Books that put cyber, AI & resilience on the boardroom table.
Professor Kai London writes the field manuals that CIOs, CISOs, General Counsel and boards keep on the desk — turning fast-moving regulation and frontier technology into doctrine you can deploy on Monday morning. More than two thousand titles spanning enterprise AI architecture, AI security and governance, agentic AI, post-quantum cryptography, identity and wireless defence, OT/ICS and SCADA security, and trust-led cyber resilience. 192 are featured here, with more books coming soon.
Spotlight
Fresh off the press: 50 new titles this October.
Practitioner handbooks and certification guides, from deepfake fraud and shadow AI to CISSP, AWS and Azure. Hover any cover in the library for a quick summary.
The library
Two thousand premium books. One mission: govern the risk, prove the control.
Each title maps cleanly to the frameworks your auditors and regulators are using right now — DORA, NIS2, the EU AI Act, the Cyber Resilience Act, IEC 62443, GDPR, ISO/IEC 27001:2022, ISO/IEC 42001, NIST CSF 2.0 and the NIST AI RMF.
Flagship titles
The AI Architects
We don't need more software. We need intelligence. The enterprise blueprint for AI that survives production, security and the board.
AI on Trial
Justice must answer. Govern AI so every consequential decision is explainable, auditable and defensible.
The Last Login
Every breach begins with a login that should have been stopped. The board-level playbook for the identity era.
The Invisible Airborne Perimeter
Your wireless network is wide open. The complete enterprise wireless security programme, end to end.
Trustquake
When trust breaks, the business breaks. Find the trust fault before it finds you.
BREACHPROOF
The executive's battle plan for the new business war — ransomware, AI-driven deception and the fight to keep trust.
No Logs, No Launch
The C-suite command system for deploying AI in regulated enterprises in 90 days. No evidence, no go-live.
The AI Control Architecture
The 90-day system for governed, regulated, revenue-ready AI. When the machine decides, someone must answer.
The Breach Had Permission
The attacker did not break in. It signed in. Leave them nothing to sign in with.
The Day the Control Room Went Silent
Why every CISO, OT leader and board must rethink SCADA security before the next attack.
AI Security & Governance
AI Security & Governance: Main Manual
The complete practitioner guide to securing, governing, evidencing and defending AI systems.
AI Security & Governance Workbook & Toolkit
Templates, registers, checklists, clauses and worksheets you can use on Monday.
AI Security & Governance Review Questions & Case Scenarios
Practitioner, audit, board and scenario questions with answers and explanations.
AI Security & Governance Annual Supplement 2027
Keeping the programme current — regulation, standards, threats, controls, assurance and board reporting.
AI Cybersecurity All-in-One
The complete enterprise reference for generative AI and LLM security, adversarial ML, Zero Trust and SOC automation.
AI for CISOs All-in-One
The executive handbook for leading AI security — strategy, operating model, budget and board narrative.
AI Security Architecture All-in-One
Design the control points in. Reference architectures, trust boundaries and guardrails for enterprise AI.
Agentic AI & AI Cyber Defence
Agentic AI Governance, Risk & Compliance All-in-One
Autonomy under control. Governance, risk and compliance for AI agents that act on your behalf.
Agentic AI Security All-in-One
Securing autonomous AI agents — tool access, delegation, containment and the blast radius when one goes wrong.
AI Red Teaming & Offensive AI Security All-in-One
Test it first. Adversarial testing for models, agents and the pipelines behind them.
AI-Powered SOC All-in-One
Building the autonomous security operations centre — triage, detection engineering and human oversight that holds.
AI Attacks on Critical Infrastructure All-in-One
Generative and agentic AI turned on the plant floor, and the enterprise defence handbook that answers it.
AI Attacks on OT & Critical Infrastructure
How AI is rewriting ICS defence — attack patterns, detection and the controls that still work.
Industrial AI Security All-in-One
AI on the plant floor, governed. Securing industrial AI without stopping the line.
Cyber Security All-in-One
Cyber Security All-in-One, Volume 1
Foundations and threats — the ground truth every security programme is built on.
Cyber Security All-in-One, Volume 2
Identity and cloud security — the two places the modern breach actually happens.
Cyber Security All-in-One, Volume 3
Security operations and response — detection, triage and the first hour that decides the outcome.
OT, ICS & SCADA Security
OT Security All-in-One, Volume 1
Foundations of OT, ICS and SCADA security — the language and the assets before the controls.
OT Security All-in-One, Volume 2
Industrial cyber defence and engineering controls that hold under production pressure.
