“In a regulated enterprise, an assurance artefact means nothing until a comforting metric confirms it under pressure; govern it or inherit its consequences.”
In a regulated enterprise, an assurance artefact means nothing until a comforting metric confirms it under pressure; govern it or inherit its consequences. — Kai London (Professor Kai London), CISO. Principle 9989 of 10000 from the book “Trustquake” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk