromised twice in 2026, and neither attack touched a model.

Cyber Risk Quantification

October 28, 2026

Building Cyber Risk Quantification In-House vs. Buying a Platform

The model is the cheap part. Loss data, maintenance and defensibility decide the build question.

AI Security

October 27, 2026

Why AI Text Detectors Fail and What to Use Instead

Detectors flag second-language writers and miss deliberate use. Usage records answer what prose cannot.

Cyber GRC

October 26, 2026

Cyber Risk Quantification Integrations With GRC Platforms

Control status flows in and quantified exposure flows back. Most builds only do the first.

Cyber Risk Quantification

October 26, 2026

What Happens When a Cyber Risk Number Meets a Skeptic

Boards have stopped asking whether cyber risk belongs in dollars. They now ask how each figure was derived.

AI Governance

October 26, 2026

Meeting the NIST AI RMF Measure Function With Monitoring Evidence

Measure's 22 subcategories divide by evidence type, and monitoring answers roughly a quarter.

Cyber Risk Quantification

October 25, 2026

Kovrr vs. SAFE Security

Both express risk in currency, and the differences sit in the loss data and the time to a figure.

AI Governance

October 25, 2026

Governing Microsoft 365 Copilot in the Enterprise

Copilot reveals the permission state rather than changing it, which makes this permissions work.

AI Governance

October 24, 2026

The Best AI Vendor Risk Management Tools in 2026

Conventional tooling asks whether a supplier leaks. AI vendor risk asks what they do with your data.

Cyber Risk Quantification

October 22, 2026

Cyber Risk Quantification (CRQ) Vendor Evaluation Checklist

The best questions to ask a CRQ vendor about model data, defensibility, reporting, staffing, and what it costs to run.

Cyber GRC

October 21, 2026

Cyber Risk Register vs. Vulnerability Register

One holds findings in the thousands, the other scenarios in the tens, joined by control coverage.

AI Governance

October 21, 2026

The Best AI Governance Platforms for Financial Services in 2026

Three obligations already bind a bank running AI, and the high-risk regime is not one of them yet.

Agentic AI

October 20, 2026

What an AI Agent Registry Should Record

Seven fields carry an agent registry, and which kind each one is decides whether it drifts.

Cyber Risk Quantification

October 19, 2026

Top-Down vs Bottom-Up Cyber Risk Quantification

The two approaches diverge predictably, which makes the distance between them informative.

AI Security

October 19, 2026

How to Monitor What Data Employees Share With AI Tools

Four categories announce themselves differently, so content detects three of them and origin detects the fourth.

Agentic AI

October 18, 2026

The Best AI Agent Risk Quantification Tools in 2026

Most tools produce a rating. The separating test is whether the output arrives in currency.

Cyber Risk Quantification

October 16, 2026

Cybersecurity Budget Planning for 2027

One ratio per control orders the whole list and identifies where spending stops paying.

Agentic AI

October 15, 2026

Governing AI Coding Agents on Developer Laptops

A coding agent runs as the developer, so identity-keyed controls treat the two as one actor.

AI Security

October 15, 2026

Mapping AI Interaction Monitoring to the OWASP Top 10 for LLMs

Monitoring covers four risks well, three partially and three not at all, split along construction and use.

Blog

Extending a Cyber Risk Quantification Program to AI

How to Evaluate a Shadow AI Detection Tool in a Trial

AI Vendor Questions, and How to Check the Answers

Where Kovrr Fits Across the Four AI TRiSM Layers

Are Proprietary Cyber Risk Quantification Models Black Boxes?

Apple's 10-K Describes Agent Risk Without a Number

How Kovrr's Cyber Risk Quantification Model Works

Kovrr’s Event Catalog Brings Unmatched Transparency to the Dashboard

The CIO Answers for AI They Never Approved

The Best Identity Security Vendors for AI Agents

How to Identify and Track AI Use Across Business Units

AI Supply Chain Attacks Come Through the Plumbing

Building Cyber Risk Quantification In-House vs. Buying a Platform

Why AI Text Detectors Fail and What to Use Instead

Cyber Risk Quantification Integrations With GRC Platforms

What Happens When a Cyber Risk Number Meets a Skeptic

Meeting the NIST AI RMF Measure Function With Monitoring Evidence

Kovrr vs. SAFE Security

Governing Microsoft 365 Copilot in the Enterprise

The Best AI Vendor Risk Management Tools in 2026

Cyber Risk Quantification (CRQ) Vendor Evaluation Checklist

Cyber Risk Register vs. Vulnerability Register

The Best AI Governance Platforms for Financial Services in 2026

What an AI Agent Registry Should Record

Top-Down vs Bottom-Up Cyber Risk Quantification

How to Monitor What Data Employees Share With AI Tools

The Best AI Agent Risk Quantification Tools in 2026

Cybersecurity Budget Planning for 2027

Governing AI Coding Agents on Developer Laptops

Mapping AI Interaction Monitoring to the OWASP Top 10 for LLMs