by Mike Mullin | Risk & Governance
How to Audit What AI Your Employees Are Actually Using Shadow IT required a purchase. Shadow AI requires a paste. That’s the entire problem in one sentence. No procurement request. No IT ticket. No approval chain to slow anyone down – just a browser tab...
by Mike Mullin | Cybersecurity / Cyber Insurance
The Gap Between Having Coverage and Getting Paid Buying a cyber insurance policy feels like closing a loop. There’s a declarations page, a premium, a set of controls you attested to, and a sense that if something goes wrong, the carrier will handle it. Then an...
by Mike Mullin | AI Readiness & Operational Transformation
Shadow IT has been a known problem for years. Shadow AI is newer, faster, shinier – and far harder to detect. What most organizations have not yet recognized is that these two risks are no longer separate. They have merged. Shadow AI now attaches itself to...
by Mike Mullin | IT Services Provider Management
Shadow IT isn’t just costing your business money on unused subscriptions. It is quietly invalidating your cyber insurance coverage and exposing you to regulatory penalties that never appear in any IT audit. When an unapproved tool is found to have been running...
by Mike Mullin | Risk & Governance
Most New Jersey and New York City-area businesses treat business continuity – keeping the business going after a disruption – as an IT problem. But when a disruption hits, the real damage shows up on the balance sheet – lost revenue, denied insurance...
by Mike Mullin | IT Services Provider Management
The Costly Gap Between IT Assumptions and Contractual Reality Most organizations assume their IT services provider is responsible for far more than they actually are. It is one of the most common and costly misunderstandings we see when we conduct reviews for finance...
by Mike Mullin | AI Readiness & Operational Transformation
Commercial real estate is not struggling with AI capability. The models are ready. The gap is implementation. Most of what gets labeled as AI in CRE today is either a chatbot connected to a document repository or a generic productivity tool repackaged as innovation....
by Mike Mullin | Cybersecurity / Cyber Insurance
The New Purview‑Abuse Phishing Threat Targeting Your Employees A new phishing technique is circulating that looks so legitimate it is catching even experienced finance and operations staff off guard. It arrives as a Protected Microsoft Purview Message, complete with...
by Mike Mullin | Risk & Governance
Why Finance Teams Are the New Cybersecurity Blind Spot Most organizations think of cybersecurity as something that happens in the server room or inside the IT department. But more and more, the biggest risks aren’t coming from the places you’d expect. They’re coming...
