References and Sources

This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can locate European legislation, frameworks, threat assessments and practitioner literature quickly.

Entries 1 to 70 were carried over, without their back-links, from the bibliography of AI Red Team (Book 4), which treats AI in cyber defence across the NIST CSF 2.0 Functions; the access dates recorded there are kept and the entries are re-verified with scripts/verify_sources.py before release. Entries 71 to 77 are the earlier volumes of the series and entry 78 is Kvadrat. Entries 79 to 90 were verified for this book on 2026-11-10 against the publisher, proceedings or registry page and cover security-operations practice, workforce and automation research and two European instruments; further sources are added during drafting, each verified before it is cited.

Numbered source index

European legislation and policy

• Source [1]: European Parliament and Council of the European Union. Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union, 12 July 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem.
• Source [2]: European Parliament and Council of the European Union. Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/reg/2022/2554/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed.
• Source [3]: European Parliament and Council of the European Union. Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/dir/2022/2555/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed.
• Source [4]: European Commission. Commission Implementing Regulation (EU) 2024/2690 laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures. Official Journal of the European Union, 18 October 2024. Available at: https://eur-lex.europa.eu/eli/reg_impl/2024/2690/oj (accessed 2026-11-02). Referenced in: Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock.
• Source [5]: European Parliament and Council of the European Union. Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act). Official Journal of the European Union, 20 November 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/2847/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock.
• Source [6]: European Commission. The General-Purpose AI Code of Practice. European AI Office, 10 July 2025. Available at: https://digital-strategy.ec.europa.eu/en/policies/contents-code-gpai (accessed 2026-10-31). Referenced in: Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock.
• Source [7]: European Union Agency for Cybersecurity (2025). Technical implementation guidance on Commission Implementing Regulation (EU) 2024/2690 (version 1.0). ENISA, June 2025. Available at: https://www.enisa.europa.eu/sites/default/files/2025-06/ENISA_Technical_implementation_guidance_on_cybersecurity_risk_management_measures_version_1.0.pdf (accessed 2026-11-01). Referenced in: Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock.
• Source [8]: European Parliament and Council of the European Union. Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, 4 May 2016. Available at: https://eur-lex.europa.eu/eli/reg/2016/679/oj (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.

