Discipline
Cybersecurity and resilience
What has to be ready before the bad day and what the regulator will ask for when it arrives.
4 services in this discipline
This is yours if
The supervisor asks you to demonstrate resilience: the controls exist, the evidence is not assembled.
A query about post quantum readiness arrived and the starting point is still to be defined.
The identity platform already detects the agents, and the list keeps growing with no name next to it.
Use this today, without hiring anyone
Non-human identity governance
Six steps and one signature on each. Take your three agents or service accounts with the most privilege and write a person's name next to each step, not a department:
- Creation. Who approves that the agent exists, and for what.
- Credential. Who issues it, where it is stored and who knows it.
- Scope. Who sets what it can do and on which systems. And who reviews it when that changes.
- Expiry. When it lapses if nobody renews it. If it never lapses, that is the finding.
- Revocation. Who cuts it off on a Sunday, and how fast.
- Log. Who reviews what it did, how often and by what criterion.
Your identity tool already handles much of the detection. What it does not settle is who signs: the missing names are your finding. Look first for agents using a person's session, because those go through none of the six.
It comes from Non-human identity governance. Every service in this discipline brings its own.
The 4 services in this discipline
Can you prove your operation holds up, with evidence and not with confidence?
They no longer ask whether we have controls. They ask whether I can prove it holds.
Your critical functions, your dependencies, your tolerance thresholds and the severe scenarios tested, with the file ready for the supervisor.
See the situationPost-quantum inventoryWhere does your organization encrypt, and what happens when that encryption expires?
The cryptography is spread across twenty years of systems.
Where your organization uses cryptography, what each scheme protects and how many years that data must stay secret, with the roadmap of what to migrate first.
See the situationNon-human identity governanceWho signs each step in the life of an agent in your organization?
The tool already comes with agent identity. Nobody defined who signs each step.
The six life steps of every agent and every service account, each with someone who signs: creation, credential, scope, expiry, revocation and log.
See the situationAgent continuity planningHave you ever tested the failure plan for your AI agents?
The process already depends on the agent and nobody remembers how it was done by hand.
Plan B, written and actually tested: the agent gets switched off and how long your team takes to pick it up gets measured.
See the situationIn the network
Where each of its services comes in.
By the cycle
Vanguard“I want to move forward” · guideForge“I want to implement” · buildTaskforce“I want to stabilize” · sustainEach thread is a service. A click on a door, another discipline or a service opens its page.
Or see it by the cycle: Vanguard, Forge and Taskforce. Or by the question you arrive with, in the seven questions. And if you already know the name, there is the full list.
What is the decision you have in front of you this week?