DISC Infosec blog

The Security Risks Hiding in AI Agent Memory

disc7 — Tue, 29 Sep 2026 16:25:09 +0000

The Security Risks Hiding in AI Agent Memory Agent memory is the least-governed data store in most enterprises, and it is filling up with secrets. An agent that remembers can be taught. An agent that can be taught can be poisoned. And whatever it has learned sits somewhere, usually in plain text, usually outside any […]

The post The Security Risks Hiding in AI Agent Memory appeared first on DISC InfoSec blog.

AI Log Retention: Why Every AI Log Doesn’t Deserve the Same Shelf Life

disc7 — Fri, 25 Sep 2026 21:29:08 +0000

DISC INFOSEC | AI GOVERNANCE AI Log Retention: Why Every AI Log Doesn’t Deserve the Same Shelf Life Your AI logs are either your best evidence or your biggest liability. The retention period decides which. Most teams I assess have exactly one AI log retention setting: whatever the vendor or the SIEM shipped with. Thirty […]

The post AI Log Retention: Why Every AI Log Doesn’t Deserve the Same Shelf Life appeared first on DISC InfoSec blog.

The AI Agent Harness Is the New Security Boundary

disc7 — Thu, 24 Sep 2026 17:22:37 +0000

The AI Agent Harness Is the New Security Boundary Everyone is talking about securing the AI model. But for AI agents, the model may not be the most important security boundary. The real security boundary is the harness. Think of the model as the reasoning engine. The harness is the scaffolding that turns reasoning into […]

The post The AI Agent Harness Is the New Security Boundary appeared first on DISC InfoSec blog.

Stop asking what your agent can do

disc7 — Mon, 21 Sep 2026 20:12:45 +0000

The Harness Is the Contract: Declared, Bounded, Verifiable Stop asking what your agent can do. Ask whether every consequential path was declared, bounded, and left evidence a third party can verify. A practitioner’s framework for governing the harness, not the model. Most AI governance effort is aimed at the wrong object. Teams assess the model […]

The post Stop asking what your agent can do appeared first on DISC InfoSec blog.

You can’t put a human in the loop of a system that kills its agents every 3 minutes

disc7 — Tue, 15 Sep 2026 19:30:14 +0000

Continuous Human Involvement Is a Fantasy. Continuous Human Authority Is an Architecture. How to govern a fleet of hundreds of ephemeral AI agents that spawn, act, and vanish in minutes — when nobody can watch them. Someone posed me a riddle recently, and it’s the sharpest challenge to “human-in-the-loop” orthodoxy I’ve heard in a while: […]

The post You can’t put a human in the loop of a system that kills its agents every 3 minutes appeared first on DISC InfoSec blog.

Human Oversight vs Human Control: Where the Human Sits in AI Execution

disc7 — Wed, 09 Sep 2026 19:07:16 +0000

Where Does the Human Sit Relative to Execution? Outside the loop, in it, on it, or alongside it? The position determines what evidence exists, which risk tiers are defensible, and whether Article 14 oversight is real or theatre. Someone put a question to me recently that I thought was better than most of the governance […]

The post Human Oversight vs Human Control: Where the Human Sits in AI Execution appeared first on DISC InfoSec blog.

A signed two-page policy beats a fifty-page draft. Every time…

disc7 — Tue, 08 Sep 2026 16:41:24 +0000

Startups at Seed or Series A Don’t Need a CISO to Pontificate. They Still Need Governance. A viral take says early-stage startups need operators, not CISOs. Mostly right — but three of the four things it says startups need are governance work. What actually blocks the audit and the deal. A take went around recently […]

The post A signed two-page policy beats a fifty-page draft. Every time… appeared first on DISC InfoSec blog.

We have guardrails for that is not a control – Here’s the difference

disc7 — Thu, 03 Sep 2026 19:08:00 +0000

Why AI Systems Are Hard to Audit – AI doesn’t have controls, it has guardrails — and you can’t audit a guardrail AI Teams Think in Guardrails. Auditors Think in Controls. That Gap Is Where Programs Fail. Steven Ross made an observation in the ISACA Journal earlier this year that I’ve been chewing on since, […]

The post We have guardrails for that is not a control – Here’s the difference appeared first on DISC InfoSec blog.