Frameworks, standards and taxonomies

• Source [9]: MITRE Corporation. MITRE ATT&CK: Adversarial Tactics, Techniques, and Common Knowledge. Available at: https://attack.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 6: Detect: Detection Engineering as Code, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 25: Case Studies and Anti-Patterns, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual.
• Source [10]: MITRE Corporation. MITRE ATLAS: Adversarial Threat Landscape for Artificial-Intelligence Systems. Available at: https://atlas.mitre.org/ (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual.
• Source [11]: MITRE Corporation. MITRE D3FEND: A knowledge graph of cybersecurity countermeasures. Available at: https://d3fend.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 6: Detect: Detection Engineering as Code, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0.
• Source [12]: European Central Bank. TIBER-EU: Threat Intelligence-Based Ethical Red Teaming framework. ECB, framework updated February 2025. Available at: https://www.ecb.europa.eu/paym/cyber-resilience/tiber-eu/html/index.en.html (accessed 2026-11-02). Referenced in: Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team.
• Source [13]: OWASP Foundation. OWASP Top 10 for Large Language Model Applications, 2025 edition. OWASP GenAI Security Project. Available at: https://genai.owasp.org/llm-top-10/ (accessed 2026-10-31). Referenced in: Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.
• Source [14]: OWASP Foundation (2025). OWASP Top 10 for Agentic Applications for 2026. OWASP GenAI Security Project, 9 December 2025. Available at: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ (accessed 2026-11-01). Referenced in: Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.
• Source [15]: National Institute of Standards and Technology. Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile. NIST AI 600-1, July 2024. Available at: https://doi.org/10.6028/NIST.AI.600-1 (accessed 2026-10-31). Referenced in: Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3.
• Source [16]: Vassilev, A., Oprea, A., Fordyce, A., Anderson, H., Davies, X. & Hamin, M. (2025). Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations. NIST AI 100-2 E2025. National Institute of Standards and Technology, 24 March 2025. Available at: https://doi.org/10.6028/NIST.AI.100-2e2025 (accessed 2026-11-01). Referenced in: Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0.
• Source [17]: NIST. The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29, 26 February 2024. Available at: https://doi.org/10.6028/NIST.CSWP.29 (accessed 2026-10-30). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt.
• Source [18]: National Institute of Standards and Technology. Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile). NIST IR 8596, initial preliminary draft, 16 December 2025. Available at: https://csrc.nist.gov/pubs/ir/8596/iprd (accessed 2026-11-02).
• Source [19]: National Institute of Standards and Technology. Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile. NIST SP 800-61 Rev. 3, April 2025. Available at: https://csrc.nist.gov/pubs/sp/800/61/r3/final (accessed 2026-11-02). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt.
• Source [20]: Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G. & Scarfone, K. (2016). Guide for Cybersecurity Event Recovery. NIST SP 800-184. National Institute of Standards and Technology, December 2016. Available at: https://doi.org/10.6028/NIST.SP.800-184 (accessed 2026-11-02). Referenced in: Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement.
• Source [21]: Rose, S., Borchert, O., Mitchell, S. & Connelly, S. Zero Trust Architecture. NIST Special Publication 800-207, August 2020. Available at: https://doi.org/10.6028/NIST.SP.800-207 (accessed 2026-10-30). Referenced in: Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0.
• Source [22]: OASIS Cyber Threat Intelligence (CTI) TC. STIX Version 2.1 and TAXII Version 2.1. OASIS Standards, approved 10 June 2021. Available at: https://docs.oasis-open.org/cti/stix/v2.1/os/stix-v2.1-os.html and https://docs.oasis-open.org/cti/taxii/v2.1/os/taxii-v2.1-os.html (accessed 2026-10-30). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt.
• Source [23]: Forum of Incident Response and Security Teams. Exploit Prediction Scoring System (EPSS). FIRST; academic basis Jacobs, J. et al. (2021), Digital Threats: Research and Practice 2(3), https://doi.org/10.1145/3436242. Available at: https://www.first.org/epss/ (accessed 2026-11-01). Referenced in: Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed.
• Source [24]: Cybersecurity and Infrastructure Security Agency. Known Exploited Vulnerabilities Catalog. CISA. Available at: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (accessed 2026-11-01). Referenced in: Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed.
• Source [25]: European Union Agency for Cybersecurity (2025). European Vulnerability Database (EUVD). Launched 13 May 2025 under the NIS 2 Directive. Available at: https://euvd.enisa.europa.eu/ (accessed 2026-11-01). Referenced in: Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed.
• Source [26]: Souppaya, M. & Scarfone, K. (2022). Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology. NIST SP 800-40 Rev. 4. Available at: https://doi.org/10.6028/NIST.SP.800-40r4 (accessed 2026-11-01). Referenced in: Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed.
• Source [27]: SigmaHQ. Sigma: Generic Signature Format for SIEM Systems. Open-source detection rule specification and rule repository. Available at: https://github.com/SigmaHQ/sigma (accessed 2026-11-02). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 6: Detect: Detection Engineering as Code, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.

