Why Every CISO Needs an AIBOM in 2026 — And What Vendors Get Wrong

A friend who runs security at a mid-sized fintech called me three weeks ago. Her board had asked a question her team couldn't answer in under a week: "How many models are running in production, and which ones touch customer PII?" She sent me her first draft of the answer. It was a spreadsheet. Forty