References and Sources

This section lists the sources cited throughout Tools. The numbered source index is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. Entries are grouped by category. The earlier volumes of the series are cited as (Nordqvist, 2025) for Architecture as Code and (Nordqvist, 2026) for AI Governance to AI Operations; a citation of an earlier volume records where the series defines a tool and is never the source for a fact about third-party software.

Numbered source index

The Transformed Architecture

• Source [1]: Nordqvist, G. (2025). Architecture as Code. The Transformed Architecture, Book 1, published at aac.geon.se. Available at: https://aac.geon.se/ (accessed 2026-11-11). Referenced in: Chapter 1: Introduction: A Toolbox for the Series, Chapter 2: The Anatomy of a Tool: Kinds, Identifiers and Lifecycle, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 6: Platform and Infrastructure Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 15: Observability and Service Objective Tools, Chapter 17: Capacity, Cost and Energy Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 25: Conclusions: One Toolbox for the Series, Appendix C: The Toolbox Maturity Method, About the Author.

• Source [2]: Nordqvist, G. (2026). AI Governance: Governing Artificial Intelligence in European Enterprises and Public Authorities. The Transformed Architecture, Book 2, published at aig.geon.se. Available at: https://aig.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: A Toolbox for the Series, Chapter 2: The Anatomy of a Tool: Kinds, Identifiers and Lifecycle, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 6: Platform and Infrastructure Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 13: Response, Recovery and Resilience Tools, Chapter 17: Capacity, Cost and Energy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 24: Building a Toolbox: Nordvik Region and Hansa Mutual, Chapter 25: Conclusions: One Toolbox for the Series, Appendix C: The Toolbox Maturity Method, About the Author.

• Source [3]: Nordqvist, G. (2026). AI Platform and Security: Building and Securing AI Platforms in European Enterprises and Public Authorities. The Transformed Architecture, Book 3, published at aips.geon.se. Available at: https://aips.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 2: The Anatomy of a Tool: Kinds, Identifiers and Lifecycle, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 6: Platform and Infrastructure Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 15: Observability and Service Objective Tools, Chapter 17: Capacity, Cost and Energy Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 24: Building a Toolbox: Nordvik Region and Hansa Mutual, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [4]: Nordqvist, G. (2026). AI Red Team: AI as an Active Part of Cyber Defence in European Enterprises and Public Authorities. The Transformed Architecture, Book 4, published at aired.geon.se. Available at: https://aired.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 16: Change, Restore and Runbook Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [5]: Nordqvist, G. (2026). AI Threat: Are the Dystopias Coming True? Evidence, Risk and Response for European Enterprises and Public Authorities. The Transformed Architecture, Book 5, published at aithreat.geon.se. Available at: https://aithreat.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 24: Building a Toolbox: Nordvik Region and Hansa Mutual, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [6]: Nordqvist, G. (2026). The Transformed Security Architect: Role, Craft and Career in the Age of AI in European Enterprises and Public Authorities. The Transformed Architecture, Book 6, published at tsa.geon.se. Available at: https://tsa.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 2: The Anatomy of a Tool: Kinds, Identifiers and Lifecycle, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 24: Building a Toolbox: Nordvik Region and Hansa Mutual, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [7]: Nordqvist, G. (2026). AI Boss: When Artificial Intelligence Manages People in European Enterprises and Public Authorities. The Transformed Architecture, Book 7, published at aiboss.geon.se. Available at: https://aiboss.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [8]: Nordqvist, G. (2026). AI Blue: How Artificial Intelligence Transforms the Blue Team in European Enterprises and Public Authorities. The Transformed Architecture, Book 8, published at aiblue.geon.se. Available at: https://aiblue.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: A Toolbox for the Series, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [9]: Nordqvist, G. (2026). AI Purple: How Red and Blue Learn Together When AI Joins the Loop in European Enterprises and Public Authorities. The Transformed Architecture, Book 9, published at aipurple.geon.se. Available at: https://aipurple.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: A Toolbox for the Series, Chapter 2: The Anatomy of a Tool: Kinds, Identifiers and Lifecycle, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 15: Observability and Service Objective Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 24: Building a Toolbox: Nordvik Region and Hansa Mutual, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

• Source [10]: Nordqvist, G. (2026). AI Operations: How Artificial Intelligence Transforms IT Operations in European Enterprises and Public Authorities. The Transformed Architecture, Book 10, published at aiops.geon.se. Available at: https://aiops.geon.se/ (accessed 2026-11-11). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: A Toolbox for the Series, Chapter 2: The Anatomy of a Tool: Kinds, Identifiers and Lifecycle, Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 4: Architecture and Decision Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 6: Platform and Infrastructure Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 9: Supplier, Contract and Sovereignty Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 13: Response, Recovery and Resilience Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 15: Observability and Service Objective Tools, Chapter 16: Change, Restore and Runbook Tools, Chapter 17: Capacity, Cost and Energy Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Chapter 24: Building a Toolbox: Nordvik Region and Hansa Mutual, Chapter 25: Conclusions: One Toolbox for the Series, About the Author.

Research and practitioner literature

• Source [11]: Rogers, E. M. (2003). Diffusion of Innovations. 5th edition. New York, NY: Free Press. ISBN 978-0-7432-2209-9. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [12]: Kotter, J. P. (2012). Leading Change. Boston, MA: Harvard Business Review Press. ISBN 978-1-4221-8643-5. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [13]: Westrum, R. (2004). A typology of organisational cultures. BMJ Quality & Safety, 13(suppl 2), pp. ii22–ii27. Available at: https://doi.org/10.1136/qshc.2003.009522. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [14]: Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds.) (2016). Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/table-of-contents/. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [15]: Big Sleep team, Google Project Zero and Google DeepMind (2024). From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code. Project Zero blog, 1 November 2024. Available at: https://projectzero.google/2024/10/from-naptime-to-big-sleep.html (accessed 2026-11-01). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools.
• Source [16]: McGregor, S. (2021). Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. Proceedings of the AAAI Conference on Artificial Intelligence 35(17), 15458-15463; preprint arXiv:2011.08512, 17 November 2020. Available at: https://arxiv.org/abs/2011.08512 (accessed 2026-11-10). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [17]: PagerDuty (2026). Incident Commander. PagerDuty Docs, Incident Response guide (practitioner documentation of the roles of an incident response process; no publication date shown on the page). Available at: https://docs.pagerduty.com/ops-guides/incident-response-guide/incident-commander (accessed 2026-11-10). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [18]: National Cyber Security Centre (2019). Offline backups in an online world. NCSC blog, 13 August 2019. Available at: https://www.ncsc.gov.uk/blog-post/offline-backups-in-an-online-world (accessed 2026-11-10). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [19]: FinOps Foundation (2026). FinOps for AI Overview. FinOps Foundation paper, page last updated 28 October 2026. Practitioner guidance, not peer reviewed. Available at: https://www.finops.org/wg/finops-for-ai-overview/ (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [20]: Chen, L., Zaharia, M. & Zou, J. (2023). FrugalGPT: How to Use Large Language Models While Reducing Cost and Improving Performance. arXiv:2305.05176, submitted 9 May 2023. Available at: https://arxiv.org/abs/2305.05176 (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [21]: Kwon, W., Li, Z., Zhuang, S., Sheng, Y., Zheng, L., Yu, C. H., Gonzalez, J. E., Zhang, H. & Stoica, I. (2023). Efficient Memory Management for Large Language Model Serving with PagedAttention. 29th ACM Symposium on Operating Systems Principles (SOSP 2023); arXiv:2309.06180. Available at: https://arxiv.org/abs/2309.06180 (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [22]: Rzadca, K., Findeisen, P., Swiderski, J., Zych, P., Broniek, P., Kusmierek, J., Nowak, P. K., Strack, B., Witusowski, P., Hand, S. & Wilkes, J. (2020). Autopilot: Workload Autoscaling at Google Scale. Proceedings of the Fifteenth European Conference on Computer Systems (EuroSys 2020), ACM. DOI: 10.1145/3342195.3387524. Available at: https://research.google/pubs/autopilot-workload-autoscaling-at-google-scale/ (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [23]: Hyndman, R. J. & Athanasopoulos, G. Forecasting: Principles and Practice (3rd edition). OTexts, online edition. Available at: https://otexts.com/fpp3/ (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [24]: Alvidrez, M. (2017). Embracing Risk. Chapter 3 of Site Reliability Engineering, O'Reilly Media, online edition (copyright Google, Inc.). Available at: https://sre.google/sre-book/embracing-risk/ (accessed 2026-11-10). Referenced in: Chapter 18: Mandate, Delegation and Autonomy Tools.