Threat assessments and agency guidance

• Source [28]: European Union Agency for Cybersecurity (2025). ENISA Threat Landscape 2025. October 2025. Available at: https://www.enisa.europa.eu/publications/enisa-threat-landscape-2025 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [29]: European Union Agency for Cybersecurity (2026). ENISA Threat Landscape 2026. September 2026. Available at: https://www.enisa.europa.eu/sites/default/files/2026-09/ENISA%20Threat%20Landscape%202026_Final.pdf (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [30]: Europol (2026). The evolving threat landscape. How encryption, proxies and AI are expanding cybercrime – Internet Organised Crime Threat Assessment (IOCTA) 2026. Luxembourg: Publications Office of the European Union. ISBN 978-92-9414-096-8. Available at: https://doi.org/10.2813/5737847 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [31]: ANSSI and CERT-FR (2026). L'IA générative face aux attaques informatiques: synthèse de la menace en 2025 (CERTFR-2026-CTI-001). ANSSI, 4 February 2026. Available at: https://cert.cyber.gouv.fr/uploads/CERTFR-2026-CTI-001.pdf (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [32]: National Cyber Security Centre (2025). Impact of AI on cyber threat from now to 2027. NCSC Assessment, 7 May 2025. Available at: https://www.ncsc.gov.uk/report/impact-ai-cyber-threat-now-2027 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.
• Source [33]: National Cyber Security Centre (2026). Preparing for a 'vulnerability patch wave'. NCSC blog, 1 May 2026. Available at: https://www.ncsc.gov.uk/blogs/prepare-for-vulnerability-patch-wave (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed.
• Source [34]: Five Eyes cyber security agencies: ASD's ACSC, Canadian Centre for Cyber Security, NCSC-NZ, NCSC-UK, NSA and CISA (2026). The AI shift in cyber risk: why leaders must act now. Joint statement, 22 June 2026. Available at: https://www.ncsc.gov.uk/sites/default/files/2026-06/Five-Eyes-cyber-security-agencies-statement-ai-shift.pdf (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed.
• Source [35]: Five Eyes cyber security agencies: ASD's ACSC, CISA, NSA, Canadian Centre for Cyber Security, NCSC-NZ and NCSC-UK (2026). Careful adoption of agentic AI services. Joint guidance, 1 May 2026. Available at: https://www.ncsc.govt.nz/assets/guidance/Documents/Careful-adoption-of-agentic-AI-services_FINAL.pdf (accessed 2026-11-01). Referenced in: Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations.
• Source [36]: National Cyber Security Centre (2026). NCSC statement in response to recent incidents resulting from frontier AI evaluations. 4 August 2026. Available at: https://www.ncsc.gov.uk/news/ncsc-statement-in-response-to-recent-incidents-resulting-from-frontier-ai-evaluations (accessed 2026-11-01). Referenced in: Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 25: Case Studies and Anti-Patterns.
• Source [37]: AI Security Institute (2026). Incident Report: unsanctioned agent behaviour during cyber testing. UK AISI, 4 August 2026. Available at: https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing (accessed 2026-11-01). Referenced in: Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 25: Case Studies and Anti-Patterns.
• Source [38]: Bengio, Y. et al. (2026). International AI Safety Report 2026. International AI Safety Report, 3 February 2026. Available at: https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 28: Conclusions: The Blue Team Transformed.

AI-enabled threats and exploitation timelines

• Source [39]: Charrier, C. & Weiner, R. (2024). How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends. Mandiant, Google Cloud Blog, 15 October 2024. Available at: https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [40]: Mandiant (2026). M-Trends 2026: Data, Insights, and Strategies From the Frontlines. Google Cloud Blog, 23 March 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement.
• Source [41]: Google Threat Intelligence Group (2025). Adversarial Misuse of Generative AI. Google Cloud Blog, 29 January 2025. Available at: https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [42]: Google Threat Intelligence Group (2026). GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access. Google Cloud Blog, 11 May 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.
• Source [43]: Google Threat Intelligence Group (2026). GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI. Google Cloud Blog, 8 September 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai (accessed 2026-11-01). Referenced in: Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.
• Source [44]: Grunewald, R., Mazumdar, S. & Vanderlee, K. (2026). Vulnerability Discovery and Exploitation Trends in the AI Era. Google Threat Intelligence Group, Google Cloud Blog, 30 September 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [45]: Blum, Mainor, Nambiar et al. (2026). ARTEX and Friends: Enter Agentic Offensive Frameworks. Google Threat Intelligence Group and Mandiant, Google Cloud Blog, 30 October 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/artex-and-friends-enter-agentic-offensive-frameworks (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?.
• Source [46]: Anthropic (2025). Detecting and countering misuse of AI: August 2025. Threat Intelligence Report, 27 August 2025. Available at: https://www.anthropic.com/news/detecting-countering-misuse-aug-2025 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [47]: Anthropic (2025). Disrupting the first reported AI-orchestrated cyber espionage campaign. 13 November 2025. Available at: https://www.anthropic.com/news/disrupting-AI-espionage (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 25: Case Studies and Anti-Patterns, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
• Source [48]: Anthropic (2026). Detecting and countering misuse of AI: September 2026. Threat Intelligence Report, September 2026. Available at: https://www.anthropic.com/threat-intelligence-report-september-2026 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [49]: Magramo, K. (2024). Arup revealed as victim of $25 million deepfake scam involving Hong Kong employee. CNN Business, 16 May 2024. Available at: https://edition.cnn.com/2024/05/16/tech/arup-deepfake-scam-loss-hong-kong-intl-hnk (accessed 2026-11-01). Referenced in: Chapter 25: Case Studies and Anti-Patterns.
• Source [50]: Fang, R., Bindu, R., Gupta, A. & Kang, D. (2024). LLM Agents can Autonomously Exploit One-day Vulnerabilities. arXiv:2404.08144. Available at: https://arxiv.org/abs/2404.08144 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.

