Nordvik Region and Hansa Mutual: Cyber Defence Conclusions

All courses / AI Red Team / Module 8 / Chapter 27

Learning objectives

After the lesson the participant can:

• Compare the first investments, highest autonomy and binding constraints of the two organisations.
• Explain why both organisations placed Mode 0 vendor features at the head of their plans.
• Apply the mandate, inventory and evidence tests to an organisation and identify its first piece of work.
• Draft a prioritised 24-month plan in which each step that extends autonomy depends on evidence.

Key concepts

Mandate before tools

Nordvik Region built the mandate first, because a public authority must be able to explain to its board, its auditors and its residents why it lets AI touch security work at all. Its charter caps security AI at Mode 4, offensive work at Level 2 and irreversible actions at Level 1.

Separating identity from capability

Once Hansa Mutual's investigation agent had its own identity and permission manifest, the board could debate specific actions and not the agent as a whole, and approved Level 3 Bounded for two of them.

The shared blind spot

Both organisations found that vendor AI already acted automatically without anyone having decided it. At Nordvik, vendor features quarantined mail and blocked processes at what amounted to Level 3.

Three tests

The mandate test: can the organisation state on one page its ceilings, who may change them and who holds the stop path? The inventory test: does it know which vendor features act automatically and at what effective autonomy? The evidence test: when was its most relied-upon control last tested?

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Teaching plan

Discussion

1. Hansa Mutual's Level 3 decision remains contested between business owners who would accept more automation and a chief risk officer who insists every extension passes the board. Which side would you take, and on what evidence?
2. Works-council consultation slowed Hansa Mutual's rollout but improved the design. What might that improvement have consisted of?
3. What can a large organisation with a mature SOC learn from a regional authority with six analysts, and the reverse?

Written exercise

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

1. What did Hansa Mutual build first?

   1. Control around the AI it already had: an identity, a permission manifest and a stop path for its agent
   2. A new triage assistant with a read-only identity on self-hosted capacity reserved in a Nordic data centre
   3. A second red team dedicated to its claims-triage agent
   4. A continuous, AI-planned chaos engineering platform running in production within limits
   Show the answer

   A. Control around the AI it already had: an identity, a permission manifest and a stop path for its agent
   Hansa built control around the existing agent before adding more, because the July 2026 incident showed how a capable agent in a security context can exceed its mandate; only then did the board consider bounded autonomy.

2. What did Nordvik Region's restore drills find that no audit had found?

   1. That the triage assistant missed two per cent of true positives
   2. That session tokens stayed valid after a password reset
   3. That a log source stopped forwarding after an upgrade
   4. Two services whose recovery depended on an undocumented supplier step
   Show the answer

   D. Two services whose recovery depended on an undocumented supplier step
   The drills found two services whose recovery depended on an undocumented supplier step. The silent log source was found by Hansa Mutual's chaos experiments, and the token finding came from Nordvik's threat-led exercise.

3. Which of the three tests did both organisations fail at first?

   1. The mandate test
   2. The inventory test
   3. The evidence test
   4. None; both passed all three
   Show the answer

   B. The inventory test
   Both failed the inventory test at first, not knowing which vendor features already acted automatically and at what effective autonomy, which is why Mode 0 heads each plan.