MicrosoftI’m incredibly excited about the possibilities here. John Lambert’s observation that“Defenders think in lists. Attackers think in graphs. As long as this is true, attackers win” has stuck with me for years.
Microsoft Graph has already demonstrated the power of connected context. What gets really interesting to me is the opportunity for security-focused graphs to take that further, connecting identities, assets, vulnerabilities, threats, controls, policies, and evidence so we can reason across Protect, Detect, Respond, Recover, and Govern.
This is where I see enormous potential for AI. Rather than asking AI to continually infer relationships from disconnected data, we can increasingly form, preserve, and reason over those relationships explicitly. AI can then use that context to uncover patterns and connections that might otherwise remain hidden.
And I think the opportunity extends beyond investigation. This graph and agentic model eventually help enable continuous Zero Trust decisions. Not simply “What happened?” but “Should I trust this identity, resource, relationship, or action right now, and what evidence supports that decision?”
The same foundation could have powerful implications for enterprise risk, security, compliance, and governance, connecting technical evidence to business and regulatory requirements. I also see Harness as an opportunity to bridge the gap between policy and implementation: aligning frameworks, regulations, policies, and technical controls; continuously validating whether those controls are operating as intended; and capturing the evidence and end-to-end traceability needed to make compliance measurable, explainable, and verifiable.
Really excited to see where the Project Perception team and community take this. This feels like the beginning of something much bigger.
Smiles,
Gladys
https://www.linkedin.com/in/gladys-rodriguez-cb/
