Humans that know

We help organizations deploy AI that survives attackers, auditors, and regulators.

Book a consultation

Where to start

Media

Point of view · Jul 2026

You Made an AI Policy. So Now What?

A policy is not governance. The five ways an AI council fails, mapped to Lencioni's five dysfunctions, and the cheapest fix available before its next meeting.

Point of view · Jun 2026

From Chaos to Control: Managing AI Risk in Healthcare

A control framework tells you what to do. Whether a healthcare organization can actually do it is a question of people, ownership, and maturity, and the workforce now includes AI agents.

Point of view · Jun 2026

You Can't Patch AI!

Policy has started borrowing patch-management language for AI systems. But fine-tuning, retraining, and weight editing are not patches, and the difference matters.

Talk · Jun 2026

Breaking the Black Box: An Overview of AI Governance and Tabletop Simulation

Chris M. Ward at Planet Cyber Sec AI AppSec, Annenberg Community Beach House, Santa Monica, June 3, 2026.

Talk · May 2026

SPIE Assurance and Security for AI-enabled Systems

Dr. Josh Harguess and Chris M. Ward co-chaired the SPIE conference on Assurance and Security for AI-enabled Systems.

Research · May 2026

Your Temperature Setting Is a Bigger Security Risk Than Your Quantization Tier

Our SPIE DS26 paper ran 14,850 evaluations across five model families and three quantization tiers. Temperature, not quantization, is the safety variable most organizations should worry about.

Talk · Apr 2026

BSides San Diego 2026: Breaking the Black Box

A BSides San Diego 2026 session on the AI governance frameworks that matter: NIST AI RMF, the EU AI Act, ISO 42001, GDPR and MITRE's AI Maturity Model.

Talk · Apr 2026

Breaking the Black Box: BSides San Diego 2026

A session on the AI governance frameworks that matter: NIST AI RMF, the EU AI Act, ISO 42001, GDPR and MITRE's AI Maturity Model.

Talk · Apr 2026

Breaking the Black Box: A Tabletop Guide to AI Governance and Maturity

An interactive workshop pairing the NIST AI RMF and the MITRE AI Maturity Model with a live incident tabletop.

Talk · Mar 2026

Walk the Line: Third Party Risk Summit 2026

Dr. Josh Harguess on a panel on third party AI risk at the Grand Hyatt, Nashville, March 18 and 19, 2026.

Talk · Mar 2026

Demystifying AI

A three hour workshop with ISACA San Diego, in person and on Zoom, March 5, 2026.

Talk · Mar 2026

Naval Applications of Machine Learning

Chris M. Ward and Dr. Josh Harguess speaking at Naval Applications of Machine Learning.

Point of view · Feb 2026

Why Anthropic's Capability Leak is an AI Maturity Problem

Chinese labs drained Claude's intelligence through the front door with 16 million automated exchanges. The AI industry doesn't just have a security problem: it has an operational maturity problem.

Field notes · Jan 2026

2025: The Year of the Spark

A look back at our first year: research at the NATO IST-210 symposium, CAMLIS, BSides Las Vegas and SPIE DCS, and where we take it next.

Interview · Dec 2025

When hackers weaponize AI, the rules of cyber defense change overnight

Dr. Josh Harguess with Terry Gerton on Federal News Network, on what AI-enabled attackers change for federal agencies.

Research · Nov 2025

Beyond the Firewall: The Three Pillars of Offensive AI Security

AI fails in ways firewalls cannot see: data poisoning, model theft, prompt injection. The three layers of a deliberate offensive AI security strategy.

Point of view · Nov 2025

Fifteen years ago, developers fought over whether IDEs were cheating. Now they're arguing about AI assistants. What automation research says about losing the fundamentals, and how agentic development keeps you the architect.