Standards and frameworks

• Source [25]: PeopleCert. ITIL Certifications. PeopleCert, certification pages (ITIL 4 Practitioner modules; the page also lists ITIL Version 5). Available at: https://peoplecert.org/ITIL4-practices. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [26]: Consortium for Service Innovation. KCS v6 Practices Guide: The Evolve Loop. Knowledge-Centered Service, version 6. Available at: https://library.serviceinnovation.org/KCS/KCS_v6/KCS_v6_Practices_Guide/030/040. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [27]: The Open Group (2022). The TOGAF Standard, 10th Edition. The Open Group, April 2022. Available at: https://www.opengroup.org/togaf. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [28]: Sherwood, J., Clark, A. & Lynas, D. (2005). Enterprise Security Architecture: A Business-Driven Approach. San Francisco, CA: CMP Books. ISBN 978-1-57820-318-5. Available at: https://sabsa.org/. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [29]: Forum of Incident Response and Security Teams. Traffic Light Protocol (TLP), version 2.0. FIRST, authoritative from August 2022. Available at: https://www.first.org/tlp/. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [30]: European Commission. The General-Purpose AI Code of Practice. European AI Office, 10 July 2025. Available at: https://digital-strategy.ec.europa.eu/en/policies/contents-code-gpai. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [31]: European Commission (2026). Commission publishes Code of Practice on marking and labelling AI-generated content. Shaping Europe's digital future, 10 June 2026. Available at: https://digital-strategy.ec.europa.eu/en/news/commission-publishes-code-practice-marking-and-labelling-ai-generated-content. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [32]: Brown, S. The C4 model for visualising software architecture. Available at: https://c4model.com/ (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [33]: FINOS. Common Architecture Language Model (CALM). FINOS Architecture as Code project. Available at: https://calm.finos.org/ (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [34]: FINOS. Architecture as Code: Common Architecture Language Model (CALM) specification repository. GitHub. Available at: https://github.com/finos/architecture-as-code (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [35]: Rose, S., Borchert, O., Mitchell, S. & Connelly, S. (2020). Zero Trust Architecture. NIST Special Publication 800-207, August 2020. Available at: https://doi.org/10.6028/NIST.SP.800-207 (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [36]: SLSA. Supply-chain Levels for Software Artifacts (SLSA) specification, version 1.2: Build requirements for producing artifacts, and Build provenance. Available at: https://slsa.dev/spec/v1.2/build-requirements and https://slsa.dev/spec/v1.2/build-provenance (accessed 2026-11-10). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [37]: Sigstore Project. Sigstore. Available at: https://www.sigstore.dev/ (accessed 2026-10-31). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [38]: Sigstore. Cosign: Signing overview. Sigstore documentation. Available at: https://docs.sigstore.dev/cosign/signing/overview/ (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [39]: Sigstore Project (2026). gitsign: Keyless Git signing with Sigstore. GitHub repository. Available at: https://github.com/sigstore/gitsign (accessed 2026-11-01). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [40]: Maruseac, M., Wickens, E., Major, D. & Sablotny, M. (2025). An Introduction to the OpenSSF Model Signing (OMS) Specification: Model Signing for Secure and Trusted AI Supply Chains. OpenSSF blog, 25 June 2025. Available at: https://openssf.org/blog/2025/06/25/an-introduction-to-the-openssf-model-signing-oms-specification/ (accessed 2026-11-01). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [41]: Ecma International (2025). ECMA-424: CycloneDX Bill of Materials Specification, 2nd edition. Ecma International, December 2025. Available at: https://ecma-international.org/publications-and-standards/standards/ecma-424/ (accessed 2026-11-01). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [42]: OWASP Foundation. Machine Learning Bill of Materials (AI/ML-BOM). CycloneDX. Available at: https://cyclonedx.org/capabilities/mlbom/ (accessed 2026-10-31). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [43]: NTIA. The Minimum Elements For a Software Bill of Materials (SBOM). US Department of Commerce, National Telecommunications and Information Administration, 12 July 2021. Available at: https://www.ntia.gov/report/2021/minimum-elements-software-bill-materials-sbom (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [44]: Liang, P. et al. (2022). Holistic Evaluation of Language Models. Stanford Center for Research on Foundation Models. Available at: https://arxiv.org/abs/2211.09110 (accessed 2026-10-31). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [45]: Open Source Initiative. The Open Source AI Definition, version 1.0. 28 October 2024. Available at: https://opensource.org/ai/open-source-ai-definition (accessed 2026-10-31). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [46]: High-Level Expert Group on Artificial Intelligence. Assessment List for Trustworthy Artificial Intelligence (ALTAI) for self-assessment. European Commission, 17 July 2020. Available at: https://digital-strategy.ec.europa.eu/en/library/assessment-list-trustworthy-artificial-intelligence-altai-self-assessment (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools.
• Source [47]: UNESCO. Ethical Impact Assessment. Global AI Ethics and Governance Observatory. Available at: https://www.unesco.org/ethics-ai/en/eia (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools.
• Source [48]: International Organization for Standardization and International Electrotechnical Commission. ISO/IEC 23894:2023 Information technology — Artificial intelligence — Guidance on risk management. Geneva: ISO, February 2023. Available at: https://www.iso.org/standard/77304.html (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools.
• Source [49]: International Organization for Standardization and International Electrotechnical Commission. ISO/IEC 42005:2025 Information technology — Artificial intelligence — AI system impact assessment. Geneva: ISO, 2025. Available at: https://www.iso.org/standard/44545.html (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools.
• Source [50]: National Institute of Standards and Technology. Artificial Intelligence Risk Management Framework (AI RMF 1.0). NIST AI 100-1, January 2023. Available at: https://doi.org/10.6028/NIST.AI.100-1 (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [51]: Open Policy Agent Contributors. Open Policy Agent Documentation. Cloud Native Computing Foundation. Available at: https://www.openpolicyagent.org/docs/ (accessed 2026-10-31). Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 7: Inventory, Classification and Risk Tools, Glossary.
• Source [52]: UNESCO (2023). Readiness Assessment Methodology: A Tool of the Recommendation on the Ethics of Artificial Intelligence. Paris: UNESCO, 28 August 2023. Available at: https://www.unesco.org/en/articles/readiness-assessment-methodology-tool-recommendation-ethics-artificial-intelligence (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools.
• Source [53]: NIST. The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29, 26 February 2024. Available at: https://doi.org/10.6028/NIST.CSWP.29 (accessed 2026-10-30). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools.
• Source [54]: National Institute of Standards and Technology. Security and Privacy Controls for Information Systems and Organizations. NIST Special Publication 800-53 Revision 5, Joint Task Force, September 2020 (release 5.2.0, 2025). Available at: https://doi.org/10.6028/NIST.SP.800-53r5 (accessed 2026-11-10). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [55]: National Institute of Standards and Technology. Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile). NIST IR 8596, initial preliminary draft, 16 December 2025. Available at: https://csrc.nist.gov/pubs/ir/8596/iprd (accessed 2026-11-02). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [56]: Schroeder, K., Trinh, H. & Pillitteri, V. (2024). Measurement Guide for Information Security: Volume 1, Identifying and Selecting Measures. NIST Special Publication 800-55 Vol. 1, December 2024. National Institute of Standards and Technology. Available at: https://doi.org/10.6028/NIST.SP.800-55v1 (accessed 2026-11-10). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [57]: International Organization for Standardization and International Electrotechnical Commission (2022). ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements. Geneva: ISO, October 2022. Available at: https://www.iso.org/standard/27001 (accessed 2026-11-01). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [58]: International Organization for Standardization and International Electrotechnical Commission (2023). ISO/IEC 42001:2023 Information technology — Artificial intelligence — Management system. Geneva: ISO, December 2023. Available at: https://www.iso.org/standard/42001 (accessed 2026-10-31). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [59]: National Institute of Standards and Technology, Joint Task Force (2022). Assessing Security and Privacy Controls in Information Systems and Organizations. NIST Special Publication 800-53A, Revision 5, January 2022. Available at: https://csrc.nist.gov/pubs/sp/800/53/a/r5/final (accessed 2026-11-06). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [60]: National Institute of Standards and Technology. Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile. NIST AI 600-1, July 2024. Available at: https://doi.org/10.6028/NIST.AI.600-1 (accessed 2026-10-31). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [61]: National Institute of Standards and Technology. OSCAL: the Open Security Controls Assessment Language. NIST OSCAL project site. Available at: https://pages.nist.gov/OSCAL/ (accessed 2026-11-11). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [62]: Gaia-X European Association for Data and Cloud AISBL. Gaia-X: A Federated Secure Data Infrastructure. Available at: https://gaia-x.eu/ (accessed 2026-10-31). Referenced in: Chapter 9: Supplier, Contract and Sovereignty Tools.
