Top 10 Leadership and Management links of the week, curated by Corix Partners Founder and CEO JC Gaillard, focusing on cyber security of course, but also a large cross section of subjects including digital transformation, emerging tech, AI governance and the future of work.

This Week >> AI is changing the pace of cybersecurity, but not the fundamentals of effective leadership.

- Traditional security roadmaps are struggling to keep pace with change
- AI accelerates attacks, making continuous security testing essential
- The CISO role and security investment priorities are being challenged
- AI agents demand clear authority, permissions and data governance
- AI costs require stronger financial discipline
- CIOs must redesign enterprise work, not simply deploy more technology
- And trust cannot be bought through technology investment alone

The common thread? Technology is changing faster than traditional management structures can adapt. Sustainable security and AI value will depend on leadership, governance, clear accountability and disciplined execution — not simply more tools or bigger budgets.

 

Whatever happened to the 36-month IT security roadmap?

Traditional three-year security roadmaps are becoming increasingly difficult to sustain as technological change and shifting business priorities demand more adaptable planning, without sacrificing long-term strategic direction.

https://www.csoonline.com/article/4228518/whatever-happened-to-the-36-month-it-security-roadmap.html

 

AI Has Changed Attack Speed, Not Security Fundamentals

AI is accelerating and scaling cyberattacks, but effective protection still depends on established security fundamentals, disciplined execution and sound governance rather than entirely new defensive approaches.

https://www.securityweek.com/ai-has-changed-attack-speed-not-security-fundamentals/

 

Should the CISO role be split in two?

The expanding responsibilities of CISOs are reopening the debate over separating strategic security leadership from operational security management, raising fundamental questions about accountability, authority and organizational effectiveness.

https://www.csoonline.com/article/4230243/should-the-ciso-role-be-split-in-two.html

 

AI Forces Cyber Leaders to Rethink Security Spending

AI is forcing cybersecurity leaders to reconsider investment priorities, balancing emerging AI-related threats and capabilities against the continuing need to strengthen existing security foundations.

https://www.bankinfosecurity.com/ai-forces-cyber-leaders-to-rethink-security-spending-a-32957

 

AI is turning offensive security into a continuous necessity

As AI enables attackers to discover and exploit weaknesses more rapidly, periodic penetration testing is becoming insufficient, making continuous offensive security assessment an increasingly important component of cyber resilience.

https://www.csoonline.com/article/4231510/ai-is-turning-offensive-security-into-a-continuous-necessity.html

 

Is It Fair to Blame 'Rogue' AI for Security Failures?

Describing autonomous AI systems as “rogue” risks obscuring the real issue: failures of human-designed security boundaries, access controls and oversight, for which technology providers and deploying organizations must remain accountable.

https://www.darkreading.com/insider-threats/blame-rogue-ai-security-failures

 

Data Governance And Permissions: Before You Deploy An AI Agent, Decide Who Outranks It

Organizations must establish clear decision-making authority, data-access permissions and human oversight before deploying autonomous AI agents, ensuring that delegation of tasks never becomes delegation of accountability.

https://www.forbes.com/councils/forbesbusinesscouncil/2026/09/29/data-governance-and-permissions-before-you-deploy-an-ai-agent-decide-who-outranks-it/

 

Five keys to controlling AI token costs

Controlling AI expenditure requires architectural discipline, using model routing, semantic caching, prompt caching, intelligent context selection and response constraints to reduce unnecessary token consumption without compromising business value.

https://www.infoworld.com/article/4217150/five-keys-to-controlling-ai-token-costs.html

 

The CIO’s new mandate: Rearchitecting enterprise work

The CIO's strategic responsibility is shifting from managing technology platforms to redesigning business processes, workflows and operating models around AI capabilities to deliver measurable enterprise value.

https://www.cio.com/article/4230816/the-cios-new-mandate-rearchitecting-enterprise-work.html

 

Money can’t buy enterprise trust

Enterprise trust depends less on financial strength or technological sophistication than on leadership integrity, organizational continuity and the ability of technology providers to honor long-term commitments to customers.

https://www.infoworld.com/article/4230316/money-cant-buy-enterprise-trust.html

 

Corix Partners is a Boutique Management Consultancy Firm and Thought-Leadership Platform, focused on assisting CIOs and other C-level executives in resolving Cyber Security Strategy, Organisation & Governance challenges.

Our Founder and CEO JC Gaillard is is a leading strategic advisor and a globally-recognised cybersecurity thought-leader with over 25 years of experience developed in several financial institutions in the UK and continental Europe, and a track-record at driving fundamental change in the security field across global organisations, looking beyond the technical horizon into strategy, governance, culture, and the real dynamics of business transformation.

He is the author of:

• “Cyber Security: The Lost Decade – A Security Governance Handbook for the CISO and the CIO” first published in September 2017 with updated annual editions released every year up to 2021;
• “The CyberSecurity Leadership Handbook for the CISO and the CEO” first released on Amazon in February 2023 (updated edition released in July 2024);
• “The Cybersecurity Spiral of Failure” released on Amazon in January 2024, and
• “The First 100 Days of the New CISO” released on Amazon in November 2025

By Jean-Christophe Gaillard

Keywords: Cybersecurity, GRC, Leadership

Follow Us On

Become a Contributor Newsletter Signup