Steven Rose

Following recent public discussion around AI, national security and sovereignty, our CEO Paul Jenkinson shared his perspective on why control, jurisdiction and long-term assurance matter as AI moves into core Defence and Government capability. As AI shifts from experimentation into operational use, questions of data control, dependency and governance are no longer abstract. They shape resilience, autonomy and freedom of action over time. This is not about any single supplier. It is about being clear-eyed on the architectural and policy choices being made today, and their long-term implications. #SovereignAI #NationalSecurity #Defence

12

We've used our experience of making GenAI work for organisations like The Insolvency Service, Warwickshire Police, Taylor Wessing, UK Ministry of Defence, Insight, Department for Business and Trade and PXC to build a framework for planning and delivering GenAI in regulated industries and government bodies. Below is a short taster video and a longer version is available on the Great Wave AI website (link in comments below). We deliver workshops using this framework for free because the case for our platform depends on clients seeing beyond standalone solutions and understanding what the future of #GenAI in their business should look like. If you'd like us to talk to you about this or anything else - please just get in touch either on here or via contact@greatwave.ai.

73

4 Comments

“As quantum technology advances, upgrading our collective security is not just important – it’s essential.” , NCSC Chief Technical Officer Ollie Whitehouse UK's cyber security agency, @National Cyber Security Centre, has issued new guidance to help UK prepare for and protect against threats posed by future developments in #quantum computing (#PQC). The new guidance STRONGLY encourages organisations to begin preparing for the transition NOW to allow for a "smoother, more controlled migration that will reduce the risk of rushed implementations and related security gaps". 📆 It outlines three phases for migration:  ▶️ To 2028 – identify cryptographic services needing upgrades and build a migration plan.  ▶️ From 2028 to 2031 – execute high-priority upgrades and refine plans as PQC evolves.  ▶️ From 2031 to 2035 – complete migration to PQC for all systems, services and products. The good news is that your can start protecting your data today, with the resources available to you. RHEL 10 (and 9.6) is the first enterprise distribution to integrate quantum-resistant algorithms. Speak to your Red Hat account team and/or your partner to build an upgrade plan today to meet the security and government regulations coming to you! Not on RHEL yet? Download #RHEL at no-cost here for dev purposes: https://lnkd.in/dDbX525b

92

A great third "AI for Peers" session at UK House of Lords today from Digital Policy Alliance, Chaired by Lord Kulveer Ranger. The topic was Robust AI covering its four pillars of: Security vulnerabilities; Data quality Issues; Operational Fragility; and Reliability failures. We were led by three experts John McDermid Zena Wood and Alan Brown and attended by a room full of Peers and their advisors. We meet again in June - find out more https://lnkd.in/ejGhCQ76 #AIExperts #digileaders

41

1 Comment

Let's all get real.... For European companies, #sovereignAI doesn't mean hosting OpenAI on a UK cloud server. And your business doesn't need an #AI Agent, it needs 100+ of them... so you're looking for an AI Management System (#AIMS) ... right? I think this article covers it...

3

I didn't get a chance to repost this yesterday - due to other discussions about #data and #digital ironically! It's definitely worth a read though. And yes, even if you run a small or medium-sized business... #cyber #risk #resilience #governance #board #sme Peter Quintana Paul Stevenson Matthew Barrington-Packer Sunil S. Krishnan Tony Stubbs FCA, FRSA

10

1 Comment

Police ready to embrace AI and data driven tech to ‘anticipate’ crime trends. Police Scotland's deputy chief constable says force business plan sets out 'intention to develop capabilities surrounding data science, artificial intelligence and analytics' ⬇️ https://lnkd.in/dJMaB25F

51

Security is like health: it's far better to invest in preventative measures than to treat problems after they occur. Like health, security often takes a back seat to other priorities.. until the day it doesn't. Ultimately, both are more about people and culture than about technology. Just as some companies promote unhealthy products and habits, the tech industry often pushes insecure frameworks and tools (like using LLM coding assistants without a structured review). Slapping security technology on top of a security-naive system is like putting on athletic gear while maintaining an unhealthy lifestyle, you might think it looks good, but doesn’t address the real problem. Its worth saying that security is also not health - for example, you have adversaries in security. Its also true that both health & security require prevention AND treatment. Finally healthcare systems don't have a great security reputation, given the lack of investment, complex ecosystem, and highly visible failures in the news. What can we learn from health? The UK's NHS has recognised the need to shift from treatment to prevention. Its new 10-year plan focuses on three key areas: decentralisation (local health hubs), personalisation (AI and genomic data), and early detection (screening and digital tools). These same principles apply directly to improving security resilience. * by distributing responsibility, * tailoring protections to context, and * catching threats early, organisations can build systems that stay healthy by design, not just survive attacks. The key question: how do i know if i am (security) healthy? and how healthy is appropriate for my context? There are Frameworks for this: NCSC Cyber Assessment Framework, NIST Cybersecurity Framework (CSF), and your vendor's Well-Architected framework. Choose the one you like, and use the framework with understanding, not imitation. "Avoid the Cargo Cult" https://lnkd.in/e4ht7Mgt #security #health #culture