• Source [63]: European Commission. EU model contractual AI clauses to pilot in procurements of AI. Public Buyers Community, Procurement of AI community, published 29 September 2023 (the page names Jeroen Naves, Pels Rijcken, as author and says the clauses were drafted for the proposed AI Act). Available at: https://public-buyers-community.ec.europa.eu/communities/procurement-ai/resources/eu-model-contractual-ai-clauses-pilot-procurements-ai (accessed 2026-10-31). Referenced in: Chapter 9: Supplier, Contract and Sovereignty Tools.
• Source [64]: European Commission (2025). Cloud Sovereignty Framework, Version 1.2.1. Directorate-General for Digital Services, October 2025; defines sovereignty objectives and assurance levels for the procurement procedure for which it was issued, without presenting itself as a legal requirement. Available at: https://commission.europa.eu/document/download/09579818-64a6-4dd5-9577-446ab6219113_en?filename=Cloud-Sovereignty-Framework.pdf (accessed 2026-11-10). Referenced in: Chapter 9: Supplier, Contract and Sovereignty Tools.
• Source [65]: AsyncAPI Initiative (2023). AsyncAPI Specification 3.0.0. Specification describing message-driven APIs in a machine-readable format. Available at: https://www.asyncapi.com/docs/reference/specification/v3.0.0 (accessed 2026-11-11). Referenced in: Chapter 9: Supplier, Contract and Sovereignty Tools.
• Source [66]: OpenAPI Initiative (2021). OpenAPI Specification v3.1.0. Linux Foundation; a language-agnostic standard for describing HTTP APIs, dated 15 February 2021. Available at: https://spec.openapis.org/oas/v3.1.0.html (accessed 2026-11-11). Referenced in: Chapter 9: Supplier, Contract and Sovereignty Tools.
• Source [67]: MITRE Corporation. MITRE ATT&CK: Adversarial Tactics, Techniques, and Common Knowledge. Available at: https://attack.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools.
• Source [68]: MITRE Corporation. MITRE ATLAS: Adversarial Threat Landscape for Artificial-Intelligence Systems. Available at: https://atlas.mitre.org/ (accessed 2026-10-31). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools.
• Source [69]: MITRE Corporation. MITRE D3FEND: A knowledge graph of cybersecurity countermeasures. Available at: https://d3fend.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight.
• Source [70]: OWASP Foundation. OWASP Top 10 for LLM Applications 2025. OWASP GenAI Security Project, version 2025, 18 November 2024. Available at: https://genai.owasp.org/llm-top-10/ (accessed 2026-10-31). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 11: AI Red Teaming and Emulation Tools.
• Source [71]: OWASP Foundation (2025). OWASP Top 10 for Agentic Applications for 2026. OWASP GenAI Security Project, 9 December 2025. Available at: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ (accessed 2026-11-01). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [72]: OWASP Foundation (2025). OWASP Non-Human Identities Top 10, 2025. OWASP Non-Human Identities Top 10 project. Available at: https://owasp.org/www-project-non-human-identities-top-10/2025/ (accessed 2026-11-06). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [73]: Threat Modeling Manifesto Working Group. Threat Modeling Manifesto. 2020. Available at: https://www.threatmodelingmanifesto.org/ (accessed 2026-10-30). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [74]: Center for Threat-Informed Defense (2024). Top ATT&CK Techniques. Center for Threat-Informed Defense (operated by MITRE), project website and methodology (© 2022 MITRE; project page dated 14 August 2024). Available at: https://center-for-threat-informed-defense.github.io/top-attack-techniques/ (accessed 2026-11-10). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [75]: MITRE Corporation. CWE-117: Improper Output Neutralization for Logs. Common Weakness Enumeration, CWE version 5.0 (page dated 2026-10-28). Available at: https://cwe.mitre.org/data/definitions/117.html (accessed 2026-11-10). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [76]: European Central Bank. TIBER-EU: Threat Intelligence-Based Ethical Red Teaming framework. ECB, framework document dated January 2025 (the web page records an update to align with the DORA threat-led testing standards). Available at: https://www.ecb.europa.eu/paym/cyber-resilience/tiber-eu/html/index.en.html (accessed 2026-11-02). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.
• Source [77]: European Central Bank (2025). TIBER-EU Purple Teaming Guidance. ECB, January 2025 (supersedes the TIBER-EU Purple Teaming Best Practices of July 2022). Available at: https://www.ecb.europa.eu/pub/pdf/annex/ecb.tiber_eu_purple_best_practices_2025.en.pdf (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.
• Source [78]: SigmaHQ. Sigma: Generic Signature Format for SIEM Systems. Open-source detection rule specification and rule repository. Available at: https://github.com/SigmaHQ/sigma (accessed 2026-11-02). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools.
• Source [79]: OASIS Cyber Threat Intelligence (CTI) TC. STIX Version 2.1 and TAXII Version 2.1. OASIS Standards, approved 10 June 2021. Available at: https://docs.oasis-open.org/cti/stix/v2.1/os/stix-v2.1-os.html and https://docs.oasis-open.org/cti/taxii/v2.1/os/taxii-v2.1-os.html (accessed 2026-10-30). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools.
• Source [80]: Forum of Incident Response and Security Teams. Exploit Prediction Scoring System (EPSS). FIRST; academic basis Jacobs, J. et al. (2021), Digital Threats: Research and Practice 2(3), https://doi.org/10.1145/3436242. Available at: https://www.first.org/epss/ (accessed 2026-11-01). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 15: Observability and Service Objective Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [81]: Cybersecurity and Infrastructure Security Agency. Known Exploited Vulnerabilities Catalog. CISA. Available at: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (accessed 2026-11-01). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 15: Observability and Service Objective Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [82]: European Union Agency for Cybersecurity (2025). European Vulnerability Database (EUVD). Launched 13 May 2025 under the NIS 2 Directive. Available at: https://euvd.enisa.europa.eu/ (accessed 2026-11-01). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools, Chapter 15: Observability and Service Objective Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [83]: Foudil, E. & Shafranovich, Y. (2022). A File Format to Aid in Security Vulnerability Disclosure (security.txt). RFC 9116, Internet Engineering Task Force, April 2022. Available at: https://www.rfc-editor.org/rfc/rfc9116 (accessed 2026-11-10). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools.
• Source [84]: National Institute of Standards and Technology. Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile. NIST SP 800-61 Rev. 3, April 2025. Available at: https://csrc.nist.gov/pubs/sp/800/61/r3/final (accessed 2026-11-02). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [85]: Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G. & Scarfone, K. (2016). Guide for Cybersecurity Event Recovery. NIST SP 800-184. National Institute of Standards and Technology, December 2016. Available at: https://doi.org/10.6028/NIST.SP.800-184 (accessed 2026-11-02). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [86]: Organisation for Economic Co-operation and Development (2024). Defining AI incidents and related terms. OECD Artificial Intelligence Papers, No. 16, OECD Publishing, 6 May 2024. DOI: 10.1787/d1a8d965-en. Definitions as quoted by the OECD.AI Policy Observatory at https://oecd.ai/en/wonk/defining-ai-incidents-and-hazards (accessed 2026-11-10). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [87]: Organisation for Economic Co-operation and Development (2025). Towards a common reporting framework for AI incidents. OECD Artificial Intelligence Papers, No. 34, OECD Publishing, 28 February 2025. DOI: 10.1787/f326d4ac-en (accessed 2026-11-10). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [88]: World Wide Web Consortium (2015). State Chart XML (SCXML): State Machine Notation for Control Abstraction. W3C Recommendation, 1 September 2015. Available at: https://www.w3.org/TR/scxml/ (accessed 2026-11-11). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [89]: Federal Emergency Management Agency, U.S. Department of Homeland Security (2017). National Incident Management System, third edition, October 2017. Available at: https://training.fema.gov/EMIWeb/IS/IS700b/Handouts/National_Incident_Management%20System_Third%20Edition_October_2017.pdf (accessed 2026-11-10). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [90]: Principles of Chaos Engineering community. Principles of Chaos Engineering. Available at: https://principlesofchaos.org/ (accessed 2026-11-02). Referenced in: Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Glossary.
