Book
Securing & Governing AI
The attack surface that is genuinely new, the risks that are old in new clothes, model risk, what audit evidence looks like, the frameworks, responsible AI as controls rather than principles, the enterprise AI gateway, measuring harm, and what the law actually requires.
Assumes AI from First Principles. Read that one first if any of it is unfamiliar.
CHAPTER 8
Prompt injection, and why it is genuinely new
The one AI risk with no equivalent in the security canon. Most explanations of it are wrong.
CHAPTER 9
What is old wearing new clothes
Most of the AI risk register is your existing risk register. Knowing which is which saves enormous effort.
CHAPTER 10
Data governance — the actual hard problem
Not glamorous, and the source of most real AI incidents to date.
CHAPTER 11
Model risk management
Banking has governed consequential models for a decade. Most of it transfers directly.
CHAPTER 12
Auditing an AI system — what evidence looks like
Read this if you have been asked to audit something nobody can quite explain.
CHAPTER 13
The frameworks — NIST, ISO 42001, EU AI Act
What each is for, which you need, and how not to waste a year.
CHAPTER 14
Being the function that enables
The argument this whole book is for.
CHAPTER 15
The AI supply chain
Where the model came from, what it was built on, and how you would know if any of it changed.
CHAPTER 16
Incident response for AI systems
Your existing process mostly works. Four things about it do not, and they are worth deciding before you need them.
CHAPTER 17
Responsible AI, in practice
Not the principles poster. The specific controls that make an AI system defensible, and who owns each one.
CHAPTER 18
The AI gateway — how enterprises actually serve models
The pattern most large organisations converge on, and the one almost no public writing describes.
CHAPTER 19
Measuring harm, not just accuracy
The evaluation chapter has a sibling: quality metrics say nothing about who is hurt when the system is wrong.
CHAPTER 20
Human oversight, and what the law actually requires
The obligations that bite, separated from the ones people worry about.