The Last Login: Professor Kai London on Identity Security When Downtime Is Not an Option
By the Ezeiza Times Technology Desk
In transport and finance, the decisive breach rarely looks like an attack. “It looks like a login,” says Professor Kai London, a senior CISO. “An identity — human or machine — that authenticated when it should have been challenged, and could then reach far more than it should.” In always-on operations, he argues, getting identity right is the single highest-leverage security investment.
“Every breach begins with a login that should have been stopped. Verify, limit, detect, prove — that is the whole discipline.”
Verify
Assume every credential may be stolen, London advises, and require phishing-resistant multi-factor authentication and context-aware conditional access. “A password proves someone once knew a secret,” he says. “It does not prove who is at the keyboard now.”
Limit
Shrink the blast radius: least-privilege access and segmentation so a single compromise cannot reach critical systems. “You decide, in advance, how far any one compromised identity is allowed to spread,” he says.
Detect
Because malicious logins look legitimate, watch behaviour after authentication — unusual access, lateral movement, abnormal data volumes. “The signal is in what happens after the login, not the login itself,” London notes.
Prove — and govern machines
Maintain the evidence regulators demand, and extend the same rigour to the fastest-growing identity class: service accounts and AI agents. “Every AI agent is a login with real reach,” he says. “It needs an identity, a boundary, monitoring and a kill-switch.”
For operations where a single unchallenged login can cascade into an outage or a fraud, London's message is that identity is the new front line — and the organisations that master it are the ones that stay running.
About Professor Kai London. Professor Kai London is a senior technology, security and transformation executive with 25+ years of board- and C-suite leadership across banking, aviation, defence, government and critical national infrastructure. He is Founder & CEO of Quantum AI Systems Security, an Honorary Professor in Cybersecurity, AI & Quantum Computing and a UCL researcher, holding CISSP, CISM, CCISO, ISO 27001 Lead Auditor, ISO 42001, DORA and NIS2 credentials. He is available for board advisory, NED and interim/fractional CISO/CIO/CTO mandates across the UK and internationally. Learn more at professorkailondon.com.
