Insights & Blog | Spirity Enterprise

Insights

Practical writing on the work we do — compliance, risk, detection, and the decisions behind them.

September 16, 2026
Employee-built AI agents need owners before guardrails
Why mid-market firms need a lightweight acceptance process for employee-built AI agents before they become production dependencies.
- ai agents
- ai governance
- agentic ai
- cybersecurity leadership
- virtual ciso
- mid-market security
September 15, 2026
A decommissioned support portal became the single point of failure for 45 insurers
When one software supplier serves half a sector, its legacy support channel can become everyone's breach. What that means for concentration risk, continuous assurance, and the failover questions to put to your own shared providers.
- third-party risk
- supply chain
- concentration risk
- continuous monitoring
- legacy systems
- incident response
September 15, 2026
Supplier questionnaires cannot see the subcontractor two vendors share
Questionnaire return rates flatter a supply chain. The finding that matters is the subcontractor more than one critical vendor shares, and the board metric should reflect that.
- supply chain risk
- third-party risk management
- supplier assurance
- shared dependencies
- dora
- questionnaires
September 15, 2026
A security roadmap now outlasts the CISO who signs it
When average CISO tenure is 18 to 26 months and nearly half lack an internal successor, boards should test what leaves with the next resignation.
- ciso turnover
- succession planning
- security leadership
- governance
- board reporting
September 6, 2026
Your January Cybersecurity Checklist
A practical, high-impact guide to starting the year with a clean security baseline.
- cyber-checklist
- audit
- patch
September 6, 2026
Why Does Human Risk Spike at the Start of the Year?
Across industries and company sizes, we see the same pattern repeat every year: human-driven security incidents increase in January.
- phishing
- awareness
- humanrisk