OT Security All-in-One, Volume 3
IEC 62443, governance, compliance and the board conversation about industrial risk.
OT Security All-in-One, Volume 4
Ransomware resilience, recovery and AI risk across the industrial estate.
OT Security: The Complete Reference
ICS, SCADA and industrial cyber defence in one reference — the desk copy for the whole programme.
OT SOC & Detection Engineering
Industrial threat detection that works — use cases, telemetry and the analytics behind them.
OT Asset Discovery & Vulnerability Management
You cannot defend what you cannot see. Building and holding an accurate industrial asset picture.
OT Remote Access & Vendor Security
Every route into your plant, controlled — vendors, engineers and the sessions nobody logged.
OT Ransomware Incident Response Playbook
The first 24 hours when ransomware reaches the plant floor — decisions, isolation and safe restart.
IT/OT Convergence Security
Securing the seam between two worlds without breaking either one.
Water & Wastewater OT Cybersecurity
Protecting the supply — the sector playbook for utilities running lean and exposed.
Power Grid & Power Plant Cybersecurity
Defending modern electricity infrastructure, from generation to substation to control room.
Compliance & Certification Handbooks
IEC 62443 Implementation & Audit Handbook
Zones, conduits and evidence — implementing the standard and surviving the audit.
IEC 62443 Implementation Toolkit
Templates, registers and evidence packs that turn the standard into a working programme.
IEC 62443 Certification Study Guide 2026
Exam preparation for OT practitioners, structured around what the certification actually tests.
GICSP Certification Study Guide 2026
Industrial cyber security exam preparation for engineers and security professionals alike.
NIS2 Compliance Handbook 2026
Scope, controls, reporting and director liability — NIS2 turned into a delivery plan.
NERC CIP Compliance Handbook 2026
Bulk electric system cyber security, mapped to the standards the auditor will cite.
Cyber Resilience Act Compliance Handbook 2027
Products with digital elements — what the CRA demands of what you ship.
DORA Compliance Handbook 2026
Digital operational resilience for financial entities — testing, reporting and third-party control.
Pharma OT & GxP Cybersecurity Handbook 2026
Validated systems, secured — security that survives GxP without breaking validation.
Resilience & Recovery
The Resilient Enterprise All-in-One
Evidence-first operational survival — proving the business can take a hit and keep trading.
Cyber Recovery All-in-One
Getting the business back on its feet — recovery you have actually rehearsed.
Post-Quantum & Emerging Tech
Post-Quantum Cybersecurity All-in-One
The enterprise migration handbook — crypto inventory, agility and a sequence that finishes.
The Quantum Security Race
Post-quantum readiness as a strategic question, not a cryptographer's footnote.
Space & Satellite
Satellite Cybersecurity All-in-One
Ground segment, link and payload — securing the assets nobody can reach to patch.
Geopolitics & Cyber Conflict
Global Cyber-Geopolitical Intelligence 2027, Vol. I
Structured intelligence on the cyber-geopolitical picture boards are being asked about.
Global Cyber-Geopolitical Intelligence 2027, Vol. II
The second volume of the annual assessment — actors, theatres and enterprise exposure.
Global Cyber-Geopolitical Intelligence 2027, Vol. III
Continuing the 2027 assessment across contested regions and infrastructure.
Global Cyber-Geopolitical Intelligence 2027, Vol. IV
Sector-by-sector exposure analysis for the year ahead.
Global Cyber-Geopolitical Intelligence 2027, Vol. V
The closing volume — scenarios, indicators and what boards should watch.
The War for Everything
Competition across technology, infrastructure and data, and what it costs enterprises caught in it.
The Hybrid Conflict Era
Analysis for boards operating where commercial risk and state competition overlap.
The Invisible World War
Conflict below the threshold — the pressure that never gets declared.
The Weaponized World
Dependency as leverage. What happens when the things you rely on become instruments.
World War AI
Strategic competition in artificial intelligence, read through enterprise consequence.
The Global Cyber War
Cyber-geopolitical analysis for organisations that cannot choose a side.
The Battle for AI
Inputs, rules and enterprise choices in the contest over AI capability.
When the Grid Goes Dark
Planning for prolonged power loss — the scenario most continuity plans quietly skip.
Economic Warfare
Economic instruments as operating constraints: sanctions, controls and the compliance they force.
Autonomous Warfare
Autonomy, human control and accountability when systems act faster than oversight.
Global Cyber Risk Atlas 2027
A structured exposure reference for global operations — geography, sector and dependency.
Board-Level Cyber & Geopolitical Risk Playbook
The questions a board should be asking, and the answers it should refuse to accept.
