Governance

Corporate governance addresses the fundamental problem of how to ensure that those who manage a company act in the best interests of its owners, known as the agency problem. It is the system of rules, practices, and processes designed to align the interests of management with those of shareholders and other stakeholders, promoting accountability, transparency, and responsible decision-making. Effective corporate governance is essential for building trust, attracting investment, and fostering long-term sustainable growth. ...

Context In regulated industries — particularly financial services, energy, and critical infrastructure — the Three Lines model is the standard vocabulary for governance. It is the primary mechanism organisations use to segregate duties and prevent conflicts of interest. For the professional, understanding this framework is a practical necessity: it clarifies the boundary between operational management and independent oversight. The Three Lines of Defence (3LOD) is a framework used to structure risk management within an organisation. It separates those who own the risk from those who oversee it, and those who provide independent assurance. ...

Context For the mid-career security professional, the Business Information Security Officer (BISO) represents a pivotal shift from purely technical execution to strategic governance. It is a role that demands high political aptitude and the ability to translate technical concepts into financial and operational language. If you are considering this path, you must be prepared to leave the command line behind and enter the boardroom. As organisations expand, a natural tension arises between the central mandate for security and the local demand for speed. The centralised security function sets policy, but the business units — whether they are regional divisions or distinct product lines — often find these policies obstructive or irrelevant to their specific context. ...

Board governance is the system by which a board of directors controls an organisation, defining how it operates, makes decisions, and oversees key business outcomes such as strategy, risk, and performance. Effective boards ensure accountability through transparent reporting and ethical conduct, setting the tone at the top and fostering a culture of responsible leadership. Responsibilities of a Board Member Board members play a critical role in: Decision-Making: Setting strategic direction, approving major initiatives, and balancing short-term needs with long-term sustainability while considering stakeholder interests. ...

Model Context Protocol (MCP) is an open standard developed by Anthropic that defines how AI models share structured context - including messages, observations and actions - in a predictable and machine-readable way. Released in early 2024, MCP has been described as an “API for AI models”. However, describing it as just an API underplays its fundamental purpose: to provide a common, structured language for inter-model communication, which goes beyond a simple API call and introduces new considerations for systems design and governance. ...