Blog

  • The new thing is the old thing

    A new name changes the slide. A new default changes the outcome.

  • What an AI certificate actually certifies

    An ISO/IEC 42001 certificate certifies the program, not the product.

  • What is actually new in AI security

    Much of AI security is relabeled security. One part is genuinely new.

  • The sentence before the first control

    The most basic security control is not a control. It is a sentence.

  • Why now

    Four things happened, and dealers started asking.

  • The patch nobody was assigned

    The expensive unpatched server is the one nobody decided anything about.

  • The rule you can delete

    The cheapest security upgrade on your list this year may be a deletion.

  • Is your email safe?

    Only the vendor can stop mail forging its domain.

  • The instrument

    Nine things a buyer can check without asking.

  • Not your inbox

    DMARC protects your customers, not your inbox.

  • Is it me?

    Every assessed brand can request its own scorecard.

  • The zero

    Nobody publishes all nine.

  • The question

    Every dealership runs on software it does not own.