<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-investigation-readiness/</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
  
  <url>
    <loc>https://oda3.org/institute/insights/posts/hugging-face-ai-driven-intrusion/</loc>
    <lastmod>2026-07-19</lastmod>
  </url>
<url>
    <loc>https://oda3.org/architecture/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/comparison/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/about/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/contact/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/faculty/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/92-of-organizations-lack-visibility-into-ai-identities-the-ungoverned-workforce/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/addressing-ai-discovered-risks-in-legacy-code-compliance/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-cybersecurity-nists-new-framework-and-its-impact/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-governance-regulations-surge-19-new-laws-passed-in-april-2026/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-governance-why-foundational-security-matters/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-incident-taxonomy-gap-analysis-q2-2026/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-monitoring-architecture/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-oauth-risks-navigating-security-in-cloud-integrations/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-red-teaming-methodology/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-risk-vs-security-risk-matrix/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-architecture-patterns/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-assurance-framework-cheat-sheet/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-control-validation-guide/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-design-principles/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-evidence-collection-strategies/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-governance-model/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-security-incident-response-playbook-cheat-sheet/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-system-inventory-why-spreadsheets-fail-and-what-to-use-instead/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/ai-threats-essential-certification-strategies-for-compliance-officers/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/aligning-ai-agents-with-nist-and-iso-standards/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/augment-dont-replace-closing-10-critical-gaps-in-the-cosai-ai-irf-for-2026/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/california-sb-53-catastrophic-ai-risk-definitions-and-what-they-mean-for-your-compliance-pro/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/closing-the-cybersecurity-response-gap-with-ai/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/context-modifier-taxonomy/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/decision-trace-logging-rollback/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/deduplication-harm-separation/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/enhancing-vulnerability-governance-with-nist-and-iso-standards/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/eu-ai-act-compliance-74-days-to-deadline/</loc>
    <lastmod>2026-07-19</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/eu-ai-act-deadlines-shift-omnibus-package-extends-high-risk-compliance-to-20272028/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/how-ai-is-reshaping-vulnerability-management-lessons-from-project-glasswing/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/how-to-detect-and-defend-against-ai-assisted-malware/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/integrating-ai-ethics-into-compliance-strategies/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/key-takeaways-from-the-ai-security-summit-what-enterprises-need-to-know/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/litellm-deserialization-flaw-the-ai-supply-chain-attack-that-compromised-mercor/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/mcp-protocol-design-flaw-anthropic-refuses-fix-researchers-find-rce-in-every-sdk/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/mcp-security-insights-risk-and-mitigation-strategies/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/navigating-ai-compliance-across-gdpr-hipaa-sec-finra/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/navigating-compliance-challenges-in-ai-inventory/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/nist-ai-risk-management-framework-ai-rmf-vs-iso-iec-42001-which-certification-should-you-pur/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/nist-cyber-ai-profile-working-session-what-the-next-draft-will-include/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/owasp-top-10-for-agentic-ai-2026-why-prompt-injection-is-just-the-first-move/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/post-quantum-readiness-for-ai-infrastructure-mcp-endpoints-why-boards-should-act-now/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/preparing-for-eu-ai-act-enforcement-a-100-day-ciso-action-plan/</loc>
    <lastmod>2026-07-19</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/prevent-ai-credential-breaches-with-identity-bound-execution/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/prompt-injection-mitigation-controls/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/q1-2026-intelligence-report-the-ai-control-plane-is-the-new-battlefield/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/q2-2026-ai-security-incident-risk-analysis/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/real-world-ai-threats-owasps-2026-insights/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/retrieval-augmented-generation-rag-security-cheat-sheet/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/rogue-ai-agents-how-to-detect-isolate-and-terminate-unauthorized-autonomous-actors/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/sec-exam-priorities-2026-ai-washing-ai-trading-systems-and-broker-dealer-obligations/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/securing-ai-development-tools-against-cyber-threats/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/securing-ai-supply-chains-key-strategies-for-2026/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/securing-the-silicon-why-hardware-trust-matters-for-ai-deployment/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/severity-scoring-engine/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/the-ai-agent-security-crisis-why-88-of-enterprises-are-already-affected/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/the-ai-security-vendor-landscape-separating-ai-security-from-security-with-ai/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/the-ai-system-in-your-stack-is-a-privileged-user-have-you-secured-it-like-one/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/the-hidden-risk-in-your-ai-stack-why-default-configurations-are-a-security-nightmare/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/the-impact-of-the-eu-ai-act-on-ai-system-inventory-management/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/the-rise-of-autonomous-threat-actors-q1-2026-ai-security-analysis/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/treasury-fed-warn-bank-ceos-anthropics-mythos-model-finds-zero-days-automatically/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/trusted-access-is-the-new-ai-security-perimeter/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/uncovering-risks-the-dangers-of-unauthenticated-ai-endpoints/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/understanding-agentic-ai-risks-the-importance-of-validation-gates/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/understanding-ai-agent-liability-and-compliance-risks/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/us-government-targets-ai-model-theft-distillation-detection-becomes-national-security-priori/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/vector-database-security-checklist-cheat-sheet/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/vercel-breach-through-context-ai-oauth-tokens-ai-tool-supply-chain-nightmare/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/when-ai-lies-legal-and-reputational-risks-of-generative-content-at-scale/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/participate/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/partnership/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/research/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/resources/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/training/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/legal/gel-v1-0/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/legal/grievance-redressal/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/legal/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/legal/privacy/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/resources/changelog/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/resources/data-tracker/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/resources/examples/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/resources/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url><loc>https://oda3.org/institute/insights/posts/eu-ai-act-engineering-problem-operational-evidence/</loc><lastmod>2026-07-19</lastmod></url>
  <url>
    <loc>https://oda3.org/institute/news/oda3-publishes-gaissf-ecosystem-operational-ai-security-assurance/</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/insights/posts/why-oda3-institute-published-gaissf-ecosystem/</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
  <url>
    <loc>https://oda3.org/institute/news/</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
<url><loc>https://oda3.org/institute/insights/posts/openai-agent-escape-incident-analysis/</loc><lastmod>2026-07-28</lastmod></url><url><loc>https://oda3.org/institute/insights/posts/operational-assurance-implications-modern-ai-interoperability-protocols/</loc><lastmod>2026-07-28</lastmod></url>
  <url><loc>https://oda3.org/institute/insights/posts/regulatory-reflex-divergence-frontier-model-security-incident/</loc><lastmod>2026-07-29</lastmod></url>
</urlset>
