The Agile Enterprise Playbook

Security Posture — Zero Trust, GDPR, and Ethical AI Governance is the fifth volume of The Agile Enterprise Playbook, a five-book series built on the FOCUS Methodology — an execution-oriented framework for CTOs, enterprise architects, and technology leaders navigating the Gen AI era under GDPR, the EU AI Act, NIS2, and DORA.

Castle-and-moat security is dead. As the network perimeter dissolves and Agentic AI assumes autonomous execution, traditional boundary-based defense is deeply flawed — every user, service, and agent must now be authenticated, authorized, and audited continuously. This book shows how to secure the modern, borderless enterprise against the backdrop of Europe's stringent regulatory environment, giving you the full toolkit to execute:

• Zero Trust Architecture built on NIST and CISA principles
• Continuous authentication, microsegmentation, and dynamic least privilege
• Structured Autonomy for Agentic AI with the risk tiers mandated by the EU AI Act
• Mandatory human-in-the-loop escalation for high-risk AI systems
• Ethical impact assessments and algorithmic bias audits that keep automated decision-making compliant with GDPR Article 22

Written for practitioners in or trading with the EU, this is not a theoretical manifesto. Each chapter pairs the theory with a step-by-step methodology and real-world executions — from GenAI customer support agents to fintech scale-ups — so you can replace the castle-and-moat with a Zero Trust posture in which agentic AI acts under control: trusted, audited, and compliant by default.

Continuous Evolution — REAP, FinOps, and Architecture Debt is the fourth volume of The Agile Enterprise Playbook, a five-book series built on the FOCUS Methodology — an execution-oriented framework for CTOs, enterprise architects, and technology leaders navigating the Gen AI era under GDPR, the EU AI Act, NIS2, and DORA.

The static IT audit is dead. The digital portfolio is a living organism that requires continuous pruning, scaling, and financial optimization — and the Gen AI transition is won or lost on your ability to fund it by ruthlessly retiring legacy debt. This book replaces obsolete, annual-audit governance with dynamic portfolio disposition, giving you the full toolkit to execute:

• REAP (Reassess, Extract, Advance, Prune) for continuous portfolio evaluation and disposition
• Quantifying Enterprise Architecture Debt mathematically, through the detection of EA Smells
• Compliance debt: exposing legacy systems that cannot meet GDPR or NIS2 logging requirements
• FinOps: from aggregate cloud spend to precise cloud unit economics
• AI unit economics: the ROI and token-burn rates of Gen AI inference

Written for practitioners in or trading with the EU, this is not a theoretical manifesto. Each chapter pairs the theory with a step-by-step methodology and real-world executions — from GenAI customer support agents to fintech scale-ups — so you can turn your portfolio from a legacy cost sink into a self-financing engine that funds its own AI evolution.

The Modern Sourcing Engine — From Build vs. Buy to the BBEC Framework is the first volume of The Agile Enterprise Playbook, a five-book series built on the FOCUS Methodology — an execution-oriented framework for CTOs, enterprise architects, and technology leaders navigating the Gen AI era under GDPR, the EU AI Act, NIS2, and DORA.

"Build vs. Buy" is dead. Every sourcing decision today is a multi-dimensional strategic exercise involving digital sovereignty, vendor lock-in, financial accountability, and AI readiness. This book replaces the binary dilemma with the BBEC Framework — Buy, Build, Extend, Compose — and gives you the full toolkit to execute it:

• Strategic positioning with Wardley Mapping and Core vs. Context analysis, including EU sovereignty considerations
• Domain discovery through Event Storming, Value Stream Mapping, JTBD, and MoSCoW interrogation
• The BBEC verdict engine: Fit/Gap Traceability Matrix, Business Fitness Score, Plugin Test, and open-source "Fork Tax" management
• Financial modeling that defeats optimism bias: 50/90 range estimation, Capers Jones multipliers, Cost of Delay, and real options
• Governance via the Architecture Decision Workflow, ADRs with sunset clauses, weighted scoring, and decommissioning discipline

Written for practitioners in or trading with the EU, this is not a theoretical manifesto. Each chapter pairs the theory with a step-by-step methodology and real-world executions — from GenAI customer support agents to fintech scale-ups — so you can move your organization from feature factory to a secure-by-design, compliant-by-default, AI-ready enterprise.

