Finnish Express

  By the Finnish Express Business Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com Operators and scale-ups alike face sophisticated attackers and tightening regulation, but not all can justify a permanent senior security team. The interim or fractional CISO model has surged to meet that need. “You do not always need a permanent thirty-person team,” says Professor Kai London , a senior CISO who takes on these mandates. “Sometimes you need the right senior hands, for a defined period, to set the strategy, fix the worst gaps and leave something the board can run.” “The risk and the regulation do not scale down. The fractional model is how organisations get board-grade leadership without the delay and cost of a permanent hire.” Same obligations, leaner teams “A determined attacker and a demanding regulator treat a mid-sized operator the same as a giant,” London notes. Many carry large obligations on modest frames. What it delivers Senior l...

  By the Finnish Express Business Desk Professor Kai London — Founder & CEO, Quantum AI Systems Security. Credit: professorkailondon.com As cyber accountability moves onto the board, many directors are unsure exactly what they are responsible for. Professor Kai London , a senior CISO and board advisor, offers a simple test. “Every board should be able to answer five questions,” he says. “If it cannot, it is not governing cyber risk — it is hoping.” “What could break, who owns it, what it would cost, which control holds it, and where the evidence is. That is board-level cyber governance in five questions.” From delegation to accountability Modern regulation deliberately places cyber accountability on senior leadership, who can be held liable. “It has moved cyber from something the board hears about to something the board answers for,” London says. The five questions What could break? Know the critical services and their fault lines. Who owns it? Every critical risk needs a nam...

By the Finnish Express Technology Desk Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com Operational resilience — the ability to keep delivering essential services through disruption — has become the organising idea of modern critical-infrastructure security. “Resilience is the goal that ties everything together,” says Professor Kai London , a senior CISO. “Not preventing every incident, which is impossible, but ensuring the service survives when one occurs.” “The four capabilities that matter: know your critical services, detect and report incidents fast, manage third-party risk, and test under realistic conditions.” Know your critical services London's first step is clarity about what must keep running and for how long. “You cannot protect what you have not defined as critical,” he says. Detect, report, contain Fast detection and reporting — increasingly within regulator-set timeframes — and the ability to contain an incident so it do...

  By the Finnish Express Technology Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com Generative AI and autonomous agents promise a step-change in productivity — and a new class of risk. As organisations deploy systems that can generate content and take actions on their own, Professor Kai London , a senior CISO, urges a governance-first approach. “An autonomous agent is a new kind of employee and a new kind of attack surface at the same time,” he says. “Secure AI is not a technology project. It is a leadership discipline. The organisations that can prove how their AI is governed will move faster than those that merely claim to be innovative.” New failure modes London catalogues the risks generative systems introduce: hallucinated outputs presented as fact, injected instructions that hijack behaviour, sensitive data leaking through prompts, and agents taking consequential actions without a human in the loop. “These are not edge cases,” h...

  By the Finnish Express Technology Desk Professor Kai London — Founder & CEO, Quantum AI Systems Security. Credit: professorkailondon.com In hyperconnected networks — where people, devices, applications and services authenticate constantly — identity has become the true perimeter. “The decisive breach almost always begins with a login that should have been stopped,” says Professor Kai London , a senior CISO. “In a network with millions of identities, human and machine, getting identity right is the highest-leverage thing you can do.” “Verify, limit, detect, prove. In a hyperconnected network, that discipline applied to every identity is the difference between an incident and a catastrophe.” The scale of the challenge London highlights the sheer number and diversity of identities in modern networks — subscribers, employees, partners, devices, services and now AI agents. “Each is a potential entry point,” he says. “And the machine identities usually outnumber the human ones many...