AI, Cyberwar & Critical Infrastructure
Where AI, state-level conflict and physical infrastructure now intersect.
Global Supply-Chain Cyber Risk Intelligence
Seeing third-party and supplier risk before it becomes your incident.
International Editions
Nach der Ukraine
German edition of After Ukraine — enterprise resilience in a changed Europe.
Na Oekraïne
Dutch edition of After Ukraine — enterprise resilience in a changed Europe.
OT-Sicherheit: Das Praxishandbuch 2026
German edition of the complete OT security reference for industrial operators.
Sicurezza OT: Il Manuale Completo 2026
Italian edition of the complete OT security reference for industrial operators.
Après l'Ukraine
French edition of After Ukraine — enterprise resilience in a changed Europe.
Dopo l'Ucraina
Italian edition of After Ukraine — enterprise resilience in a changed Europe.
Po Ukrainie
Polish edition of After Ukraine — enterprise resilience in a changed Europe.
Після України
Ukrainian edition of After Ukraine — enterprise resilience in a changed Europe.
ウクライナ紛争後
Japanese edition of After Ukraine — enterprise resilience in a changed environment.
乌克兰之后
Chinese edition of After Ukraine — enterprise resilience in a changed environment.
यूक्रेन के बाद
Hindi edition of After Ukraine — enterprise resilience in a changed environment.
After Ukraine — Spanish edition
Spanish edition of After Ukraine — enterprise resilience in a changed Europe.
After Ukraine — Swedish edition
Swedish edition of After Ukraine — enterprise resilience in a changed Europe.
New releases · October 2026
The 24-Hour Clock
NIS2 incident reporting under pressure — the clock starts before you know what happened.
Personally Liable
The NIS2 director's handbook, written for the people the regulation names.
Prove It or Lose the Contract
The NIS2 supplier survival guide for firms being assessed by their customers.
Your Supply Chain Is In Scope
Running a NIS2 Article 21 third-party security programme that holds up.
Four Hours to Tell the Regulator
DORA major ICT incident reporting for financial entities, against the clock.
Critical by Designation
DORA for ICT third-party providers — what designation actually obliges you to do.
Exploited
Cyber Resilience Act vulnerability and incident reporting for products with digital elements.
CE-Marked Code
The Cyber Resilience Act for software vendors, from design file to declaration.
The Algorithm in HR
EU AI Act compliance for employers using AI in hiring and people decisions.
Literate by Law
AI literacy programmes that regulators, boards and staff actually accept.
Who Is Acting?
Identity, authority and accountability for AI agents operating inside the enterprise.
Certifiable AI
The ISO/IEC 42001 implementation toolkit — from gap analysis to certification evidence.
Plant Floor Defence
The OT security workbook — exercises, templates and assessments for industrial teams.
Never Trust the Network
Zero Trust architecture for operational technology, without breaking the process.
The Red Lines
EU AI Act prohibited practices in practice — where the line actually falls.
Released 14 October 2026 · Practitioner series
Security+ SY0-801: 300 Practice Questions
300 exam-style Security+ SY0-801 practice questions with full explanations, mapped domain by domain to the exam objectives.
Scam-Proof After 60
A plain-English guide to recognising and stopping phone, email, romance and investment scams aimed at older adults.
SecOT+ SOT-001: 300 Practice Questions
300 exam-style SecOT+ practice questions with full explanations, organised by exam area and finished with mixed mock exams.
Machines Have Keys
Service accounts, API keys, certificates and AI agents now outnumber people. How to discover, govern and secure machine identities.
Hired in GRC
A practical career guide to landing your first governance, risk and compliance role — skills, frameworks, portfolio and interviews.
SecAI+ CY0-001: 300 Practice Questions
300 exam-style SecAI+ practice questions with full explanations, organised by exam area and finished with mixed mock exams.
The Voice Is Not the Authority
Protecting people, payments and reputation from deepfake voice and video fraud — verification controls that work.
Day One to Day 180
A playbook for a new CISO's first six months — assessment, strategy, board reporting and building the team.
Shadow AI
Staff are already using AI tools you never approved. How to find shadow AI, manage the risk and offer safer alternatives.
The Beneficiary Has Changed
Stopping invoice fraud, business email compromise and payment diversion — the controls every finance team needs.
AIGP Exam Prep 2027: 300 Practice Questions
300 exam-style AIGP practice questions with full explanations, organised by exam area and finished with mixed mock exams.
Don't Touch the Interlock
Cybersecurity written for control, automation and process engineers — secure design, maintenance and change on the plant floor.
