AI Blue · Whitepaper

References · Appendices

References and Sources

References from "AI Blue"

Author Conceived and directed by Gunnar Nordqvist; text written by AI agents under his direction.
Published 10 November 2026
Build number 2026.11
blue-team security-operations ai-governance architecture-as-code ai-agents

This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can locate European legislation, frameworks, threat assessments and practitioner literature quickly.

Entries 1 to 70 were carried over, without their back-links, from the bibliography of AI Red Team (Book 4), which treats AI in cyber defence across the NIST CSF 2.0 Functions; the access dates recorded there are kept and the entries are re-verified with scripts/verify_sources.py before release. Entries 71 to 77 are the earlier volumes of the series and entry 78 is Kvadrat. Entries 79 to 90 were verified for this book on 2026-11-10 against the publisher, proceedings or registry page and cover security-operations practice, workforce and automation research and two European instruments; further sources are added during drafting, each verified before it is cited.

Inline citations give the source number, the author or organisation, and the year, for example (9, MITRE, n.d.), and link to the entry here. Where an author is named in the sentence, the citation carries the year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; existing numbers are never reused.

Primary topics explored

  1. Numbered source index
  2. How to cite

About AI Blue

AI Blue is Book 8 of The Transformed Architecture. It examines how the blue team, the people and functions that defend an organisation, is transformed when artificial intelligence takes part in their work: anticipating, detecting, investigating, responding and learning, the team's own AI and how to verify and protect it, operating models, roles, decision rights, regulation and measurement, and the careers and wellbeing of the people involved, for European enterprises and public authorities.

It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team, AI Threat, The Transformed Security Architect and AI Boss.

Who should read this

Chief information security officers, heads of security operations, SOC managers, analysts, detection engineers and incident commanders, security and AI architects, boards and management bodies, procurement leads, works councils and unions, data protection and audit functions, and public-sector leaders.

Portrait of Gunnar Nordqvist

Gunnar Nordqvist

Conceived, directed and published the books of The Transformed Architecture.

Continue with the full chapter

Read the full chapter online

References: References and Sources in AI Blue gives the detailed explanations, practical examples and implementation patterns behind this summary.

This whitepaper belongs to “Appendices” and is one of 32 drawn from the manuscript.