AI-assisted defence and vulnerability discovery

• Source [51]: Anthropic (2026). Project Glasswing: Securing critical software for the AI era. 7 April 2026, updated 6 October 2026. Available at: https://www.anthropic.com/glasswing (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [52]: Carlini, N., Cheng, N., Lucas, K. et al. (2026). Assessing Claude Mythos Preview's cybersecurity capabilities. Anthropic Frontier Red Team, 7 April 2026. Available at: https://www.anthropic.com/research/mythos-preview (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.
• Source [53]: Anthropic (2026). Project Glasswing: An initial update. 22 May 2026. Available at: https://www.anthropic.com/news/glasswing-initial-update (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent.

Agents, containment and AI incidents

• Source [54]: Lynch, A., Wright, B., Larson, C., Troy, K. K., Ritchie, S. J., Mindermann, S., Perez, E. & Hubinger, E. (2025). Agentic Misalignment: How LLMs could be insider threats. Anthropic, 20 June 2025; arXiv:2510.05179. Available at: https://www.anthropic.com/research/agentic-misalignment (accessed 2026-11-01). Referenced in: Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0.
• Source [55]: OpenAI (2026). OpenAI – Hugging Face Incident Technical Report. 26 August 2026. Available at: https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf (accessed 2026-11-01). Referenced in: Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 25: Case Studies and Anti-Patterns, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
• Source [56]: Larcher, H., Carreira, A. et al. (2026). Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident. Hugging Face blog, 27 July 2026. Available at: https://huggingface.co/blog/agent-intrusion-technical-timeline (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 25: Case Studies and Anti-Patterns.
• Source [57]: Wijk, H., Cotra, A. & Greenblatt, R. (2026). Brief independent investigation of agents' behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident. METR, 26 August 2026; Greenblatt of Redwood Research contracted with METR. Available at: https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/; PDF https://metr.org/hugging-face-incident-report-aug-2026.pdf (accessed 2026-11-01). Referenced in: Chapter 25: Case Studies and Anti-Patterns.

Books and practitioner literature

• Source [58]: Rinehart, A. & Shortridge, K. Security Chaos Engineering: Developing Resilience and Safety at Speed and Scale. O'Reilly Media, 2023. ISBN 978-1-098-11382-7. Referenced in: Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team.
• Source [59]: Basiri, A., Behnam, N., de Rooij, R., Hochstein, L., Kosewski, L., Reynolds, J. & Rosenthal, C. (2016). Chaos Engineering. IEEE Software 33(3), 35–41. Available at: https://doi.org/10.1109/MS.2016.60 (accessed 2026-11-02). Referenced in: Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt.
• Source [60]: Principles of Chaos Engineering community. Principles of Chaos Engineering. Available at: https://principlesofchaos.org/ (accessed 2026-11-02). Referenced in: Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt.

