# The AI Cybersecurity Handbook, Continued
> Security doesn't stand still, and neither does AI. This is where I publish the ideas, lessons, and field notes that didn't fit in the book—and everything I've learned since.
Public Ghost content for AI and LLM tooling. Use `/llms-full.txt` for consolidated page and post context.
Append `.md` to any post or page URL to get the content in Markdown (for example, `/example-post.md`).

## Pages
- [About this site](https://www.theaicyberhandbook.com/about.md) - The AI Cybersecurity Handbook, Continued is an independent publication launched in June 2026 by Caroline Wong. If you subscribe today, you'll get full access to the website as well as email newsletters about new content when it's available. Your subscription makes this site possible, and allows The…

## Posts
- [Autonomy Isn't Authority](https://www.theaicyberhandbook.com/autonomy-isnt-authority.md) - An agent that runs by itself every morning and an agent that can move money are two entirely different security problems. But some AI risk conversations flatten them into the same thing. Two distinct agents The first runs every morning without anyone asking. It searches a set of approved public sou…
- [Your AI Inventory Is a Graph, Not a Spreadsheet](https://www.theaicyberhandbook.com/your-ai-inventory-is-a-graph-not-a-spreadsheet.md) - Most AI inventories answer "what do we have?" and go stale the same week. The questions worth answering are what's connected to what, and what changed since. Every CISO I talk to about agentic AI opens with the same question: What AI do we have? It sounds like the easy part. Get a list, put it some…
- [AI Agents Should Inherit Delegated Authority](https://www.theaicyberhandbook.com/ai-agents-should-inherit-delegated-authority.md) - When I go on vacation, I don't hand my deputy CISO a copy of my job. I hand them a slice of it. While I'm out, they can approve an emergency firewall change. They can't sign a vendor contract. Finance still approves payments. HR still approves hiring. The moment I'm back, that slice returns to me.…
- [Build an Architecture, Not a Vendor Collection](https://www.theaicyberhandbook.com/build-an-architecture-not-a-vendor-collection.md) - One of the questions I've been getting a lot lately is some version of, "We're looking at several AI security vendors. Which one do you recommend?" On the surface, that seems like a straightforward question. Usually it isn't. A few weeks ago, I was reviewing a shortlist with a security team. They h…
- [AI Agents Are Digital Workers. Govern Their Identities Like It.](https://www.theaicyberhandbook.com/ai-agents-are-digital-workers-govern-their-identities-like-it.md) - Five questions second-line risk teams should be asking about the non-human identities behind agentic AI. Every AI workflow you put into production has an identity behind it. It might be a service account, a workload identity, a managed identity, an API key, an OAuth application, or another non-huma…
- [Governing AI Agents Starts with Governing Their Identities](https://www.theaicyberhandbook.com/governing-ai-agents-starts-with-governing-their-identities.md) - I made the broad case for agentic security-by-design at PlatformCon Live Day NYC. This is the identity piece, up close. Over the past several months, I've had versions of the same conversation with CISOs, identity teams, auditors, and risk leaders. The technologies differ, but the question undernea…
- [When You Turn On AI, Who Owns the New Signals?](https://www.theaicyberhandbook.com/when-you-turn-on-ai-who-owns-the-new-signals.md) - Turning on generative and agentic AI floods the enterprise with alerts, logs, and telemetry. Here's how to decide what's cybersecurity's job — and what isn't.
- [Trust is the Wrong Word for AI Agents. Here's the Right One.](https://www.theaicyberhandbook.com/trust-is-the-wrong-word-for-ai-agents-heres-the-right-one.md) - We spent a decade learning not to trust what we download. Here's why the same lesson — reframed around confidence, not trust — is how you stay in control of agentic AI. Adapted from my 2026 PlatformCon NYC talk.

## Optional
- [RSS Feed](https://www.theaicyberhandbook.com/rss/)
- [Sitemap](https://www.theaicyberhandbook.com/sitemap.xml)
- [Full content of pages and posts](https://www.theaicyberhandbook.com/llms-full.txt)