Mary Beth Minto

April 17, 2026

Who’s Minding the Agent? A New Framework for AI Identity and Access Control

An invoice-processing agent with broad financial system access gets manipulated through prompt injection, malicious instructions embedded in the data it reads, and begins initiating fraudulent payments, all under a shared service account with no clear audit trail. A customer-support agent with access to CRM, knowledge-base, and email tools starts combining […]
March 31, 2026

When the Bots Run the Incident Response: What AI Agents Mean for Enterprise Security

Our latest paper maps the security challenges of a world where AI doesn’t just answer questions — it acts. Picture this: it’s 2 a.m., an outage hits your production infrastructure, and no human has noticed yet. Within seconds, an autonomous AI agent wakes up, pulls the relevant logs, creates a […]
February 9, 2026

Cisco Donates Project CodeGuard to Coalition for Secure AI

Press Release:Boston, MA – 9 February 2026 – OASIS Open, the global open source and standards consortium, announced that Cisco has donated Project CodeGuard, an AI model-agnostic security coding agent skills framework and ruleset, to the Coalition for Secure AI (CoSAI), an OASIS Open Project. Read the full press release […]
February 9, 2026

Cisco’s Donation of Project CodeGuard to CoSAI: A New Chapter in Securing AI-Generated Code

In October 2025, Cisco open-sourced Project CodeGuard, a new framework that embeds secure-by-default practices directly into AI coding agent workflows. I am honored and excited to announce that Cisco has donated Project CodeGuard to CoSAI.
January 27, 2026

Coalition for Secure AI Releases Extensive Taxonomy for Model Context Protocol Security

OASIS Open, the international open source and standards consortium, announced the release of the “Model Context Protocol (MCP) Security” white paper from the Coalition for Secure AI (CoSAI), an OASIS Open Project.
December 23, 2025

Operationalizing the CoSAI Risk Map (CoSAI-RM)

CoSAI Project Governing Board (PGB) co-chair Omar Santos explains how to operationalize the CoSAI Risk Map (CoSAI-RM) through a structured, persona-based approach that moves beyond ad-hoc security measures. Santos shares a practical, four-phase approach for turning CoSAI-RM from a conceptual model into an actionable risk management strategy, from persona-based risk […]