15

Tikos is now an approved supplier to the UK Ministry of Defence (MoD). Defence & Security is arguable the most critical environment for deploying AI, autonomous and agentic systems. Every stage of a system life-cycle in these deployments needs careful consideration and best-in-class tooling for testing, verification, validation, monitoring and reporting. Well done to the whole team👏👏👏 for passing the rigorous assessment from Constellia and we look forward to working with the MoD. #DefenceTech #AIAssurance #ResponsibleAI #AIGovernance

34

6 Comments

As we are all aware, there has been an increase in public discussion following reports that the UK Ministry of Defence has awarded a significant AI-related contract to a foreign, US-linked technology provider. Alongside the reporting, MPs and independent advisers have raised questions around data jurisdiction, long-term dependency, and how national security risk is assessed when overseas firms supply core digital infrastructure. That discussion is worth engaging with, because it surfaces an issue that is often underestimated. When people talk about “sovereign AI”, they are not usually talking about performance, models, or interfaces. They are talking about control. In practical terms, sovereignty in AI is about where data lives, which legal jurisdictions apply, whether systems can function without external reach-back, and who ultimately decides how those systems are updated, governed and evolved. These questions matter most in Defence, National Security and Government environments, where AI is no longer an experimental tool but an operational capability. In those contexts, dependency is not an abstract concern. It becomes a strategic and operational risk. If AI systems rely on foreign-controlled platforms, foreign legal frameworks, or opaque supply chains, governments can find themselves constrained in moments that matter most: during a crisis, escalation, policy divergence, or shifts in geopolitical alignment. Access, continuity and autonomy cannot be assumed simply because systems are “working today”. There is also a long-term risk. Once AI becomes embedded into planning, intelligence, logistics or decision-support workflows, switching away from it is rarely trivial. Vendor lock-in, architectural coupling and data gravity can quietly reduce a nation’s freedom of action over time. From our perspective at Whitespace, this is why we take a deliberately conservative approach. We are a UK-based company, and our technology is designed so that customers retain full control of their data and deployments. Customer data is not shared, reused or connected to external platforms by default, and systems can operate in disconnected or classified environments where required. Those constraints are built into the architecture rather than managed through policy assurances alone. The current debate is not about any single contract or supplier. It reflects a growing recognition that as AI becomes embedded into national capability, questions of jurisdiction, assurance and control need to be addressed explicitly, early, and with technical realism. That is a conversation worth having openly and with clarity, because the decisions made now will shape national resilience for years to come.

78

10 Comments

🕵️ 𝗪𝗵𝗲𝗻 𝗖𝗼𝗿𝗽𝗼𝗿𝗮𝘁𝗲 “𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻𝘀” 𝗧𝘂𝗿𝗻 𝗜𝗻𝘁𝗼 𝗪𝗼𝗿𝗸𝗽𝗹𝗮𝗰𝗲 𝗦𝗽𝘆𝗶𝗻𝗴 Over a year ago, I wrote about the rise of untrained, unsupervised “𝘤𝘰𝘳𝘱𝘰𝘳𝘢𝘵𝘦 𝘪𝘯𝘷𝘦𝘴𝘵𝘪𝘨𝘢𝘵𝘰𝘳𝘴” inside large organisations – people running quasi-investigations without the legal constraints or oversight that bind public bodies. https://lnkd.in/dfdh3fYE ​ Today’s Sky News story about an SNP staffer allegedly bugging a female MSP’s office with a covert listening device is another angle on the same problem: employees spying on other employees. https://lnkd.in/dGd9t_u6 My view hasn’t changed. Unlawful investigative practices, privacy intrusions, and human rights violations are far more common than most people think – and too often buried under NDAs, legal privilege, and PR spin. ​ More times than I care to remember, I’ve had to push back when HR or Compliance asked for “monitoring” that clearly crossed the line – from seemingly innocuous time‑tracking to deep inspection of personal communications on systems never explicitly ring‑fenced as “work‑only”. ​ 𝗧𝘄𝗼 𝗧𝗮𝗸𝗲𝗮𝘄𝗮𝘆𝘀:  • If you’re in security, HR, Legal or Compliance, you must understand the legal and ethical boundaries of workplace surveillance and investigation. Please dont put that request to your CISO.  • If you’re an employee, assume work systems are for work only – and be cautious about what you put on any device or channel your employer controls. ​ The advice at the end of my original article still stands. 

