AI Blue · Whitepaper

Glossary · Appendices

Glossary

Glossary from "AI Blue"

Author Conceived and directed by Gunnar Nordqvist; text written by AI agents under his direction.
Published 10 November 2026
Build number 2026.11
blue-team security-operations ai-governance architecture-as-code ai-agents

This glossary defines the vocabulary of AI Blue, from the five blue team functions and the degrees of delegation to the artefacts, roles, tools, frameworks and organisations that the chapters use. Each entry gives the book's own usage in one or two sentences and names the chapter where the term is introduced or defined. Where a term is used in a sense the chapters do not support, it is left out rather than defined.

Entries are grouped alphabetically under their initial letter. An identifier in code formatting, such as DET-* for detection records, names a pattern: the wildcard stands for the number the organisation assigns to each record, and the book's examples use NR for Nordvik Region and HM for Hansa Mutual.

Levels, modes and action classes are defined in sets, so read an entry for a level or a class together with the entries it refers to. The book sets ceilings rather than single values: where an entry states a default, a profile may set a lower level, and the lowest ceiling that applies governs.

Primary topics explored

  1. How to use this glossary
  2. A
  3. B
  4. C
  5. D
  6. E

About AI Blue

AI Blue is Book 8 of The Transformed Architecture. It examines how the blue team, the people and functions that defend an organisation, is transformed when artificial intelligence takes part in their work: anticipating, detecting, investigating, responding and learning, the team's own AI and how to verify and protect it, operating models, roles, decision rights, regulation and measurement, and the careers and wellbeing of the people involved, for European enterprises and public authorities.

It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team, AI Threat, The Transformed Security Architect and AI Boss.

Who should read this

Chief information security officers, heads of security operations, SOC managers, analysts, detection engineers and incident commanders, security and AI architects, boards and management bodies, procurement leads, works councils and unions, data protection and audit functions, and public-sector leaders.

Portrait of Gunnar Nordqvist

Gunnar Nordqvist

Conceived, directed and published the books of The Transformed Architecture.

Continue with the full chapter

Read the full chapter online

Glossary: Glossary in AI Blue gives the detailed explanations, practical examples and implementation patterns behind this summary.

This whitepaper belongs to “Appendices” and is one of 32 drawn from the manuscript.