AI

This note summarizes work conducted to date with respect to improving wargames and simulations with artificial intelligence (AI) and describes a novel approach to the mechanics of course of action generation that is currently (June 2026 ) being validated. Wargames are highly effective strategy training and validation methods that have proven their worth over decades of use. However human-centric simulations [^1] are highly inefficient, requiring significant resources to staff and support and are limited to the pace of the slowest decision-maker. This means that the opportunity to run wargames are constrained by resources and there is little, if any opportunity, to re-run a simulation with a different set of starting conditions. Nevertheless, in our experience of participating in or running 100+ military and commercial wargames, their effectiveness as a training and validation tool is unchallenged. ...

I’ve had a lot of conversations about risk assessments recently and just finished a new feature in the Decis platform, both of which prompted this thought: What if we have things backwards? What if our risk assessment updated us instead of the other way around? We spend days — sometimes weeks — building a comprehensive risk assessment to understand our risks and build mitigation measures. But these are snapshots in time and can quickly become overtaken by events. That’s when we move from risk management to incident management or at minimum, we have to review our mitigation. ...

How to Use AI as a Security Risk Manager[ An AI AI White Paper Andrew Sheves (I’ll keep this short as I don’t want to suddenly spam your inbox after weeks of silence.) I’ve been collaborating with Doug Gray from HumanRisks on an AI white paper these last few months, and I’m pleased to announce that it’s now published. We took a much deeper dive into the topic than in any of our previous work, conducting a thorough review of how AI can assist security risk managers. We based this on the most recent academic studies of how knowledge workers make best use of these tools and aligned these AI benefits with identified gaps and challenges in Security Risk Management. ...

Before we jump in, don’t be put off by the technical aspects of this: the overall concept is pretty straightforward and something you can put into practice yourself (I explain how to at the end). Using the Right Tool for the Job Despite their incredible capabilities, even the best LLM*-based AI suffers from a tendency to exaggerate or make up facts – AKA hallucinate. That’s not such an issue when you’re asking it to help tweak some text or brainstorm ideas, but it’s a big problem when you’re trying to use AI for analysis. (*Large language model.) ...

Why the Industry is in Trouble Despite being the inventor of the first digital camera in the late 1970s, Kodak famously ignored the switch to digital photography, losing the company its commanding market lead and significantly hurting the business. Risk and crisis consulting is currently facing its own Kodak moment. AI and machine learning tools reduce the effort, time, and cost of routine risk and crisis tasks by well over 90%. Consultancies believe they can harness these efficiencies to improve their profit margins and assume that only the largest firms will want, or be able, to develop their own tools. ...

Why, and How, To Build Custom Chatbots 🤖[ Why, and How, To Build Custom Chatbots 🤖 Why, and How, To Build Custom Chatbots 🤖 I’ve been building custom knowledge agents (AKA chatbots) for a few weeks, and my friend Greg suggested I share some background on how you build these tools and why. The ‘how’ is covered in a short demo video towards the end of the piece, but before you start building nodes, it’s worth thinking about what these new chatbots are and what they can do for you. ...

I’ve been building custom knowledge agents (AKA chatbots) for a few weeks, and my friend Greg suggested I share some background on how you build these tools and why. The ‘how’ is covered in a short demo video towards the end of the piece, but before you start building nodes, it’s worth thinking about what these new chatbots are and what they can do for you. First, we should ask what chatbots are and why they weren’t so helpful before. ...

Lots of businesses are wondering what AI means for them, and it’s essential that companies have an AI strategy, even if that strategy is to do nothing. But even if the answer is ‘do nothing,’ you can only get there by asking the ‘what if’ questions first. But what are those questions? We’ll get to those in a moment, but here’s a quick recap of why this is such a difficult discussion. ...

Risk and Security Managers Positive on AI Last week, I had a great session with ASIS at the AI for Risk and Security Managers webinar. As part of the session, I outlined the three questions organizations should ask themselves concerning AI and how it affects their business. How could AI give us an advantage? How could AI challenge our business? How could AI threaten or kill our business? (Read the full article here to give you the context of the questions and some additional considerations.) ...

AI isn’t finally here – it’s been here for a while in everything from the autocorrect on your phone and the recommendations you get on Netflix – but it’s now in the mainstream. And thankfully, we’re having some of the hard conversations we failed to have when other technologies like social media were emerging. These will be long, complicated, and potentially inconclusive discussions, but at least they’re happening. Clearly, a significant element of the discussion is around what AI means for work, and, as with most things, the answer is a variation of ‘it depends’ because every business and industry will be affected differently. ...