Top 10 Leadership and Management links of the week, curated by Corix Partners Founder and CEO JC Gaillard, focusing on cyber security of course, but also a large cross section of subjects including digital transformation, emerging tech, AI governance and the future of work.

This Week >> AI is expanding the enterprise risk landscape faster than governance can keep up.

- Security spending is growing — but not where CISOs control it
- Enterprises are deploying AI agents they can’t even count
- Cyber insurers are struggling to price agentic risk
- Deepfakes are industrializing social engineering
- AI coding is reopening security problems we thought we had solved
- Governance can’t remain an afterthought as agents gain autonomy

The common thread? AI adoption is racing ahead of visibility, control and accountability. The leadership challenge now is to close that gap before complexity turns into systemic risk.

 

Security spending is growing — except for the typical CISO

Headline security spending growth masks a more difficult reality for many CISOs: median budgets are flat while AI absorbs an increasing share of new investment, making governance maturity and clearer AI budget ownership increasingly important.

https://www.csoonline.com/article/4223455/security-spending-is-growing-except-for-the-typical-ciso.html

 

Cyber insurers consider limiting coverage as sector scrambles to price agentic AI risks

Agentic AI is creating new categories of autonomous and potentially systemic risk that insurers are struggling to quantify, raising the prospect of tighter coverage and pushing more responsibility back onto enterprises.

https://www.cityam.com/cyber-insurers-consider-coverage-pullback-as-sector-scrambles-to-price-agentic-ai-risks/

 

Enterprises Can't Count Their AI Agents, Survey Finds

Organizations are deploying AI agents faster than they can inventory and govern them, creating a fundamental visibility problem around ownership, permissions, access and accountability.

https://www.bankinfosecurity.com/enterprises-cant-count-their-ai-agents-survey-finds-a-32849

 

The latest deepfake numbers give CISOs plenty to worry about

With deepfake-enabled social engineering already reaching voice and video calls, organizations need to move beyond teaching employees to “spot the fake” and make robust identity verification the default for sensitive actions.

https://www.helpnetsecurity.com/2026/09/22/cisos-deepfake-incidents-social-engineering-survey/

 

Build, Buy, or Vibe Code? AI Is Reopening Security Risks We Already Solved

AI-assisted and vibe coding can reintroduce familiar software-security weaknesses when speed and convenience bypass the mature development, testing and security disciplines organizations have spent years establishing.

https://securityboulevard.com/2026/09/build-buy-or-vibe-code-ai-is-reopening-security-risks-we-already-solved/

 

AI made software development unrecognizable. Is cybersecurity next?

AI could reshape cybersecurity around agent-run SOCs, continuous vulnerability triage and machine-speed containment, leaving humans increasingly responsible for supervising fleets of defensive agents and making higher-level judgments.

https://www.csoonline.com/article/4221311/ai-made-software-development-unrecognizable-is-cybersecurity-next.html

 

Governance Can’t Stay an Afterthought as AI Agents Take the Wheel

Reactive AI governance becomes untenable as autonomous agents gain the ability to plan and execute business processes, making guardrails and governance necessary from the outset rather than after deployment.

https://www.dataversity.net/articles/governance-cant-stay-an-afterthought-as-ai-agents-take-the-wheel/

 

Managing the life cycle of AI agents at scale

Because agents behave dynamically and non-deterministically, enterprises need an agent-specific development lifecycle covering evaluation, observability, identity, access, cost controls and governance from design through production.

https://www.infoworld.com/article/4225702/managing-the-life-cycle-of-ai-agents-at-scale.html

 

Big Tech’s AI safety rift signals disruption and disparity for enterprises

Diverging approaches to AI safety among major technology providers could fragment enterprise AI strategies, reinforcing the need for organizations to develop their own assurance, evaluation and governance capabilities.

https://www.csoonline.com/article/4222904/big-techs-ai-safety-rift-signals-disruption-and-disparity-for-enterprises-3.html

 

The 7 new Cs of IT leadership for the AI era

In an environment where AI is compressing technology, strategy and decision cycles, successful IT leadership increasingly depends on coherence, communication, continuous learning, confidence, conviction, courage and the ability to drive change.

https://www.cio.com/article/4222994/the-7-new-cs-of-it-leadership-for-the-ai-era.html

 

Contact Corix Partners to find out more about developing a successful Cyber Security Practice for your business.

Corix Partners is a Boutique Management Consultancy Firm and Thought-Leadership Platform, focused on assisting CIOs and other C-level executives in resolving Cyber Security Strategy, Organisation & Governance challenges.

Our Founder and CEO JC Gaillard is is a leading strategic advisor and a globally-recognised cybersecurity thought-leader with over 25 years of experience developed in several financial institutions in the UK and continental Europe, and a track-record at driving fundamental change in the security field across global organisations, looking beyond the technical horizon into strategy, governance, culture, and the real dynamics of business transformation.

He is the author of:

• “Cyber Security: The Lost Decade – A Security Governance Handbook for the CISO and the CIO” first published in September 2017 with updated annual editions released every year up to 2021;
• “The CyberSecurity Leadership Handbook for the CISO and the CEO” first released on Amazon in February 2023 (updated edition released in July 2024);
• “The Cybersecurity Spiral of Failure” released on Amazon in January 2024, and
• “The First 100 Days of the New CISO” released on Amazon in November 2025

By Jean-Christophe Gaillard

Keywords: Cybersecurity, GRC, Leadership

Follow Us On

Become a Contributor Newsletter Signup