• Source [91]: Center for Threat-Informed Defense (2026). Summiting the Pyramid. Center for Threat-Informed Defense, operated by MITRE; project page dated 10 September 2026. Available at: https://ctid.mitre.org/projects/summiting-the-pyramid/ (accessed 2026-11-10). Referenced in: Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools.
• Source [92]: OpenTelemetry. Signals. OpenTelemetry documentation, Concepts. Available at: https://opentelemetry.io/docs/concepts/signals/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [93]: OpenTelemetry. Handling sensitive data. OpenTelemetry documentation, Security. Available at: https://opentelemetry.io/docs/security/handling-sensitive-data/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [94]: OpenSLO. OpenSLO: an open specification for defining service level objectives. OpenSLO organisation on GitHub, Apache-2.0 licence. Available at: https://github.com/OpenSLO/OpenSLO (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [95]: OpenTelemetry. Semantic Conventions for Generative AI (GenAI). OpenTelemetry semantic conventions for spans, metrics and events of generative AI clients, MCP and provider-specific conventions; repository open-telemetry/semantic-conventions-genai. Available at: https://github.com/open-telemetry/semantic-conventions-genai (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [96]: OpenGitOps. GitOps Principles, version 1.0.0. Published by the OpenGitOps GitOps Working Group. Available at: https://opengitops.dev/ (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools, Glossary.
• Source [97]: SLSA. SLSA specification, version 1.2 (Build: Provenance and Build: Verifying artifacts). Linux Foundation. Available at: https://slsa.dev/spec/v1.2/ (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [98]: Souppaya, M. & Scarfone, K. (2022). Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology. NIST SP 800-40 Rev. 4. Available at: https://doi.org/10.6028/NIST.SP.800-40r4 (accessed 2026-11-01). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [99]: FinOps Foundation. FinOps Framework. FinOps Foundation, a project of LF Projects, LLC. Operational framework and cultural practice. Available at: https://www.finops.org/framework/ (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [100]: Green Software Foundation (2024). Software Carbon Intensity (SCI) specification, adopted as ISO/IEC 21031:2024. Available at: https://greensoftware.foundation/standards/sci/ (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [101]: Open Policy Agent. Policy Language. Open Policy Agent documentation (Rego). Available at: https://www.openpolicyagent.org/docs/policy-language (accessed 2026-11-10). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [102]: Agent Skills Contributors. Agent Skills Specification. Available at: https://agentskills.io/specification (accessed 2026-11-11). Referenced in: Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [103]: AGENTS.md Contributors. AGENTS.md: a simple, open format for guiding coding agents. Available at: https://agents.md/ (accessed 2026-11-11). Referenced in: Chapter 18: Mandate, Delegation and Autonomy Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [104]: Anthropic (2024). Model Context Protocol Specification. November 2024, revised 2025. Available at: https://modelcontextprotocol.io/specification/2026-07-28 (accessed 2026-10-31). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [105]: Model Context Protocol (2025). Security Best Practices. Model Context Protocol specification, version 2025-11-25. Available at: https://modelcontextprotocol.io/docs/2025-11-25/tutorials/security/security_best_practices (accessed 2026-11-10). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [106]: SPIFFE project. SPIFFE Concepts. SPIFFE documentation. Available at: https://spiffe.io/docs/latest/spiffe-about/spiffe-concepts/ (accessed 2026-11-10). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [107]: SPIFFE Project. Secure Production Identity Framework for Everyone (SPIFFE) specifications and the SPIRE reference implementation. Cloud Native Computing Foundation. Available at: https://spiffe.io/docs/latest/spiffe-about/overview/ (accessed 2026-11-06). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [108]: Jones, M., Nadalin, A., Campbell, B., Bradley, J. & Mortimore, C. (2020). OAuth 2.0 Token Exchange. RFC 8693, Internet Engineering Task Force, January 2020. Available at: https://www.rfc-editor.org/rfc/rfc8693 (accessed 2026-11-06). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [109]: Lodderstedt, T., Richer, J. & Campbell, B. (2023). OAuth 2.0 Rich Authorization Requests. RFC 9396, Internet Engineering Task Force, May 2023. Available at: https://www.rfc-editor.org/rfc/rfc9396 (accessed 2026-11-06). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [110]: Google (2025). Announcing the Agent2Agent Protocol (A2A). Google for Developers Blog, 9 April 2025; specification at a2a-protocol.org. Available at: https://developers.googleblog.com/en/a2a-a-new-era-of-agent-interoperability/ (accessed 2026-11-06). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [111]: Fett, D., Campbell, B., Bradley, J., Lodderstedt, T., Jones, M. & Waite, D. (2023). OAuth 2.0 Demonstrating Proof of Possession (DPoP). RFC 9449, Internet Engineering Task Force, September 2023. Available at: https://www.rfc-editor.org/rfc/rfc9449 (accessed 2026-11-06). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [112]: European Union Agency for Cybersecurity (2022). European Cybersecurity Skills Framework (ECSF) Role Profiles. ENISA, 19 September 2022. Available at: https://www.enisa.europa.eu/publications/european-cybersecurity-skills-framework-role-profiles. Referenced in: Chapter 21: Role, Competence and Career Tools.
• Source [113]: European Union Agency for Cybersecurity (2022). European Cybersecurity Skills Framework (ECSF): User manual. ENISA, 19 September 2022. Available at: https://www.enisa.europa.eu/publications/european-cybersecurity-skills-framework-ecsf. Referenced in: Chapter 21: Role, Competence and Career Tools.
• Source [114]: SFIA Foundation (2024). SFIA 9: the global skills and competency framework for the digital world. Released October 2024. Available at: https://sfia-online.org/en/sfia-9. Referenced in: Chapter 21: Role, Competence and Career Tools.
• Source [115]: Petersen, R., Santos, D., Smith, M. C., Wetzel, K. A. & Witte, G. (2020). Workforce Framework for Cybersecurity (NICE Framework). NIST Special Publication 800-181, Revision 1. National Institute of Standards and Technology, November 2020. Available at: https://doi.org/10.6028/NIST.SP.800-181r1. Referenced in: Chapter 21: Role, Competence and Career Tools.
• Source [116]: European Committee for Standardization (CEN) (2019). EN 16234-1:2019 e-Competence Framework (e-CF): A common European framework for ICT professionals in all sectors, Part 1: Framework. CEN/TC 428, published 17 December 2019. Available at: https://standards.iteh.ai/catalog/standards/cen/7e895d4e-0eb0-49b4-972f-1f6b202ea400/en-16234-1-2019. Referenced in: Chapter 21: Role, Competence and Career Tools.
• Source [117]: ISC2 (n.d.). ISSAP: Information Systems Security Architecture Professional. ISC2 certification page. Available at: https://www.isc2.org/certifications/issap. Referenced in: Chapter 21: Role, Competence and Career Tools.
• Source [118]: Wright, A., Andrews, H., Hutton, B. & Dennis, G. (2022). JSON Schema: A Media Type for Describing JSON Documents. Internet-Draft draft-bhutton-json-schema-01 (JSON Schema 2020-12), Internet Engineering Task Force, 16 June 2022. Available at: https://json-schema.org/draft/2020-12/json-schema-core. Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care.
• Source [119]: International Organization for Standardization (2021). ISO 45003:2021 Occupational health and safety management – Psychological health and safety at work – Guidelines for managing psychosocial risks. ISO, Geneva. Available at: https://www.iso.org/standard/64283.html. Referenced in: Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care.
• Source [120]: OpenAI (2025). Preparedness Framework, Version 2. 15 April 2025. Available at: https://openai.com/index/updating-our-preparedness-framework/ (accessed 2026-11-02). Referenced in: Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight.
• Source [121]: Cybersecurity and Infrastructure Security Agency (n.d.). Stakeholder-Specific Vulnerability Categorization (SSVC). CISA. Available at: https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc (accessed 2026-11-11). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools.
• Source [122]: Forum of Incident Response and Security Teams (n.d.). Common Vulnerability Scoring System SIG. FIRST. Available at: https://www.first.org/cvss/ (accessed 2026-11-11). Referenced in: Chapter 12: Detection, Investigation and Intelligence Tools.