10

1 Comment

I wanted to write up an excellent panel this week organised by the Coalition for Global Prosperity in London. Subject: 'A Fracturing Alliance? The Future of UK-US Relations' - very apt, and occurring at the same time as King Charles's speech to the US Congress! Panel led by Ryan Henson from the CGP, with Molly Blackall from the i paper, Graeme Downie MP, David Reed MP and Sarah Elliott, Lady Elliott of Mickle Fell from "Republicans Overseas". Top takeaway, the relationship is under more stress than it ever has been since .. 1776, perhaps? Suez?  This is not a “bump in the road”, it’s a new direction entirely and we don’t have a route map. Whose fault is this? On our side, the British Government has kept too many secrets, and failed to do the strategic comms so the public still don't understand the threats from Russia, or indeed China. HMG has not “been honest with the public”. It’s not been too honest with itself either … “we love our secrets”, yes we do, but we don’t use them. That comms failure means the British people are still not grasping that the post-1989 peace dividend is over. It’s gone. Can the fracture be repaired? Perhaps. It depends on what happens in the USA, largely beyond Europe’s control. As Ryan said, back in 2017 the prevailing attitude in the UK was to hope to ride it out - immensely and unforgivably foolish. Bad analysis, bad planning, bad faith. Have we really changed? The discussion got quite heated at times – there were audible gasps and muttering in the audience as Sarah Elliott pushed the current Republican Vance/Vought line, alongside nostalgia for the golden days of the “special relationship” and our shared laws, language and history. The new line is “see how that goes, if you don’t change” - where “change” basically means behave more like Viktor Orbàn. It felt like that we Brits were being asked to love Mr Hyde, because didn’t we all used to love Dr Jekyll? The event was very well attended - full house. There were a lot of younger attendees, university age or early career - same has been true of similar recent discussions at the nearly National Liberal Club organised by Noel Hadjimichael FRSA, who makes a point of trying to bring in the the younger faces.  It's their future at stake. Refreshing to hear MPs from opposite sides of the house talking constructively and sensibly about a contentious issue.  Press attention is inevitably drawn to the big egos in politics, but many other MPs take their work seriously and try to get on with the job. Great chairing by Ryan, and special kudos to Molly Blackall for pluckily saying what needed to be said about the US undermining UN and NATO. Let’s stop pretending otherwise. Sally Walker Tom S. Thomas Nurcombe https://lnkd.in/eciexRbe

5

2 Comments

These are good reads (or listens), and are guaranteed to provide you information about at least one or two IED/ordnance-related incidents you missed last week. #IED #IGMBT #EOD #BombTech #CIED

16

Kahootz Is Reducing Supply Chain Risk For Defence The UK Government has placed increased scrutiny on defence supply chains. SMEs working on defence contracts are now expected to demonstrate robust data handling practices. - Using a sovereign UK provider helps organisations: - Demonstrate compliance more easily - Simplify assurance processes - Avoid complex data transfer agreements - Reduce exposure to overseas jurisdictional risk It also supports the UK’s broader strategic objective of strengthening domestic capability and resilience. Kahootz the leading UK SAAS collaboration platform, leads the way. Message me direct for more information #securesupplychain #defence #innovation #mod

8

One month on, and the consequences are crystal clear. The London art dealer at the centre of the UK’s first-ever terrorism financing prosecution involving a regulated art market participant has now been sentenced to 2.5 years in prison. The Met have called this “a warning to all art dealers”, a message underscored by the seizure of 23 artworks, including pieces attributed to Picasso and Warhol, now set to be sold with proceeds reinvested into the CPS and Home Office. It confirms what I talk about every day with our clients: AML obligations in the art world are no longer optional or reputational. They are legal. And very enforceable. With more regulatory changes on the horizon, this case sets the tone for what enforcement now looks like in the art market.

23

The UK Government has reshaped its Cyber & Specialist Operations (CSOC) to reflect the ambition of the 2025 Strategic Defence Review. Recognising that cyber is likely the first domain of defence and attack during conflict. One hopes, alongside the NCSC, the UK government takes a more active approach to cyber defense for UK industry, as our partner nations are doing the same. The public sector does not have the breadth and depth of coverage to secure the UK's industry; 99% of UK industry is comprised of SMEs. SMEs that support medium and large companies. Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Veritas GRC UK Ministry of Defence #cybersecurity #cyberriskmanagement https://lnkd.in/eG4pFHtE

4

Haven't heard of an RPO? Every business must know its Recovery Point Objective (RPO). #PeraPrometheus #SecurityConsultant #UKDefenceIndustry #RecoveryPointObjective #InformationAssurance #Cybersecurity #CyberResilience #Director #CEO #Operations #ManagingDirector Recovery Point Objective | Pera Prometheus | Security Consultant | UK Defence Industryyoutube.com Open Emoji Keyboard

7