Governance & privacy7 MIN READ
Turning AI governance principles into executable controls
A principle becomes operational only when it is translated into requirements, control owners, enforcement points, evidence and responses to failure.
THE SOFTLANDER BLOG
March 2026
Softlander blog perspectives published in March 2026.
In March 2026
7 articlesSecurity engineering6 MIN READ
Designing embedded security when you cannot patch quickly
A device in the field may be unreachable for months and in service for a decade. That constraint should change the architecture, not just the update policy.
Security engineering6 MIN READ
Write security requirements the team can actually test
"The system shall be secure against unauthorised access" cannot be implemented, reviewed or verified. Security requirements become useful when each one names an actor, a condition and an observable result.
Strategy & transformation6 MIN READ
Adoption is part of agent reliability
An agent is not reliable if people avoid it, over-trust it or route around its controls. Adoption evidence belongs beside technical performance evidence.
Agent security6 MIN READ
Prompt injection is a workflow-security problem
Prompt injection becomes consequential when untrusted content can steer a model towards privileged tools. Reduce the blast radius by redesigning the workflow around trust and authority.
Architecture & engineering6 MIN READ
The foundation model is only one dependency in an agentic system
Model selection matters, but production behaviour emerges from an entire dependency graph. Review the system that turns model output into business effects.
Evaluation & assurance6 MIN READ
Why financial-services agents require more than model testing
Financial agents combine models, data, tools, people and third parties, so assurance has to follow the complete regulated workflow.
KEEP EXPLORING
Take the thinking
into your next discussion.
Read the method, assumptions and questions to ask.