Guidance and appraisal

• Source [123]: HM Treasury (2026). The Green Book (2026): UK Government Guidance on Appraisal. London: HM Treasury, published 5 February 2026, updated 28 October 2026. ISBN 978-1-918417-12-8. Available at: https://www.gov.uk/government/publications/the-green-book--2/the-green-book-2026. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.
• Source [124]: European Commission (2021). Economic Appraisal Vademecum 2021–2027: General Principles and Sector Applications. Directorate-General for Regional and Urban Policy, with the support of JASPERS. Luxembourg: Publications Office of the European Union, September 2021. ISBN 978-92-76-40462-0, doi:10.2776/182302. Available at: https://jaspers.eib.org/LibraryNP/EC%20Reports/Economic%20Appraisal%20Vademecum%202021-2027%20-%20General%20Principles%20and%20Sector%20Applications.pdf. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.

Open-source projects

• Source [125]: FINOS. FINOS Software Project Blueprint. GitHub repository template for FINOS-hosted projects. Available at: https://github.com/finos/project-blueprint. Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools.

Methods and practices

• Source [126]: Nygard, M. (2011). Documenting Architecture Decisions. Cognitect blog, 15 November 2011. Available at: https://cognitect.com/blog/2011/11/15/documenting-architecture-decisions (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools, Glossary.
• Source [127]: Thoughtworks. Lightweight Architecture Decision Records. Technology Radar, Techniques (Vol. 15, November 2016 to Vol. 18, May 2018; Trial from November 2016, Adopt in November 2017 and May 2018). Available at: https://www.thoughtworks.com/radar/techniques/lightweight-architecture-decision-records (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [128]: ADR GitHub organisation. Architectural Decision Records (ADRs). Homepage of the community-maintained ADR GitHub organisation. Available at: https://adr.github.io/ (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [129]: Gebru, T., Morgenstern, J., Vecchione, B., Vaughan, J. W., Wallach, H., Daumé III, H. & Crawford, K. (2021). Datasheets for Datasets. Communications of the ACM, 64(12), pp. 86–92. Available at: https://doi.org/10.1145/3458723 (accessed 2026-10-31). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [130]: Mitchell, M., Wu, S., Zaldivar, A., Barnes, P., Vasserman, L., Hutchinson, B., Spitzer, E., Raji, I. D. & Gebru, T. (2019). Model Cards for Model Reporting. Proceedings of the Conference on Fairness, Accountability, and Transparency (FAT* '19), pp. 220–229. Available at: https://doi.org/10.1145/3287560.3287596 (accessed 2026-10-31). Referenced in: Chapter 4: Architecture and Decision Tools, Glossary.
• Source [131]: Bengio, Y. et al. (2026). International AI Safety Report 2026. International AI Safety Report, 3 February 2026. Available at: https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026 (accessed 2026-11-01). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.
• Source [132]: Institute of Internal Auditors (2020). The IIA's Three Lines Model: An update of the Three Lines of Defense. The IIA, 2020 (web page dated 8 September 2020, updated September 2024; the page marks it as superseded). Available at: https://www.theiia.org/en/content/position-papers/2020/the-iias-three-lines-model-an-update-of-the-three-lines-of-defense/ (accessed 2026-11-06). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools.

Operations tooling and platform documentation

• Source [133]: Structurizr. Structurizr DSL language reference. Structurizr documentation. Available at: https://docs.structurizr.com/dsl/language (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [134]: Structurizr. Getting started. Structurizr documentation. Available at: https://docs.structurizr.com/getting-started (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [135]: Structurizr. End-of-life notices for Structurizr Lite, the Structurizr CLI and the Structurizr cloud service. Structurizr documentation. Available at: https://docs.structurizr.com/lite, https://docs.structurizr.com/cli and https://docs.structurizr.com/cloud (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [136]: Structurizr. export. Structurizr documentation (Commands). Available at: https://docs.structurizr.com/export (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [137]: Mermaid. Mermaid: Diagramming and Charting Tool. Mermaid documentation. Available at: https://mermaid.js.org/ (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [138]: PlantUML. PlantUML: Open-source tool that uses simple textual descriptions to draw UML diagrams. PlantUML documentation. Available at: https://plantuml.com/ (accessed 2026-10-30). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [139]: HashiCorp. What is Terraform? Terraform documentation, HashiCorp Developer. Available at: https://developer.hashicorp.com/terraform/intro (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [140]: HashiCorp. State. Terraform documentation. Available at: https://developer.hashicorp.com/terraform/language/state (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [141]: HashiCorp. terraform plan command reference. Terraform documentation. Available at: https://developer.hashicorp.com/terraform/cli/commands/plan (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [142]: HashiCorp. Manage sensitive data in your configuration. Terraform documentation. Available at: https://developer.hashicorp.com/terraform/language/manage-sensitive-data (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [143]: OpenTofu. Frequently asked questions. OpenTofu documentation. Available at: https://opentofu.org/faq/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [144]: OpenTofu. State and Plan Encryption. OpenTofu documentation. Available at: https://opentofu.org/docs/language/state/encryption/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [145]: Kubernetes. Kubernetes Documentation: Concepts. Kubernetes Project. Available at: https://kubernetes.io/docs/concepts/ (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [146]: The Kubernetes Authors. Controllers. Kubernetes documentation. Available at: https://kubernetes.io/docs/concepts/architecture/controller/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [147]: Crossplane Authors. What's Crossplane? Crossplane documentation. Available at: https://docs.crossplane.io/latest/whats-crossplane/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [148]: Google Cloud. Config Connector overview. Google Cloud documentation. Available at: https://docs.cloud.google.com/config-connector/docs/overview (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [149]: Pulumi. Testing. Page heading "Testing Pulumi programs". Pulumi documentation. Available at: https://www.pulumi.com/docs/iac/guides/testing/ (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [150]: AWS. AWS Cloud Development Kit (CDK) v2 Developer Guide. Amazon Web Services. Available at: https://docs.aws.amazon.com/cdk/v2/guide/home.html (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [151]: Amazon Web Services. Import AWS resources into a CloudFormation stack. AWS CloudFormation User Guide. Available at: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/import-resources.html (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [152]: Cloud Native Computing Foundation. Backstage project joins the CNCF Incubator. CNCF blog, 15 March 2022. Available at: https://www.cncf.io/blog/2022/03/15/backstage-project-joins-the-cncf-incubator/ (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools, Glossary.
• Source [153]: MLflow Project. MLflow Documentation. A Series of LF Projects, LLC (Linux Foundation). Available at: https://mlflow.org/docs/latest/ (accessed 2026-10-31). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [154]: MLflow Project (2026). Prompt Registry. MLflow documentation. Available at: https://mlflow.org/docs/latest/genai/prompt-registry/ (accessed 2026-11-01). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [155]: lakeFS (2025). lakeFS Acquires DVC, Uniting Data Version Control Pioneers to Accelerate AI-Ready Data. Press release, 18 November 2025. Available at: https://lakefs.io/blog/lakefs-acquires-dvc/ (accessed 2026-11-01). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [156]: vLLM project (2026). OpenAI-Compatible Server. vLLM documentation (latest), read 1 November 2026. Available at: https://docs.vllm.ai/en/latest/serving/online_serving/openai_compatible_server/ (accessed 2026-11-01). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [157]: HashiCorp. Policy enforcement. Page title "Policy enforcement overview". HCP Terraform documentation. Available at: https://developer.hashicorp.com/terraform/cloud-docs/policy-enforcement (accessed 2026-10-30). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [158]: The Kubernetes Authors. Validating Admission Policy. Kubernetes documentation. Available at: https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 6: Platform and Infrastructure Tools.
• Source [159]: ServiceNow (2025). Life cycle of an Incident. ServiceNow product documentation, Zurich release, IT Service Management, Incident Management. Available at: https://www.servicenow.com/docs/r/zurich/it-service-management/incident-management/c_IncidentManagementStateModel.html (accessed 2026-11-11). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [160]: Atlassian (2021). Issue statuses, priorities, and resolutions. Jira Service Management Cloud documentation. Available at: https://confluence.atlassian.com/servicedeskcloud/issue-statuses-priorities-and-resolutions-1097176114.html (accessed 2026-11-11). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.
• Source [161]: Prometheus Operator. Watchdog. kube-prometheus runbooks (practitioner documentation). Available at: https://runbooks.prometheus-operator.dev/runbooks/general/watchdog/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools, Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [162]: Argo Project. Automated Sync Policy. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [163]: Argo Project. Sync Windows. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/sync_windows/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [164]: Argo Project. Security. Argo CD operator manual, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/operator-manual/security/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [165]: Flux project. Kustomization. Flux documentation. Available at: https://fluxcd.io/flux/components/kustomize/kustomizations/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [166]: Flux project. Flux multi-tenancy. Flux documentation. Available at: https://fluxcd.io/flux/installation/configuration/multitenancy/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [167]: Argo Project. Argo Rollouts: Analysis & Progressive Delivery. Argo Rollouts documentation, stable branch. Available at: https://argo-rollouts.readthedocs.io/en/stable/features/analysis/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools, Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [168]: Flagger project. Flagger: Progressive Delivery Operator for Kubernetes. Available at: https://flagger.app/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools, Glossary.
• Source [169]: Akuity. Kargo's Core Concepts. Kargo documentation. Available at: https://docs.kargo.io/user-guide/core-concepts/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [170]: Akuity. Verifying Freight in a Stage. Kargo documentation. Available at: https://docs.kargo.io/user-guide/how-to-guides/verification/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [171]: The Kubernetes Authors. Kubernetes API Concepts. Kubernetes documentation. Available at: https://kubernetes.io/docs/reference/using-api/api-concepts/ (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [172]: Temporal Technologies. Temporal Workflow Execution overview. Temporal documentation, vendor documentation of its own product. Available at: https://docs.temporal.io/workflow-execution (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [173]: Temporal Technologies. Activity Definition. Temporal documentation, vendor documentation of its own product. Available at: https://docs.temporal.io/activity-definition (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [174]: Argo Workflows project. Argo Workflows: the workflow engine for Kubernetes. Argo Workflows documentation. Available at: https://argo-workflows.readthedocs.io/en/latest/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [175]: KEDA Authors. KEDA Concepts. KEDA documentation. Available at: https://keda.sh/docs/latest/concepts/ (accessed 2026-11-11). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [176]: OpenCost. OpenCost Documentation: Overview. CNCF OpenCost project (Apache 2.0; accepted into the CNCF on 17 June 2022, Incubating since 25 October 2024; originally developed and open-sourced by Kubecost). Available at: https://www.opencost.io/docs/ (accessed 2026-10-30). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [177]: Green Software Foundation. Carbon Aware SDK. GitHub repository. Available at: https://github.com/Green-Software-Foundation/carbon-aware-sdk (accessed 2026-10-30). Referenced in: Chapter 17: Capacity, Cost and Energy Tools, Glossary.

