Cyber resilience · Trust & control assurance

Trustquake by Kai London

Trust breaks before systems do. The breach, the outage, the regulator's letter — by the time you see them, the real failure happened months earlier, on a fault line nobody was watching. Trustquake shows you how to find that fault before it finds you — and how to prove, when it matters most, that your controls actually held.

By the end of this book you will be able to:

Answer the five boardroom questions

What could break, who owns it, what it would cost, which control holds it, and where the evidence is.

Close unverified trust

Find every place you trust a vendor, a login, or a person you have never verified — and close the gap before an attacker does.

Prove a control was operating

Not merely documented — to a board, a regulator, an insurer, or a court.

Contain on a rehearsed clock

Third-party or ransomware failure handled even on a bank-holiday Friday.

Build a funded 90-day plan

Turn it all into a plan your board will actually approve.

Use seven practical instruments

Trust-Fault Map, Control Load-Test, Blast-Radius Model, Containment Clock, Tremor Index, Defensibility Ledger and Trust-Reinstatement Protocol.

Every chapter opens with a real, dated, sourced case — Change Healthcare, Jaguar Land Rover, Marks & Spencer and the Co-op, the Salesloft–Drift supply-chain attack, the US$25m Arup deepfake — and closes with one decisive takeaway you can use on Monday.

CRISC domainsNIST CSF 2.0SP 800-61r3MITRE ATT&CKCISA Zero Trust

Map the fault. Hold the line. Prove it held.

About the author

Professor Kai London — CISSP, CISM.

An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.