The Architecture as Code Series and the author

• Source [61]: Nordqvist, G. (2025). Architecture as Code. The Architecture as Code Series, Book 1, published at aac.geon.se. Available at: https://aac.geon.se/ (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [62]: Nordqvist, G. (2026). AI Governance: Governing Artificial Intelligence in European Enterprises and Public Authorities. The Architecture as Code Series, Book 2, published at aig.geon.se. Available at: https://aig.geon.se/ (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [63]: Nordqvist, G. (2026). AI Platform and Security: Building and Securing AI Platforms in European Enterprises and Public Authorities. The Architecture as Code Series, Book 3. Available at: https://aips.geon.se (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 6: Detect: Detection Engineering as Code, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 25: Case Studies and Anti-Patterns, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [64]: Nordqvist, G. (2026). AI Red Team: AI as an Active Part of Cyber Defence in European Enterprises and Public Authorities. The Architecture as Code Series, Book 4, published at aired.geon.se. Available at: https://aired.geon.se/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [65]: Nordqvist, G. (2026). AI Threat: Are the Dystopias Coming True? Evidence, Risk and Response for European Enterprises and Public Authorities. The Architecture as Code Series, Book 5, published at aithreat.geon.se. Available at: https://aithreat.geon.se/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [66]: Nordqvist, G. (2026). The Transformed Security Architect: Role, Craft and Career in the Age of AI in European Enterprises and Public Authorities. The Architecture as Code Series, Book 6, published at tsa.geon.se. Available at: https://tsa.geon.se/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 25: Case Studies and Anti-Patterns, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [67]: Nordqvist, G. (2026). AI Boss: When Artificial Intelligence Manages People in European Enterprises and Public Authorities. The Architecture as Code Series, Book 7, published at aiboss.geon.se. Available at: https://aiboss.geon.se/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 4: The Transformed Blue Team Defined: Mandate, Functions and Degrees of Delegation, Chapter 5: Anticipate: Threat Intelligence and Exposure at Machine Speed, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 10: Respond: Playbooks, Bounded Containment and the Stop Path, Chapter 12: The Analyst's Own Use of AI: Querying, Drafting and Summarising in Modes 1 to 3, Chapter 13: An AI Agent Team for the SOC: Skills, Mandates and Containment, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 15: Defending the Defenders' AI: Poisoned Telemetry, Hostile Tickets and the SOC as Tier 0, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 25: Case Studies and Anti-Patterns, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed, About the Author.
• Source [68]: Kvadrat AB. Kvadrat – Sweden's largest network of self-employed consultants. Available at: https://www.kvadrat.se/ (accessed 2026-10-31). Referenced in: About the Author.