Locked Down by Sunday
A step-by-step weekend plan to secure your accounts, devices, home network and family online — no technical background needed.
Still Trading on Monday
Affordable, practical cybersecurity for small businesses — the essential controls, staff habits and incident plan that matter most.
Managing Machines That Act
A practical guide for managers leading teams that work alongside AI — adoption, quality, risk and accountability.
Priced to Deliver
How to deliver security leadership as a virtual or fractional CISO — engagements, assessments, roadmaps and client reporting.
AAISM Exam Prep: 300 Practice Questions
300 exam-style AAISM practice questions with full explanations, organised by exam area and finished with mixed mock exams.
When the Line Stops
What every plant and operations manager needs to know about cyber risk to production, safety and uptime — and what to ask for.
ISO 27001:2022 Lead Auditor & Lead Implementer: 300 Practice Questions
300 exam-style ISO/IEC 27001:2022 Lead Auditor and Lead Implementer practice questions with full explanations, organised by exam area and finished with mixed mock exams.
The Chat Is Closed, the Agent Is Still Acting
Responding when AI systems fail, are attacked or cause harm — detection, containment, investigation and reporting.
From IT to the Plant Floor
A career guide to industrial and OT cybersecurity — the skills, labs, certifications and routes in from IT or engineering.
Safe by Default
Building products and services that are secure out of the box — secure defaults, design principles and proving it to customers and regulators.
CISM 2027 Question Bank: 300 Practice Questions
A large bank of CISM-style questions across all four domains, with explanations grounded in the security manager's perspective.
Released 14 October 2026 · Certification & exam guides
CISM Exam Guide 2027
A complete exam guide for CISM, mapped to the official exam objectives, with worked examples and practice questions.
CompTIA Network+ Study Guide
A complete study guide for CompTIA Network+, mapped to the official exam objectives, with worked examples and practice questions.
CISA Exam Guide 2027
A complete exam guide for CISA, mapped to the official exam objectives, with worked examples and practice questions.
PRINCE2 Foundation & Practitioner Exam Prep
A complete exam prep guide for PRINCE2 Foundation and Practitioner, mapped to the official exam objectives, with worked examples and practice questions.
CompTIA SecOT+ Study Guide
A complete study guide for CompTIA SecOT+, mapped to the official exam objectives, with worked examples and practice questions.
Microsoft Azure Administrator AZ-104 Exam Guide
A complete exam guide for Microsoft Azure Administrator (AZ-104), mapped to the official exam objectives, with worked examples and practice questions.
CompTIA CySA+ Study Guide
A complete study guide for CompTIA CySA+, mapped to the official exam objectives, with worked examples and practice questions.
AIGP Exam Prep 2027
A complete exam prep guide for AIGP, mapped to the official exam objectives, with worked examples and practice questions.
CompTIA SecAI+ Study Guide
A complete study guide for CompTIA SecAI+, mapped to the official exam objectives, with worked examples and practice questions.
Microsoft Azure Fundamentals AZ-900
A complete exam guide for Microsoft Azure Fundamentals (AZ-900), mapped to the official exam objectives, with worked examples and practice questions.
CCSP Exam Guide
A complete exam guide for CCSP, mapped to the official exam objectives, with worked examples and practice questions.
ISO/IEC 27001 Lead Auditor & Implementer Practice Guide
A complete practice guide for ISO/IEC 27001 lead auditor and implementer certification, mapped to the official exam objectives, with worked examples and practice questions.
CompTIA A+ Practice Tests
A complete practice test book for CompTIA A+, mapped to the official exam objectives, with worked examples and practice questions.
ITIL 4 Foundation Exam Prep
A complete exam prep guide for ITIL 4 Foundation, mapped to the official exam objectives, with worked examples and practice questions.
Microsoft Azure Solutions Architect AZ-305
A complete exam guide for Microsoft Azure Solutions Architect Expert (AZ-305), mapped to the official exam objectives, with worked examples and practice questions.
AAISM Exam Prep
A complete exam prep guide for AAISM, mapped to the official exam objectives, with worked examples and practice questions.
CRISC Exam Guide
A complete exam guide for CRISC, mapped to the official exam objectives, with worked examples and practice questions.
Coming soon · in KDP review
CISSP 2027 Question Bank: 300 Practice Questions
300 CISSP-style questions across all eight domains, with explanations that teach the managerial mindset.
CompTIA A+ Study Guide
A complete study guide for CompTIA A+, mapped to the official exam objectives, with worked examples and practice questions.
