FrontRow

Issue 2The Monday brief26–30 October 20262 min readGet it by email →

What’s actually working with Copilot, where to start on ISO 42001, and five real email attacks

Half of this week’s sessions are about Copilot, and the useful ones aren’t the feature tours. They’re about what organisations are doing differently a year in, and what it’s costing.

##What’s going on this week

A year ago the Copilot sessions were all “look what it can do”. This week they’ve split in two. One camp is still the demo. The other is the question every IT lead is now being asked: we’ve paid for it, so what’s it actually doing, and why is the bill moving? That second camp is where the value is, and Softcat have two sessions in it.

Wednesday 10:00

The two non-Copilot picks are the ones I’d protect the diary for. Email is still how most attacks start, which makes Barracuda’s live teardown worth an hour, and ISO 42001 is the governance standard that’s starting to appear in supplier questionnaires before most of us have read it.

PickLiveWed 28 Oct, 10:001 hour

Inbox Autopsy: Case Files from the New Era of Email Attacks

BarracudaCybersecurityFree

Wednesday 14:00

Barracuda take five real email attacks and dissect them live, with the audience voting on each one before the reveal. It works because it’s specific: not “phishing is bad” but here’s the exact email, here’s why it got through, here’s what gave it away. Worth it even if you’ve sat through a dozen awareness sessions, and a good one to send to whoever runs your staff training.

PickLiveWed 28 Oct, 14:00

ISO 42001: Where to Start with AI Governance

SecarmaArtificial Intelligence & CopilotFree

Tuesday 10:00

ISO 42001 is the AI management standard, and it looks set to do what ISO 27001 did a few years ago: turn up in a tender before anyone’s planned for it. Secarma treat it as a practical question rather than a certification pitch: where AI is already being used in the organisation, who owns it, and what governance needs to come first. I’ve been to a fair few of their webinars and they’ve stayed on the informative side of the line, which isn’t true of everyone covering this.

PickLiveTue 27 Oct, 10:001 hour

Copilot Journeys: What We're Seeing and What Works

SoftcatArtificial Intelligence & CopilotFree

Picked by FrontRow. Nobody pays to be in the brief.

Softcat on what the organisations getting real value from Copilot are doing differently, from pilot through to rollout. The useful part is the patterns: which departments it lands in, and what the people who switched it on and walked away found six months later. If you’re being asked “should we buy more licences”, watch this one first. Their usage-based billing session on Wednesday is the natural follow-on.

If you’ve only got 30 minutes

Nothing live under 45 minutes this week, so one from the library. URM Consulting on what AI actually changes in a penetration test, and what it doesn’t. Sign-up required.

Watch

AI & Penetration Testing: What's the Score?

URM Consulting30 minSign-up required

From the library

BCN build three Microsoft 365 Copilot agents live, no code, in 46 minutes. No sign-up. If the Copilot sessions this week leave you wanting to try something, this is the one to put an hour aside for.

Read next

If Copilot’s the thing you’re being asked about, Getting your organisation Copilot-ready puts six sessions in the order you’d actually tackle it. And if you haven’t yet worked out which AI tools staff are already using, start with the Shadow AI guide before the ISO 42001 session, because that’s question one.

That’s it for this week.

If this was useful, have next Monday’s sent to you.

Weekly. No spam. Unsubscribe in one click.