CEO and co-founder of Kief Studio. Full-stack developer and strategist. In tech since 2012. Served as Secretary of the TRaViS board until May 2026.
https://ameliasgagne.com172 articles
An AI audit for a business is an inventory plus an evidence check on every AI system in use. IBM found 92 percent of organizations hit by an AI-related breach in 2026 had no AI access controls. The inventory is where the surprise is.
Cyber resilience tools cost versus breach recovery and fines is a recurring number you choose against a one-time number you do not. IBM's 2026 average breach is $4.99 million globally and $11.5 million in the US. The fine is rarely the largest line.
Questions to ask vendors about protecting proprietary data in collaborative scenarios cover ownership, retention, isolation, subcontractors, and model training. IBM's 2026 study found supply chain compromise added about $227,250 above the average breach cost.
Vendor security protocol questions for mixed data environments come down to who owns each control across your estate and theirs. CSA added Shared Security Responsibility Model columns to CAIQ v4 because unassigned controls are a leading source of cloud risk.
Cybersecurity questions for 401(k) technology vendors start with the DOL's six hiring tips. Since Compliance Assistance Release 2024-01 they cover health and welfare plans too, and EBSA named cybersecurity a FY2026 national enforcement project.
Decision architecture in B2B is the default. Thaler and Sunstein (Nudge, 2008) said there is no neutral cafeteria line. I study behavioral psychology. Fix the form before the deck.
The cost to leave HubSpot is labor. HubSpot's export-records article (2 Apr 2026) is a snapshot. Webflow help (31 Oct 2025): CMS is not in the code ZIP. Count hours, not moods.
Business continuity architecture is the restore you can run. NIST SP 800-34 Rev. 1 treats testing as a step. ISO 22301 applies at any size. A binder without a date is a story.
Partner vetting at mid-market is operational due diligence, not an M&A room. CISA Secure by Demand (6 Aug 2024) plus registrar, restore date, and named operator. Four shrugs is a no.
What is included in managed hosting is the night-shift list. InMotion (22 May 2026) set a server-layer floor. If restore date, patch cadence, and 2am page are shrugs, you still have the job.
Own versus rent AI: rent the commodity model, own prompts, tools, logs, and data. Flexera 2025: 27 percent of IaaS/PaaS spend wasted. If you cannot export the workflow, you rented the company memory.
An AEO audit in a week: ten real questions, who gets cited, one URL per query, extractable first sentences, schema, IndexNow. This domain: 13 cited URLs of 147 posts in Bing AI Performance (29 Aug 2026).
