Governance

We ask ourselves that before you do.

A system allowed to intervene autonomously is a worthwhile target. That is not a footnote.

A system that may isolate segments and reset machines is worth more to an attacker than the machines themselves. Anyone who does not raise this has not thought about it.

• An approval list before every action. What is not approved is not possible. Not “is blocked”, but does not exist for the system.
• Your organisation sets the limits, not the vendor.
• It runs in your house. No cloud, no data egress.
• On uncertainty the system hands over to the human. That is the normal case, not the exception.
• Every action is reconstructable, including the system’s own.