<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>CISO Advisory Group — Insights</title><description>CISO-to-CISO perspectives on AI agent security, identity, post-quantum migration and regulatory resilience.</description><link>https://cisoadvisorygroup.com/</link><language>en-gb</language><item><title>The five tollgates: a practical control model for AI agents</title><link>https://cisoadvisorygroup.com/insights/five-tollgates-control-model-for-ai-agents/</link><guid isPermaLink="true">https://cisoadvisorygroup.com/insights/five-tollgates-control-model-for-ai-agents/</guid><description>Identity, Authorisation, Execution, Observation and Containment — a simple way to decide whether an AI agent is safe to run, and what to fix first.</description><pubDate>Tue, 22 Sep 2026 00:00:00 GMT</pubDate><category>Agentic AI</category><category>Identity</category><category>Governance</category><author>cisoadvisorygroup@gmail.com (Aidan Tolson)</author></item><item><title>Post-quantum discovery: why 2028 is closer than it looks</title><link>https://cisoadvisorygroup.com/insights/pqc-discovery-2028-is-closer-than-it-looks/</link><guid isPermaLink="true">https://cisoadvisorygroup.com/insights/pqc-discovery-2028-is-closer-than-it-looks/</guid><description>The NCSC expects cryptographic discovery and an initial migration plan by 2028. Here is why that milestone is harder than it sounds, and how to approach it.</description><pubDate>Tue, 15 Sep 2026 00:00:00 GMT</pubDate><category>Post-quantum</category><category>Cryptography</category><category>Regulation</category><author>cisoadvisorygroup@gmail.com (Aidan Tolson)</author></item></channel></rss>