Data Ownership: The Bedrock of Compliance and Gen AI is the second volume of The Agile Enterprise Playbook, a five-book series built on the FOCUS Methodology — an execution-oriented framework for CTOs, enterprise architects, and technology leaders navigating the Gen AI era under GDPR, the EU AI Act, NIS2, and DORA.

Gen AI on ungoverned data is a liability. In the age of Agentic AI, every retrieval-augmented answer and every autonomous decision inherits the legal status of the data behind it — and initiatives built on ungoverned data lakes are destined for legal and operational failure. This book treats data ownership as the foundational tier of enterprise intelligence — state, memory, and knowledge — and gives you the full toolkit to govern it:

• GDPR at the core: data minimization, purpose limitation, and the Right to Be Forgotten baked into data lifecycle governance
• The RAG foundation: Bounded Contexts and enterprise Knowledge Graphs that fuel retrieval patterns with accurate, governed data
• Data residency & sovereignty: architectural blueprints with localized processing, so PII never leaves the EU
• Mathematical sanitization of data before it touches a Generative AI model
• Data domains and lifecycle governance as a first-class architecture tier

Written for practitioners in or trading with the EU, this is not a theoretical manifesto. Each chapter pairs the theory with a step-by-step methodology and real-world executions — from GenAI customer support agents to fintech scale-ups — so you can turn your data estate from a compliance risk into the trusted, AI-ready bedrock your enterprise runs on.

Notes on how it parallels book 1's text (source):

• Opening paragraph uses the identical series/FOCUS framing, only swapping the subtitle and volume number.
• Hook sentence mirrors "'Build vs. Buy' is dead" with the book's own thesis ("Gen AI on ungoverned data is a liability"), then the same "gives you the full toolkit to execute it:" lead-in to the bullets.
• The five bullets are expanded from the book's "What you will learn" list on the site, so the claims stay consistent with the book page.
• Closing paragraph keeps the "not a theoretical manifesto" pattern and the same real-world examples, ending on a bedrock/compliance payoff that fits this volume.

The Connectivity Matrix — APIs, EDA, and Team Topologies is the third volume of The Agile Enterprise Playbook, a five-book series built on the FOCUS Methodology — an execution-oriented framework for CTOs, enterprise architects, and technology leaders navigating the Gen AI era under GDPR, the EU AI Act, NIS2, and DORA.

Point-to-point integration is dead. Connectivity sits directly on top of Ownership of Data: it is the integration layer that bridges governed data silos and dynamic Gen AI reasoning engines — and every connection must now serve humans, services, and autonomous agents at once. This book untangles integration complexity and the socio-technical friction that comes with it, giving you the full toolkit to execute:

• API governance & Event-Driven Architecture: from rigid point-to-point connections to asynchronous, agentic-AI-ready patterns
• API gateways designed for LLMs: rate limiting, token cost management, and semantic caching
• Socio-technical alignment with the Team Topologies framework and the Inverse Conway Maneuver
• An Internal Developer Platform that hands developers pre-approved, GDPR-compliant architectural templates
• Real-time, asynchronous triggers that keep autonomous agents from breaking under synchronous load

Written for practitioners in or trading with the EU, this is not a theoretical manifesto. Each chapter pairs the theory with a step-by-step methodology and real-world executions — from GenAI customer support agents to fintech scale-ups — so you can turn your integration layer from a point-to-point liability into the governed nervous system of an AI-ready enterprise.

How it stays consistent with the series:

• Opening paragraph is the identical series/FOCUS formula, with book 3's subtitle and volume number.
• Hook keeps the blunt "X is dead" pattern ("'Build vs. Buy' is dead" → "Point-to-point integration is dead"), then positions the volume exactly as the site copy does: the layer between Ownership of Data and the AI reasoning engines.
• The five bullets are the book's "What you will learn" list from its site page, expanded into bold-lead statements.
• Closing mirrors books 1 and 2, ending on a nervous-system payoff that fits this volume.