<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>CISO on carney.wiki</title><link>https://carney.wiki/tags/ciso/</link><description>Recent content in CISO on carney.wiki</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Sat, 10 Jan 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://carney.wiki/tags/ciso/index.xml" rel="self" type="application/rss+xml"/><item><title>The CISO's Guide to Governing Generative AI</title><link>https://carney.wiki/blog/the-cisos-guide-to-governing-generative-ai/</link><pubDate>Sat, 10 Jan 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/the-cisos-guide-to-governing-generative-ai/</guid><description>Generative AI is now part of the enterprise control surface.
That is the CISO&amp;rsquo;s problem, whether the CISO asked for it or not.
Employees are using AI tools. Vendors are embedding AI features. Engineering teams are experimenting with model APIs. Business teams are building copilots. Data teams are connecting retrieval systems to internal knowledge.
Some of this is useful.
Some of it is risky.
Most of it is moving faster than the policy process.</description></item></channel></rss>