{"id":26697,"date":"2026-10-30T03:37:36","date_gmt":"2026-10-30T03:37:36","guid":{"rendered":"https:\/\/globalnewstoday.uk\/index.php\/2026\/10\/30\/the-industry-speaks-part-13-cyber-security-awareness-month-2026-cyber-daily\/"},"modified":"2026-10-30T03:37:36","modified_gmt":"2026-10-30T03:37:36","slug":"the-industry-speaks-part-13-cyber-security-awareness-month-2026-cyber-daily","status":"publish","type":"post","link":"https:\/\/globalnewstoday.uk\/index.php\/2026\/10\/30\/the-industry-speaks-part-13-cyber-security-awareness-month-2026-cyber-daily\/","title":{"rendered":"The industry speaks \u2013 part 13: Cyber Security Awareness Month 2026 – Cyber Daily"},"content":{"rendered":"

SECTIONS<\/strong><\/span>
MORE<\/strong><\/span>
For breaking news and daily updates, subscribe<\/a> to our newsletter.
\u201cAs attacks grow more complex and identity compromise becomes more common, assuming a constant state of breach is the right mindset for maintaining vigilance and strengthening security.\u201d – David Nuti, Extreme
<\/i> SHARE<\/span>
Share this article on:
Saurabh Sood<\/strong>
Cybersecurity Presales Architect at SoftwareOne<\/em>
Recent reports of AI systems acting beyond their intended scope are a timely reminder to get the basics right. We wouldn’t give a new contractor access to every file with no supervision, yet that is effectively what happens when AI is introduced on top of unclassified data and broad permissions. We onboard contractors properly, and the same discipline is what lets us use AI with confidence.
The lesson isn\u2019t that AI is too risky to adopt. It\u2019s that the technology is only part of the picture. What matters is the data beneath it, who is accountable for it, and how well governance keeps pace with experimentation. The good news is that it\u2019s fixable.
Start with your data<\/em>. In my client conversations, AI adoption is often outpacing governance. When data isn\u2019t classified and access is too broad, AI can surface information people were never meant to see. Before anything else, organisations need to know where their data is stored, who can access it and how it\u2019s classified. It isn\u2019t glamorous, but it\u2019s the core of the problem.
Plan for accountability<\/em>. Access controls are only half the picture. If an AI agent does something unintended, who is responsible, and how quickly would you know? Directors should be asking that question. Answering it takes clear ownership, active alerting, a tested incident response plan, and agreed breach notification timelines with vendors. These are often overlooked until something goes wrong.
Size changes the safeguards, not the risk<\/em>. Organisations under APRA or critical infrastructure obligations tend to move cautiously, because they know AI isn\u2019t as simple as flipping a switch. Smaller businesses face the same risks with fewer safeguards, and are often more ambitious about experimenting with AI. That\u2019s understandable, but it\u2019s where I\u2019d urge the most care.
Be proportionate<\/em>. Scale the depth of your risk assessment to the risk. A large organisation may need a formal gap analysis, while a small business may need a simple check of what data the AI can reach and what it can do. If you\u2019re considering a privately hosted or tenant-isolated AI service, check the access controls, retention terms and data residency. Hosting alone isn\u2019t enough: limiting what any AI can reach and do matters wherever it\u2019s hosted.
The ASD Essential Eight provides a valuable cybersecurity baseline for organisations of any size, although it should sit alongside AI-specific governance, privacy and risk-management controls.
Govern the cost too<\/em>. Unmonitored AI usage can also run up unexpected charges, and unusual spikes can signal misuse or compromised credentials. Set spending limits and usage alerts from day one. Treat identity, data, cloud and governance as one connected problem rather than separate tools, and plan how you would recover and keep operating if an AI agent or supplier fails. The practical way forward is to assess where you stand today, build a roadmap that fits your budget, and work with a reputable partner who can help you implement and monitor the controls over time.
AI shouldn\u2019t be a leap of faith. With the right foundations, security is what lets organisations adopt it with confidence.<\/p>\n

David Nuti<\/strong>
Head of Security Strategy at Extreme<\/em>
CISOs should be defining security outcomes that go beyond perimeter authentication and access enforcement to include the continuous monitoring of identity behaviour beyond initial verification. As attacks grow more complex and identity compromise becomes more common, assuming a constant state of breach is the right mindset for maintaining vigilance and strengthening security.
AI can be an effective tool for maintaining security policies and hygiene, but its effectiveness depends on having the right data foundations to support analysis and guide decisions. This makes identity-based security policies, particularly through the Zero Trust framework, a business-critical priority as organisations look to strengthen their security posture.
As AI becomes more deeply integrated across the enterprise, organisations need to consider not only the capabilities of their AI agents, but also the knowledge, context and controls they bring to the environment. Agents should be able to provide recommendations based on the specific environment they operate in, with the controls needed to adopt AI at a pace that matches the organisation\u2019s level of trust. Expertise, context and control are key to building a secure foundation.
That same approach must extend to how organisations secure AI agents themselves. Security teams should treat AI agents as identities in their environment, with the same need for guardrails, access controls and continuous monitoring as human users. As AI can be used to automate attacks, monitoring east-west movement and behaviour across the network is key to ensuring activity stays within defined permissions. The Zero Trust principle of \u201cnever trust, always verify\u201d must apply equally to every identity, whether an employee, an IoT device or an AI agent.
David Hollingworth
Author
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content.
This section requires JavaScript to display the latest content. <\/p>\n

source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

SECTIONSMOREFor breaking news and daily updates, subscribe to our newsletter.\u201cAs attacks grow more complex and identity compromise becomes more common, assuming a constant state of breach is the right mindset for maintaining vigilance and strengthening security.\u201d – David Nuti, Extreme SHARE Share this article on: Saurabh SoodCybersecurity Presales Architect at SoftwareOneRecent reports of AI systems […]<\/p>\n","protected":false},"author":1,"featured_media":26698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-26697","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology"],"_links":{"self":[{"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/posts\/26697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/comments?post=26697"}],"version-history":[{"count":0,"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/posts\/26697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/media\/26698"}],"wp:attachment":[{"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/media?parent=26697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/categories?post=26697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/globalnewstoday.uk\/index.php\/wp-json\/wp\/v2\/tags?post=26697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}