CompTIA Security+ Study Guide
A complete study guide for CompTIA Security+, mapped to the official exam objectives, with worked examples and practice questions.
CISSP Exam Guide 2027
A complete exam guide for CISSP, mapped to the official exam objectives, with worked examples and practice questions.
PMP Exam Prep 2027
A complete exam prep guide for PMP, mapped to the official exam objectives, with worked examples and practice questions.
Cisco CCNA Exam Guide
A complete exam guide for Cisco CCNA, mapped to the official exam objectives, with worked examples and practice questions.
AWS Solutions Architect Associate Exam Guide
A complete exam guide for AWS Certified Solutions Architect – Associate, mapped to the official exam objectives, with worked examples and practice questions.
Technology, AI & career skills · October 2026
Ship It with Claude Code
A practical guide to building and shipping real software with Claude Code: planning, prompting, reviewing and releasing work you can stand behind.
Learn Python by Building Real Things
Learn Python by making working programs rather than memorising syntax, with each chapter producing something you can run and extend.
Production LLM Engineering
How to take large language model features from prototype to production: evaluation, cost, latency, safety and operations.
AI Agents in Python That You Can Trust
Build AI agents in Python with the controls that make them dependable: bounded tools, logging, evaluation and human oversight.
The Claude Workflow Playbook
A playbook of repeatable workflows for using Claude at work: writing, analysis, research and review, with clear habits for checking the output.
Python for the Busy Office
Python for people who work in offices: automate spreadsheets, reports, email and files without becoming a full-time programmer.
SQL on Real Data
Learn SQL by querying realistic datasets, from simple selects to joins, aggregation and window functions.
System Design Interviews by Doing
Prepare for system design interviews by working through designs step by step, with the reasoning behind each trade-off.
The ChatGPT Work Method
A structured method for using ChatGPT at work, from framing the task to checking and improving the result.
Prompts That Pass the Test
Design, test and maintain prompts like software: with test cases, evaluation criteria and versioning.
Build Real Machine Learning Models in Python
Build machine learning models in Python from data preparation through evaluation, with attention to the mistakes that undermine results.
The Python Coding Interview Playbook
A playbook for Python coding interviews: patterns, practice problems and how to talk through your solution.
Crack the Data Science Interview
Prepare for data science interviews across statistics, machine learning, SQL and case discussion.
Automation That Doesn't Break
Build automation that keeps working: error handling, logging, retries, scheduling and sensible maintenance.
Containers That Survive Production
A practical guide to running containers in production: images, configuration, networking, security and troubleshooting.
Run Your Own Linux Server
Set up and run your own Linux server: installation, users, services, backups and basic hardening.
Terraform That Survives Production
Write infrastructure as code with Terraform that stays maintainable: modules, state, environments and safe change.
Dashboards People Trust
Design dashboards that people believe and use: clear metrics, honest charts and documented definitions.
Confident with Technology After 60
A friendly guide to everyday technology for older adults: devices, accounts, online safety and getting help.
Algorithms You Can Actually See
Learn core algorithms through visual explanations and worked examples that make each step visible.
Raspberry Pi Projects That Keep Running
Build Raspberry Pi projects that stay up: reliable power, storage, networking and remote maintenance.
Ship It on Google Cloud
Deploy applications on Google Cloud: choosing services, configuring them, controlling cost and operating what you ship.
Pipelines That Survive Monday Morning
Build data pipelines that keep working: idempotence, testing, monitoring and recovery when upstream data changes.
The Reviewable Repository
Organise code, history and documentation so that other people can review and understand your work quickly.
Front-End Engineering That Lasts
Build front-end code that lasts: component design, state, accessibility, performance and testing.
The Quiet Rack
A guide to building a home or small-office server rack that is quiet, efficient and manageable.
Rust Systems Programming from the Ground Up
Learn Rust for systems programming from first principles: ownership, memory, concurrency and building real tools.
Statistics by Simulation
Understand statistics by simulating it: build intuition for distributions, sampling and inference with code.
The Production Lakehouse Playbook
A playbook for running a data lakehouse in production: storage formats, governance, performance and cost.
300+ more books are on the way.
New practitioner handbooks, exam guides and field manuals are in production. Follow Professor Kai London on Amazon to hear about each release first.
Map the fault. Hold the line. Prove it held. Every title turns fast-moving regulation into an operating discipline a board can stand behind.
About the author
Professor Kai London — CISSP, CISM.
An internationally recognised cybersecurity executive, board advisor, and Founder & CEO of Quantum AI Systems Security LLC — writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.