Top 10 Leadership and Management links of the week, curated by Corix Partners Founder and CEO JC Gaillard, focusing on cyber security of course, but also a large cross section of subjects including digital transformation, emerging tech, AI governance and the future of work.

This Week >> The biggest risk in cybersecurity and AI isn’t a lack of technology. It’s the widening gap between executive accountability and operational reality.

- Cyber resilience must become a business operating model, not an IT recovery plan
- Boards and CEOs remain divided on cyber risk and AI governance
- CISO accountability means little without authority and effective execution
- Vulnerability backlogs expose persistent remediation weaknesses
- Uncontrolled AI spending is raising questions about financial discipline and measurable returns
- AI investment must be matched by verification and meaningful assurance
- Human oversight is no substitute for properly designed governance

The common thread? Organizations are moving faster with technology than they are evolving the management structures around it. Genuine resilience and sustainable AI value will come from closing the gap between strategy, accountability and execution — not from adding another layer of tools, policies or spending.

 

Cyber Resilience Is A Business Operating Model, Not An IT Recovery Plan

Genuine cyber resilience requires organizations to integrate crisis decision-making, business continuity, operational dependencies and executive accountability into their everyday operating model, rather than treating resilience as a technical recovery exercise.

https://www.forbes.com/councils/forbestechcouncil/2026/11/04/cyber-resilience-is-a-business-operating-model-not-an-it-recovery-plan/

 

UK boards & CEOs split on cyber risk & AI governance

Differences between boards and CEOs over cyber risk and AI governance highlight a persistent leadership alignment problem that can undermine clear accountability, strategic priorities and effective oversight.

https://itbrief.co.uk/story/uk-boards-ceos-split-on-cyber-risk-ai-governance

 

CISO Accountability Needs an Operating Model, Not a Liability Shield

Holding CISOs personally accountable for cybersecurity outcomes is ineffective unless organizations establish clear decision rights, executive ownership and governance structures that give security leaders the authority to deliver results.

https://www.infosecurity-magazine.com/opinions/ciso-accountability-operating-model/

 

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed

The growing tendency to close or defer unverified vulnerability findings exposes the limitations of detection-driven security programs and the need for stronger validation, remediation ownership and auditable risk decisions.

https://www.helpnetsecurity.com/2026/11/11/security-teams-vulnerability-backlog/

 

Enterprises pay $100,000 a day for AI they never ordered

Uncontrolled AI consumption and poorly governed purchasing arrangements are creating substantial hidden enterprise costs, exposing weaknesses in financial oversight, technology procurement and accountability for AI spending.

https://www.csoonline.com/article/4243863/enterprises-pay-100000-a-day-for-ai-they-never-ordered.html

 

AI economics: How to decide which AI investments are worth scaling

Organizations must manage AI investments as a business-value portfolio, assessing their total cost against measurable outcomes to determine which initiatives deserve further investment, optimization or termination.

https://venturebeat.com/ai/ai-economics-how-to-decide-which-ai-investments-are-worth-scaling

 

The Missing Architecture for Agentic Software Development

Realizing the potential of agentic software development requires an integrated architecture that coordinates autonomous agents, development workflows, enterprise context and governance, rather than simply introducing AI coding assistants into existing processes.

https://www.bain.com/insights/the-missing-architecture-for-agentic-software-development-technology-report-2026/

 

The AI boom’s missing balance-sheet question: What has actually been verified?

The rapid expansion of AI infrastructure investment is exposing a dangerous gap between financial commitments and verified economic value, requiring investors to distinguish contracted demand from deliverable capacity, actual utilization and sustainable returns.

https://siliconangle.com/2026/11/06/the-ai-booms-missing-balance-sheet-question-what-has-actually-been-verified/

 

Why “Human-in-the-Loop” Is the Flimsiest Leaf in Enterprise AI

Human oversight becomes little more than a governance formality when individuals lack the information, authority and ability to challenge or override automated decisions, making enforceable decision rights and operational controls essential.

https://www.cdomagazine.tech/ai-governance/the-emperors-new-loop-why-human-in-the-loop-is-the-flimsiest-leaf-in-enterprise-ai

 

Turning executive judgment into organizational intelligence: Leveraging AI in CEO leadership

AI offers CEOs an opportunity to capture and share their decision-making principles, experience and strategic judgment across the organization, transforming individual leadership expertise into a scalable capability for organizational learning and better decisions.

https://www.mckinsey.com/capabilities/strategy-and-corporate-finance/our-insights/turning-executive-judgment-into-organizational-intelligence-leveraging-ai-in-ceo-leadership

 

Corix Partners is a Boutique Management Consultancy Firm and Thought-Leadership Platform, focused on assisting CIOs and other C-level executives in resolving Cyber Security Strategy, Organisation & Governance challenges.

Our Founder and CEO JC Gaillard is is a leading strategic advisor and a globally-recognised cybersecurity thought-leader with over 25 years of experience developed in several financial institutions in the UK and continental Europe, and a track-record at driving fundamental change in the security field across global organisations, looking beyond the technical horizon into strategy, governance, culture, and the real dynamics of business transformation.

He is the author of:

• “Cyber Security: The Lost Decade – A Security Governance Handbook for the CISO and the CIO” first published in September 2017 with updated annual editions released every year up to 2021;
• “The CyberSecurity Leadership Handbook for the CISO and the CEO” first released on Amazon in February 2023 (updated edition released in July 2024);
• “The Cybersecurity Spiral of Failure” released on Amazon in January 2024, and
• “The First 100 Days of the New CISO” released on Amazon in November 2025

By Jean-Christophe Gaillard

Keywords: Cybersecurity, GRC, Leadership

Follow Us On

Become a Contributor Newsletter Signup