Security operations, workforce and automation research

• Source [69]: Alahmadi, B. A., Axon, L. & Martinovic, I. (2022). 99% False Positives: A Qualitative Study of SOC Analysts' Perspectives on Security Alarms. 31st USENIX Security Symposium, pp. 2783-2800. Available at: https://www.usenix.org/conference/usenixsecurity22/presentation/alahmadi (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 28: Conclusions: The Blue Team Transformed.
• Source [70]: Sundaramurthy, S. C., Bardas, A. G., Case, J., Ou, X., Wesch, M., McHugh, J. & Rajagopalan, S. R. (2015). A Human Capital Model for Mitigating Security Analyst Burnout. Eleventh Symposium On Usable Privacy and Security (SOUPS 2015), pp. 347-359. Available at: https://www.usenix.org/conference/soups2015/proceedings/presentation/sundaramurthy (accessed 2026-11-10). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns.
• Source [71]: Kokulu, F. B., Soneji, A., Bao, T., Shoshitaishvili, Y., Zhao, Z., Doupé, A. & Ahn, G.-J. (2019). Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues. ACM CCS 2019, pp. 1955-1970. DOI: 10.1145/3319535.3354239 (accessed 2026-11-10). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics.
• Source [72]: Tariq, S., Baruwal Chhetri, M., Nepal, S. & Paris, C. (2025). Alert Fatigue in Security Operations Centres: Research Challenges and Opportunities. ACM Computing Surveys 57(9). DOI: 10.1145/3723158 (accessed 2026-11-10). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 6: Detect: Detection Engineering as Code, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 28: Conclusions: The Blue Team Transformed.
• Source [73]: ISC2 (2025). 2025 Cybersecurity Workforce Study. Announced 4 December 2025; online survey of 16,029 practitioners and decision-makers, May-June 2025. Available at: https://www.isc2.org/Insights/2025/12/ISC2-publishes-2025-cybersecurity-workforce-study (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 3: The Pressure on the Blue Team: Machine-Speed Adversaries, Alert Volume and Scarce Talent, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns.
• Source [74]: Crowley, C. (2025). SANS 2025 SOC Survey. SANS Institute, 9 July 2025. Practitioner survey, not peer reviewed. Available at: https://www.sans.org/white-papers/sans-2025-soc-survey (accessed 2026-11-10). Referenced in: Chapter 20: Measuring the Transformed Blue Team: Speed, Coverage and Quality of Judgement.
• Source [75]: Bainbridge, L. (1983). Ironies of Automation. Automatica 19(6), 775-779. DOI: 10.1016/0005-1098(83)90046-8 (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 9: Threat Hunting Transformed: Hypotheses, Data and Agents, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 16: Operating Models: In-House, Managed, Hybrid and Sovereign Security Operations, Chapter 17: Team Design and Roles: After the Tier-1 Pyramid, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed.
• Source [76]: Parasuraman, R. & Manzey, D. H. (2010). Complacency and Bias in Human Use of Automation: An Attentional Integration. Human Factors 52(3), 381-410. DOI: 10.1177/0018720810376055 (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: The Blue Team Transformed, Chapter 7: Triage Transformed: From Alert Queue to Verified Case, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 14: Verifying What the AI Concludes: Review for Soundness When the Analyst Depends on the AI, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 21: The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team, Chapter 23: Keeping the Craft and Making New Analysts: The Apprenticeship Problem, Chapter 24: The Future of the Blue Team: Will There Be a SOC in 2036?, Chapter 25: Case Studies and Anti-Patterns, Chapter 27: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 28: Conclusions: The Blue Team Transformed.
• Source [77]: European Union Agency for Cybersecurity (2022). European Cybersecurity Skills Framework (ECSF) Role Profiles. ENISA, 19 September 2022. Available at: https://www.enisa.europa.eu/publications/european-cybersecurity-skills-framework-role-profiles (accessed 2026-11-10). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team.
• Source [78]: SFIA Foundation (2024). SFIA 9: the global skills and competency framework for the digital world. Released October 2024. Available at: https://sfia-online.org/en/sfia-9 (accessed 2026-11-10). Referenced in: Chapter 22: Competences, Training and Exercises: A Framework for the Transformed Blue Team.
• Source [79]: European Data Protection Board (2023). Guidelines 9/2022 on personal data breach notification under GDPR, version 2.0. EDPB, 4 April 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-92022-personal-data-breach-notification-under_en (accessed 2026-11-10). Referenced in: Chapter 2: What the Blue Team Does: Five Functions, Tiers and the Alert Queue, Chapter 8: Investigate: Hypotheses, Timelines and Evidence with AI, Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 18: Decision Rights and Escalation: Who May Contain, Isolate and Disclose, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock, Chapter 26: A Year on the Blue Team: Nordvik Region and Hansa Mutual.
• Source [80]: European Parliament and Council of the European Union. Regulation (EU) 2025/38 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents (Cyber Solidarity Act). Official Journal of the European Union, January 2025. Available at: https://eur-lex.europa.eu/eli/reg/2025/38/oj (accessed 2026-11-10). The exact title and article numbers are to be copied from the EUR-Lex text before an article is cited. Referenced in: Chapter 11: Learn: Post-Incident Review, Purple Teaming and Detection Debt, Chapter 19: Regulation as Constraint: NIS 2, DORA, CRA, GDPR, the AI Act and the Reporting Clock.

How to cite

Inline citations give the source number, the author or organisation, and the year, for example (9, MITRE, n.d.), and link to the entry here. Where an author is named in the sentence, the citation carries the year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; existing numbers are never reused.