Books and practitioner literature

• Source [178]: Ford, N., Parsons, R. & Kua, P. (2017). Building Evolutionary Architectures: Support Constant Change. O'Reilly Media. ISBN 978-1-491-98636-3. Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [179]: Conway, M. E. (1968). How Do Committees Invent? Datamation, 14(4), pp. 28–31. Available at: https://www.melconway.com/Home/Committees_Paper.html (accessed 2026-10-31). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [180]: Skelton, M. & Pais, M. (2019). Team Topologies: Organizing Business and Technology Teams for Fast Flow. IT Revolution Press. ISBN 978-1-942788-81-2. Second edition: Team Topologies, 2nd Edition: Organizing Business and Technology for Fast Flow of Value, IT Revolution, 23 September 2025, ISBN 978-1-966280-00-2. Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [181]: Forsgren, N., Humble, J. & Kim, G. (2018). Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations. IT Revolution, 27 March 2018. ISBN 978-1-942788-33-1. Available at: https://itrevolution.com/product/accelerate/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.

Software documentation

• Source [182]: Open Policy Agent. Terraform. Open Policy Agent documentation. Available at: https://www.openpolicyagent.org/docs/terraform (accessed 2026-11-10). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [183]: GitHub Docs. Understanding GitHub Actions. GitHub Documentation. Available at: https://docs.github.com/en/actions/get-started/understand-github-actions (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [184]: GitLab. Get started with GitLab CI/CD. GitLab Documentation. Available at: https://docs.gitlab.com/ci/ (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [185]: Jenkins. Pipeline. Jenkins User Handbook. Available at: https://www.jenkins.io/doc/book/pipeline/ (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [186]: Microsoft Learn. What is Azure Pipelines? Azure Pipelines documentation, Microsoft Learn. Available at: https://learn.microsoft.com/en-us/azure/devops/pipelines/get-started/what-is-azure-pipelines (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [187]: Gruntwork. Terratest. Terratest documentation. Available at: https://terratest.gruntwork.io/docs/ (accessed 2026-10-30). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [188]: Breck, E., Cai, S., Nielsen, E., Salib, M. & Sculley, D. (2017). The ML Test Score: A Rubric for ML Production Readiness and Technical Debt Reduction. Proceedings of the 2017 IEEE International Conference on Big Data, pp. 1123–1132. Available at: https://doi.org/10.1109/BigData.2017.8258038 (accessed 2026-10-31). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [189]: National Vulnerability Database (2026). CVE-2026-33634: Trivy v0.69.4 supply chain compromise. NIST NVD, published 23 March 2026. Available at: https://nvd.nist.gov/vuln/detail/CVE-2026-33634 (accessed 2026-11-01). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [190]: Argo Project. Projects. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/projects/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [191]: The Kubernetes Authors. Horizontal Pod Autoscaling. Kubernetes documentation. Available at: https://kubernetes.io/docs/concepts/workloads/autoscaling/horizontal-pod-autoscale/ (accessed 2026-11-11). Referenced in: Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight.
• Source [192]: Prometheus (n.d.). Overview. Prometheus documentation. Available at: https://prometheus.io/docs/introduction/overview/ (accessed 2026-11-11). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [193]: Istio (n.d.). Architecture. Istio documentation. Available at: https://istio.io/latest/docs/ops/deployment/architecture/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [194]: Infracost (n.d.). Get started. Infracost documentation. Available at: https://www.infracost.io/docs/ (accessed 2026-11-11). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.

Legislation and regulation

• Source [195]: European Parliament and Council of the European Union. Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union, 12 July 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj (accessed 2026-10-31). Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 10: Threat Modelling and Adversary Frameworks, Chapter 13: Response, Recovery and Resilience Tools, Chapter 15: Observability and Service Objective Tools, Chapter 17: Capacity, Cost and Energy Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care, Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight, Glossary.
• Source [196]: European Parliament and Council of the European Union. Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation). Official Journal of the European Union, 4 May 2016. Available at: https://eur-lex.europa.eu/eli/reg/2016/679/oj (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care.
• Source [197]: European Parliament and Council of the European Union. Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/reg/2022/2554/oj (accessed 2026-10-31). Referenced in: Chapter 3: Choosing, Adopting and Retiring Tools, Chapter 7: Inventory, Classification and Risk Tools, Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 11: AI Red Teaming and Emulation Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 15: Observability and Service Objective Tools, Chapter 16: Change, Restore and Runbook Tools, Chapter 17: Capacity, Cost and Energy Tools, Chapter 19: Observer, Stop Path and Evaluation Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [198]: European Parliament and Council of the European Union. Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/dir/2022/2555/oj (accessed 2026-10-31). Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 13: Response, Recovery and Resilience Tools, Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [199]: European Parliament and Council of the European Union (2026). Regulation (EU) 2026/1744 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI). Official Journal of the European Union, 24 July 2026. Available at: https://eur-lex.europa.eu/eli/reg/2026/1744/oj. Referenced in: Chapter 8: Obligation, Assurance and Maturity Tools, Chapter 21: Role, Competence and Career Tools, Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care.
• Source [200]: European Parliament and Council of the European Union (2024). Directive (EU) 2024/2831 of 23 October 2024 on improving working conditions in platform work. Official Journal of the European Union, L series, 11 November 2024. Available at: https://eur-lex.europa.eu/eli/dir/2024/2831/oj. Referenced in: Chapter 22: Tools for Managing People with AI: Decision, Contestation and Care.

Public-sector registers

• Source [201]: Ministry of the Interior and Kingdom Relations (Netherlands). The Algorithm Register of the Dutch government. Available at: https://algoritmes.overheid.nl/en (accessed 2026-10-31). Referenced in: Chapter 7: Inventory, Classification and Risk Tools.

Legislation

Software and tools

• Source [202]: Microsoft (2017). Threats - Microsoft Threat Modeling Tool. Microsoft Learn, Azure security documentation, article dated 17 August 2017, last updated 25 August 2022. Available at: https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-threats (accessed 2026-11-06). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [203]: OWASP Foundation. OWASP pytm: A Pythonic framework for threat modeling. OWASP Foundation project page. Available at: https://owasp.org/projects/pytm (accessed 2026-11-06). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [204]: Schneider, C. Threagile: Agile Threat Modeling Toolkit. Threagile project. Available at: https://threagile.io/ (accessed 2026-11-06). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.
• Source [205]: MITRE Corporation. ATT&CK Navigator. Open-source web application for annotating ATT&CK matrices with layers, colours, scores and comments, Apache License 2.0. Available at: https://github.com/mitre-attack/attack-navigator (accessed 2026-11-10). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.

Academic and industry literature

• Source [206]: Schneier, B. (1999). Attack Trees: Modeling Security Threats. Dr. Dobb's Journal, 24(12), December 1999. Available at: https://www.schneier.com/academic/archives/1999/12/attack_trees.html (accessed 2026-11-06). Referenced in: Chapter 10: Threat Modelling and Adversary Frameworks.