Point-in-time remediation is dead against a persistent adversary

disc7 — Thu, 03 Sep 2026 04:31:30 +0000

The Rise of Fully Autonomous Offensive Loops Agent collectives found zero-days, shared them, escalated, and moved laterally for weeks — by accident. Automated offense now has an existence proof. Automated defense doesn’t. What defenders should do. Every post in this series has been building toward a question that stopped being hypothetical in July 2026: what […]

The post Point-in-time remediation is dead against a persistent adversary appeared first on DISC InfoSec blog.

Your Security Stack Isn’t Obsolete. Your Operating Model Is

disc7 — Wed, 02 Sep 2026 19:20:40 +0000

Your Security Stack Isn’t Obsolete. Your Operating Model Is. Is Enterprise Cybersecurity Infrastructure Already Obsolete? The $1T Claim, Examined. Palo Alto’s CEO put $1 trillion on the table. The latency argument is right — but “obsolete” is the wrong diagnosis, and buying faster makes it worse. What’s actually structurally dead, and what to do first. […]

The post Your Security Stack Isn’t Obsolete. Your Operating Model Is appeared first on DISC InfoSec blog.

Thirty years of security assumed the attacker was unauthorized – Your agent isn’t

disc7 — Mon, 31 Aug 2026 16:37:05 +0000

Agentic AI Governance: Mitigating Liability and Protecting Information Assets The model decided to do that” is not a legal defense The previous post in this series covered agent security controls — tool scoping, separating decision from execution, memory hygiene, egress control. That’s the engineering layer. This post is about the layer above it, the one […]

The post Thirty years of security assumed the attacker was unauthorized – Your agent isn’t appeared first on DISC InfoSec blog.

Frontier Model, Familiar Framework: Reading Fable 5’s Guardrails Through ISO 42001

disc7 — Sun, 30 Aug 2026 17:47:35 +0000

What Claude Fable 5’s Launch Teaches Us About AI Governance (An ISO 42001 Reading) In June 2026, Anthropic released Claude Fable 5 — the most capable AI model ever made generally available. But the more interesting story isn’t the benchmarks. It’s the governance architecture wrapped around the release. Because here’s the thing: while most organizations […]

The post Frontier Model, Familiar Framework: Reading Fable 5’s Guardrails Through ISO 42001 appeared first on DISC InfoSec blog.

ISO 42001 Evidence Checklist: What Auditors Actually Look For (2026)

disc7 — Sat, 29 Aug 2026 22:49:38 +0000

We Built an ISO 42001 Evidence Checklist for AI Companies — Here’s What Auditors Actually Look For Controls are rarely why organisations fail an ISO 42001 audit. Evidence is…A clause-by-clause evidence checklist, the seven patterns that separate a pass from a finding, and the questions auditors actually ask. ISO 42001 evidence checklist, ISO 42001 audit, […]

The post ISO 42001 Evidence Checklist: What Auditors Actually Look For (2026) appeared first on DISC InfoSec blog.

Agents don’t produce wrong answers anymore They take wrong actions – A practitioner’s guide to agent security

disc7 — Fri, 28 Aug 2026 16:30:22 +0000

AI Agent Security: Nobody Authorized That Action, and That’s the Problem The last two posts in this series ended in the same place from different directions. The one on AI-executable workflows argued that when the convertible tasks leave, what remains valuable is specification, oversight, evidence, boundary judgment, and the signature. The one on Bay Area […]

The post Agents don’t produce wrong answers anymore They take wrong actions – A practitioner’s guide to agent security appeared first on DISC InfoSec blog.

AI Governance for Bay Area Startups: What to Put in Place Before Enterprise Customers Ask

disc7 — Tue, 25 Aug 2026 16:30:03 +0000

AI Governance for Bay Area Startups: What to Put in Place Before Enterprise Customers Ask There’s a specific email that changes a startup’s quarter. It arrives from a champion who is genuinely on your side, and it reads something like: “Security review went fine, but our AI risk team added a section. Can you send […]

The post AI Governance for Bay Area Startups: What to Put in Place Before Enterprise Customers Ask appeared first on DISC InfoSec blog.