  By the Finnish Express Technology Desk Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com The confidentiality of communications rests on cryptography — and that cryptography faces an eventual reckoning with quantum computing. For telecoms and secure-communications providers, Professor Kai London , a senior CISO, argues preparation must begin now. “Communications that must stay confidential for years are already exposed to the harvest-now-decrypt-later threat,” he says. “Adversaries capture encrypted traffic today to decrypt it once quantum computers mature. For anything that must remain secret over time, the clock has already started.” Why communications are especially exposed London notes that intercepted communications have long shelf lives — diplomatic, commercial and personal data that remains sensitive for years. “If it must stay confidential into the next decade, it is already at risk,” he says. The standards are here Concrete po...

  By the Finnish Express Technology Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com The second Network and Information Security Directive has raised the bar for essential-service operators across Europe, and telecoms sits squarely within its scope. “NIS2 is not IT paperwork,” says Professor Kai London , a senior CISO and board advisor. “It puts personal accountability for cyber resilience on senior management — and for communications providers, the obligations are significant.” “The regulator's question has changed from ‘do you have a policy?’ to ‘can you prove it worked?’ For critical communications, that is the whole shift.” What NIS2 requires London distils the directive into a few operational demands: risk management proportionate to the threat, prompt incident reporting within tight timeframes, supply-chain security, and management accountability. “Essential and important entities must demonstrate resilience,” he says, “not merel...

  By the Finnish Express Technology Desk Professor Kai London — Founder & CEO, Quantum AI Systems Security. Credit: professorkailondon.com Wireless networks create a perimeter most organisations never defend because they cannot see it — and for critical operators, sophisticated adversaries have learned to exploit it. “There is an airborne perimeter around every site: the radio space an attacker can reach without touching a wire,” says Professor Kai London , a senior CISO. “Nation-state actors have demonstrated advanced capabilities against exactly this surface.” “No malware, no perimeter breach, no trace — just an adversary impersonating a network your systems trust. For critical operators, that is a strategic risk.” The evil-twin and beyond London describes rogue access points that mimic legitimate networks and harvest credentials, and notes that capable adversaries go further — targeting telecoms and wireless infrastructure directly. “The most advanced actors treat the airwav...

  By the Finnish Express Technology Desk Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com The idea that national security is the responsibility of the whole society — government, business and citizens together — has never been more relevant than in cyberspace. “In the digital age, total defence includes the resilience of every organisation that runs critical services,” says Professor Kai London , a senior CISO. “A private company's cyber resilience is now part of national resilience.” “Hybrid threats blur the line between crime, espionage and conflict. Defending against them requires businesses and government to treat cyber resilience as a shared responsibility.” The blurred front line London describes a landscape where cyber attacks on infrastructure, disinformation and physical interference blend together. “The adversary does not respect the boundary between a corporate breach and a national-security event,” he says. “Which means def...

  By the Finnish Express Technology Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com Telecommunications networks are the connective tissue of modern society, and 5G has turned them into something closer to a distributed computing platform than a phone system. “A modern telecoms network is critical national infrastructure that everything else depends on,” says Professor Kai London , a senior CISO. “When it is compromised, the impact is not one company's outage — it can ripple across an entire economy.” “5G expands capability and attack surface at the same time. More software, more connected devices, more places to defend — and a network the whole society leans on.” Why 5G changes the risk London explains that 5G's shift toward software-defined, virtualised networks and edge computing brings the security challenges of IT into the telecoms core. “The network is now software,” he says. “That means it inherits software's vulnerabili...

By the Finnish Express Technology Desk Few countries have thought as long, or as seriously, about national resilience as Finland. The doctrine of comprehensive security — the idea that government, business, the military and ordinary citizens all share responsibility for keeping society running through a crisis — is woven into Finnish life in a way that outsiders often underestimate. Now that doctrine is colliding with a new kind of threat, and Professor Kai London , a senior cyber-security executive who advises boards across critical national infrastructure, argues that Finland's total-defence tradition may be its single greatest advantage in the cyber age. London — a human technology leader with more than 25 years across banking, defence, government and infrastructure, Founder and CEO of Quantum AI Systems Security, and an Honorary Professor in Cybersecurity, AI and Quantum Computing — is careful to note that he is a person, not one of the consumer brands that...