Tools and software

• Source [207]: Red Canary. Atomic Red Team: a library of tests mapped to the MITRE ATT&CK framework. Open-source project, MIT licence. Available at: https://github.com/redcanaryco/atomic-red-team (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools, Glossary.
• Source [208]: MITRE Corporation. MITRE Caldera: a platform for automating adversary emulation, assisting manual red teams and automating incident response. Open-source project built on MITRE ATT&CK, Apache-2.0 licence. Available at: https://github.com/mitre/caldera (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.
• Source [209]: Netflix. Chaos Monkey. Open-source resiliency tool that randomly terminates instances in production. Available at: https://netflix.github.io/chaosmonkey/ (accessed 2026-11-02). Referenced in: Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools.

Industry analysis

• Source [210]: Schneider, J. What are breach and attack simulations? IBM Think, vendor explainer by Josh Schneider, published 29 August 2024 (page metadata; last modified 17 November 2025). Available at: https://www.ibm.com/think/topics/breach-attack-simulation (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.

EU legislation

Provider documentation

• Source [211]: Microsoft (2026). Penetration testing (which summarises the Microsoft Cloud Unified Penetration Testing Rules of Engagement). Microsoft Learn, page metadata date 15 May 2026. Available at: https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.
• Source [212]: Amazon Web Services. Penetration Testing. AWS Security, policy page (no publication date shown; footer 2026). Available at: https://aws.amazon.com/security/penetration-testing/ (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.
• Source [213]: Google Cloud. Cloud Security FAQ (penetration testing of customers' own Google Cloud projects). Google Cloud Help, support.google.com. Available at: https://support.google.com/cloud/answer/6262505 (accessed 2026-11-10). Referenced in: Chapter 11: AI Red Teaming and Emulation Tools.

European legislation and policy

• Source [214]: European Parliament and Council of the European Union. Directive (EU) 2023/1791 of 13 September 2023 on energy efficiency and amending Regulation (EU) 2023/955 (recast). Official Journal of the European Union, 20 September 2023. Available at: https://eur-lex.europa.eu/eli/dir/2023/1791/oj (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.
• Source [215]: European Commission. Commission Delegated Regulation (EU) 2024/1364 of 14 March 2024 on the first phase of the establishment of a common Union rating scheme for data centres. Official Journal of the European Union, 17 May 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1364/oj (accessed 2026-11-10). Referenced in: Chapter 17: Capacity, Cost and Energy Tools.

Academic research

• Source [216]: Basiri, A., Behnam, N., de Rooij, R., Hochstein, L., Kosewski, L., Reynolds, J. & Rosenthal, C. (2016). Chaos Engineering. IEEE Software 33(3), 35–41. Available at: https://doi.org/10.1109/MS.2016.60 (accessed 2026-11-02). Referenced in: Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 19: Observer, Stop Path and Evaluation Tools.

Books

• Source [217]: Shortridge, K. & Rinehart, A. Security Chaos Engineering: Sustaining Resilience in Software and Systems. O'Reilly Media, 2023 (some sellers list the subtitle as Developing Resilience and Safety at Speed and Scale). ISBN 978-1-098-11382-7. Referenced in: Chapter 14: The Verification Loop: Purple, Chaos and Coverage Tools, Chapter 19: Observer, Stop Path and Evaluation Tools.

Operations, reliability and AIOps research

• Source [218]: Jones, C., Wilkes, J. & Murphy, N., with Smith, C. (2017). Service Level Objectives. Chapter 4 in Beyer, B. (ed.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/service-level-objectives/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [219]: Ewaschuk, R. (2017). Monitoring Distributed Systems. Chapter 6 in Beyer, B. (ed.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/monitoring-distributed-systems/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [220]: Thurgood, S. & Ferguson, D., with Hidalgo, A. & Beyer, B. (2018). Implementing SLOs. Chapter 2 in The Site Reliability Workbook: Practical Ways to Implement SRE. O'Reilly Media. Available at: https://sre.google/workbook/implementing-slos/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools, Glossary.
• Source [221]: Thurgood, S., with Frame, J., Lenton, A., Quinito, C., Tolchanov, A. & Trdin, N. (2018). Alerting on SLOs. Chapter 5 in The Site Reliability Workbook: Practical Ways to Implement SRE. O'Reilly Media. Available at: https://sre.google/workbook/alerting-on-slos/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools, Glossary.
• Source [222]: DevOps Research and Assessment programme. DORA's software delivery performance metrics. dora.dev, a programme run by Google Cloud. Available at: https://dora.dev/guides/dora-metrics/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [223]: Forsgren, N., Storey, M.-A., Maddila, C., Zimmermann, T., Houck, B. & Butler, J. (2021). The SPACE of Developer Productivity: There's more to it than you think. ACM Queue 19(1), 20-48. Available at: https://queue.acm.org/detail.cfm?id=3454124 (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [224]: Grafana Labs (2025). Observability Survey Report 2025. Vendor-run survey of 1,255 responses, 18 September 2024 to 2 January 2025. Available at: https://grafana.com/observability-survey/2025/ (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [225]: Kim, S., Choi, K., Choi, H.-S., Lee, B. & Yoon, S. (2022). Towards a Rigorous Evaluation of Time-Series Anomaly Detection. Proceedings of the AAAI Conference on Artificial Intelligence 36(7), pp. 7194-7201. DOI: 10.1609/aaai.v36i7.20680; arXiv:2109.05257. Available at: https://arxiv.org/abs/2109.05257 (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [226]: Wu, R. & Keogh, E. J. (2021). Current Time Series Anomaly Detection Benchmarks are Flawed and are Creating the Illusion of Progress. IEEE Transactions on Knowledge and Data Engineering. DOI: 10.1109/TKDE.2021.3112126; arXiv:2009.13807. Available at: https://arxiv.org/abs/2009.13807 (accessed 2026-11-10). Referenced in: Chapter 15: Observability and Service Objective Tools.
• Source [227]: Warner, A. & Davidovič, Š., with Hidalgo, A., Beyer, B., Smith, K. & Duftler, M. (2018). Canarying Releases, Chapter 16 of The Site Reliability Workbook. O'Reilly Media. Available at: https://sre.google/workbook/canarying-releases/ (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [228]: Hodgson, P. (2017). Feature Toggles (aka Feature Flags). martinfowler.com, 9 October 2017. Practitioner article. Available at: https://martinfowler.com/articles/feature-toggles.html (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [229]: Liguori, C. (2020). Automating safe, hands-off deployments. Amazon Builders' Library, 18 June 2020. Available at: https://builder.aws.com/content/3ErTKQOTKc5NIw031UePBPxTQ6I/automating-safe-hands-off-deployments (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [230]: Pokkunuri, S. (2019). Ensuring rollback safety during deployments. Amazon Builders' Library, 5 December 2019. Available at: https://builder.aws.com/content/3F04j2yRAAMBuPSPs50xwXZqg01/ensuring-rollback-safety-during-deployments (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [231]: Amazon Web Services (2023). Reducing the Scope of Impact with Cell-Based Architecture. AWS Well-Architected guidance, 20 September 2023. Available at: https://docs.aws.amazon.com/wellarchitected/latest/reducing-scope-of-impact-with-cell-based-architecture/reducing-scope-of-impact-with-cell-based-architecture.html (accessed 2026-11-10). Referenced in: Chapter 4: Architecture and Decision Tools, Chapter 16: Change, Restore and Runbook Tools.
• Source [232]: Murphy, N. R., Looney, J. & Kacirek, M. (2017). The Evolution of Automation at Google. Chapter 7 in Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/automation-at-google/ (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [233]: Featonby, M. Making retries safe with idempotent APIs. Amazon Builders' Library, Amazon Web Services. Available at: https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/ (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.
• Source [234]: Ulrich, M. (2017). Addressing Cascading Failures. Chapter 22 in Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/addressing-cascading-failures/ (accessed 2026-11-11). Referenced in: Chapter 16: Change, Restore and Runbook Tools.

Legislation and policy

• Source [235]: European Commission. Commission Delegated Regulation (EU) 2024/1774 of 13 March 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework. Official Journal of the European Union, L, 25 June 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1774/oj (accessed 2026-11-10). Referenced in: Chapter 16: Change, Restore and Runbook Tools.

Software and benchmarks

• Source [236]: Jha, S. et al. (2025). ITBench: Evaluating AI Agents across Diverse Real-World IT Automation Tasks. Proceedings of the 42nd International Conference on Machine Learning, Proceedings of Machine Learning Research 267, pp. 27134-27197 (figures as in the ICML version: 102 scenarios; the arXiv v1 reported 94); arXiv:2502.05352. Available at: https://proceedings.mlr.press/v267/jha25a.html (accessed 2026-11-10). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [237]: Xu, J., Zhang, Q., Zhong, Z., He, S., Zhang, C., Lin, Q., Pei, D., He, P., Zhang, D. & Zhang, Q. (2025). OpenRCA: Can Large Language Models Locate the Root Cause of Software Failures? International Conference on Learning Representations (ICLR 2025); benchmark of 335 failures and over 68 GB of telemetry from three enterprise software systems. Available at: https://iclr.cc/virtual/2025/poster/32093 (accessed 2026-11-10). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [238]: Pham, L., Zhang, H., Ha, H., Salim, F. & Zhang, X. (2025). RCAEval: A Benchmark for Root Cause Analysis of Microservice Systems with Telemetry Data. arXiv:2412.17015; Companion Proceedings of the ACM Web Conference 2025 (WWW '25). Available at: https://arxiv.org/abs/2412.17015 (accessed 2026-11-10). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [239]: Argo Project Labs. Argo CD MCP Server (mcp-for-argocd): README. Available at: https://github.com/argoproj-labs/mcp-for-argocd (accessed 2026-11-11; text read from the main branch README). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [240]: ControlPlane. Flux MCP Server Configuration. Flux Operator documentation. Available at: https://fluxoperator.dev/docs/mcp/config/ (accessed 2026-11-11). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [241]: controlplaneio-fluxcd. Flux MCP Server command (main.go). Go source of the flux-operator-mcp command, repository controlplaneio-fluxcd/flux-operator, directory cmd/mcp, main branch. Available at: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/main/cmd/mcp/main.go (accessed 2026-11-11). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [242]: containers. Kubernetes MCP server (README). GitHub repository containers/kubernetes-mcp-server, main branch. Available at: https://raw.githubusercontent.com/containers/kubernetes-mcp-server/main/README.md (accessed 2026-11-11). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.

Practitioner documentation

• Source [243]: Weiss, B. & Furr, M. (2019). Static stability using Availability Zones. Amazon Builders' Library, 5 December 2019. Available at: https://builder.aws.com/content/3K9SiqiJ369TGkkGzqPM95BuYWI/static-stability-using-availability-zones (accessed 2026-11-11; the English page shows the by-line "Furr, Mike" only; both authors, Becky Weiss and Mike Furr, are named in the author biographies on the German edition of the page). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [244]: Anthropic. Configure permissions and Configure the sandboxed Bash tool. Claude Code documentation, living page. Available at: https://code.claude.com/docs/en/permissions; https://code.claude.com/docs/en/sandboxing (accessed 2026-11-01). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [245]: OpenAI. Agent approvals & security. Codex documentation, living page. Available at: https://learn.chatgpt.com/docs/agent-approvals-security (accessed 2026-11-01). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [246]: Prodan, S. (2025). AI-Assisted GitOps with Flux Operator MCP Server. Flux blog, 14 May 2025. Available at: https://fluxcd.io/blog/2025/05/ai-assisted-gitops/ (accessed 2026-11-11). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [247]: HashiCorp (n.d.). What is Vault? Vault documentation, HashiCorp Developer. Available at: https://developer.hashicorp.com/vault/docs/about-vault/what-is-vault (accessed 2026-11-11). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [248]: Amazon Web Services (n.d.). What is AWS Secrets Manager? AWS Secrets Manager User Guide. Available at: https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html (accessed 2026-11-11). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.
• Source [249]: Istio (n.d.). Virtual Service. Istio networking reference (HTTPRetry). Available at: https://istio.io/latest/docs/reference/config/networking/virtual-service/ (accessed 2026-11-11). Referenced in: Chapter 25: Conclusions: One Toolbox for the Series.

Research

• Source [250]: Needham, J., Edkins, G., Pimpale, G., Bartsch, H. & Hobbhahn, M. (2025). Large Language Models Often Know When They Are Being Evaluated. arXiv:2505.23836. Available at: https://arxiv.org/abs/2505.23836 (accessed 2026-11-10). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [251]: Kim, E., Garg, A., Peng, K. & Garg, N. (2025). Correlated Errors in Large Language Models. ICML 2025; arXiv:2506.07962. Available at: https://arxiv.org/abs/2506.07962 (accessed 2026-11-10). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [252]: Panickssery, A., Bowman, S. R. & Feng, S. (2024). LLM Evaluators Recognize and Favor Their Own Generations. arXiv:2404.13076. Available at: https://arxiv.org/abs/2404.13076 (accessed 2026-11-10). Referenced in: Chapter 19: Observer, Stop Path and Evaluation Tools.
• Source [253]: Shevlane, T., Farquhar, S., Garfinkel, B., Phuong, M. et al. (2023). Model evaluation for extreme risks. arXiv:2305.15324. Available at: https://arxiv.org/abs/2305.15324 (accessed 2026-11-02). Referenced in: Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight.

Government and agency guidance

• Source [254]: Five Eyes cyber security agencies: ASD's ACSC, CISA, NSA, Canadian Centre for Cyber Security, NCSC-NZ and NCSC-UK (2026). Careful adoption of agentic AI services. Joint guidance, 1 May 2026. Available at: https://www.ncsc.govt.nz/assets/guidance/Documents/Careful-adoption-of-agentic-AI-services_FINAL.pdf (accessed 2026-11-01). Referenced in: Chapter 20: Defending the Agent: Identity, Credential and Protocol Tools.

Developer documentation

• Source [255]: OpenAI (2024). OpenAI o1 System Card. 12 September 2024. Available at: https://cdn.openai.com/o1-system-card.pdf (accessed 2026-11-01). Referenced in: Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight.
• Source [256]: Anthropic (2025). System Card: Claude Opus 4 & Claude Sonnet 4. May 2025. Available at: https://www.anthropic.com/claude-4-system-card (accessed 2026-11-02). Referenced in: Chapter 23: Tools for Weighing Evidence: Threat Registers, Debate and Foresight.

Software and technical documentation

• Source [257]: MkDocs. MkDocs: Project documentation with Markdown. Available at: https://www.mkdocs.org/ (accessed 2026-11-11). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [258]: Pryce, N. ADR Tools: a command-line tool for working with a log of Architecture Decision Records. GitHub repository README. Available at: https://github.com/npryce/adr-tools (accessed 2026-11-11). Referenced in: Chapter 4: Architecture and Decision Tools.
• Source [259]: Conftest Authors. Conftest: a utility to help you write tests against structured configuration data. Available at: https://www.conftest.dev/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [260]: Kyverno Authors. Kyverno documentation: Introduction. Available at: https://kyverno.io/docs/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [261]: Checkov. What is Checkov? Checkov documentation. Available at: https://www.checkov.io/1.Welcome/What%20is%20Checkov.html (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [262]: Aqua Security. Trivy: a comprehensive and versatile security scanner. GitHub repository README. Available at: https://github.com/aquasecurity/trivy (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [263]: Anchore. Syft: a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. GitHub repository README. Available at: https://github.com/anchore/syft (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [264]: in-toto Authors. in-toto: a framework to secure the integrity of software supply chains. Available at: https://in-toto.io/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [265]: Gatekeeper Authors. Gatekeeper documentation: Introduction. Available at: https://open-policy-agent.github.io/gatekeeper/website/docs/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [266]: SPDX Workgroup, Linux Foundation. The System Package Data Exchange (SPDX): an open standard. Available at: https://spdx.dev/ (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [267]: Aqua Security. tfsec: tfsec to Trivy migration. GitHub repository README. Available at: https://github.com/aquasecurity/tfsec (accessed 2026-11-11). Referenced in: Chapter 5: Policy, Pipeline and Evidence Tools.
• Source [268]: Docker Inc. What is Docker? Docker Docs. Available at: https://docs.docker.com/get-started/docker-overview/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [269]: Helm Authors. Charts. Helm documentation, Topics. Available at: https://helm.sh/docs/topics/charts/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [270]: Istio Authors. What is Istio? Istio documentation. Available at: https://istio.io/latest/docs/overview/what-is-istio/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.
• Source [271]: Cilium Authors. Introduction to Cilium & Hubble. Cilium documentation. Available at: https://docs.cilium.io/en/stable/overview/intro/ (accessed 2026-11-11). Referenced in: Chapter 6: Platform and Infrastructure Tools.

Delegated legislation

• Source [272]: European Commission. Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats. Official Journal of the European Union, L series, 20 February 2025. Available at: https://eur-lex.europa.eu/eli/reg_del/2025/301/oj (accessed 2026-11-14). Referenced in: Chapter 13: Response, Recovery and Resilience Tools.

How to cite

Inline citations give the source number, the author or organisation, and the year, for example (9, MITRE, n.d.), and link to the entry here. Where an author is named in the sentence, the citation carries the year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; existing numbers are never reused.