# Guides & PDFs

> Practical guidance for technology decisions, plus career resources. Read online or download the PDF.

[Canonical HTML page](https://trustcyber.ca/guides/)

- 23 downloadable guides and PDFs
- Author: Junior Williams

## Guide library

- [Before You Buy Another AI Security Tool, Map What You Already Have](https://trustcyber.ca/insights/before-you-buy-another-ai-security-tool/index.md): Map one AI workflow, its existing controls and the evidence behind them before deciding whether another security product fills a real gap.
  - Published: 2026-10-14. Topics: AI security, AI governance, Cybersecurity risk.
- [Before You Buy Another AI Security Tool, Map What You Already Have PDF](https://trustcyber.ca/guides/before-you-buy-another-ai-security-tool.pdf)
- [Changing the Model Means Retesting the Workflow](https://trustcyber.ca/insights/changing-the-model-means-retesting-the-workflow/index.md): Review model changes against the full workflow: sources, permissions, actions, escalation and failure handling, with evidence and a way to recover.
  - Published: 2026-10-14. Topics: AI governance, Reliability, Enterprise architecture.
- [Changing the Model Means Retesting the Workflow PDF](https://trustcyber.ca/guides/changing-the-model-means-retesting-the-workflow.pdf)
- [The Real Cost of AI Is the Cost of a Result You Can Use](https://trustcyber.ca/insights/the-real-cost-of-ai/index.md): Measure the cost of an accepted AI result, including review, correction, integration and support, with a worked example and a practical pilot method.
  - Published: 2026-10-14. Topics: AI strategy, AI implementation, Human-AI teaming.
- [The Real Cost of AI Is the Cost of a Result You Can Use PDF](https://trustcyber.ca/guides/the-real-cost-of-ai.pdf)
- [Your AI Agent Has an Identity. Who Owns It?](https://trustcyber.ca/insights/your-ai-agent-has-an-identity/index.md): Make agent ownership practical by recording identities, access, approval points and lifecycle decisions, then checking how suspension and recovery work.
  - Published: 2026-10-14. Topics: Agentic AI, AI governance, Cybersecurity.
- [Your AI Agent Has an Identity. Who Owns It? PDF](https://trustcyber.ca/guides/your-ai-agent-has-an-identity.pdf)
- [OSFI’s AI warning: waiting is a decision, too](https://trustcyber.ca/insights/osfi-ai-investment-decisions/index.md): Three AI investment questions for Canadian banks and insurers: improve defences, set authority and price dependency. Read the brief and four-page PDF.
  - Published: 2026-10-13. Topics: AI governance, Cybersecurity, Financial services.
- [OSFI’s AI warning: waiting is a decision, too PDF](https://trustcyber.ca/guides/osfi-ai-evidence-brief.pdf)
- [AI agent egress control: constrain the request and the role](https://trustcyber.ca/insights/agent-egress-control/index.md): Review AI agent egress, MCP request paths, local metadata access and execution-role scope. Read the field guide and download the six-page PDF.
  - Published: 2026-10-13. Topics: AI agents, Cybersecurity, AI governance.
- [AI agent egress control: constrain the request and the role PDF](https://trustcyber.ca/guides/agent-egress-control.pdf)
- [Can a Small Local Model Help an AI Assistant Remember What Matters?](https://trustcyber.ca/insights/local-ai-memory-continuity/index.md): A small Kev memory pilot compares all available excerpts, search, and selective retention. Read the findings, limits, and five-page research PDF.
  - Published: 2026-10-13. Topics: AI memory, AI agents, Local AI.
- [Can a Small Local Model Help an AI Assistant Remember What Matters? PDF](https://trustcyber.ca/guides/local-ai-memory-continuity.pdf)
- [Bill C-8 readiness: What to build before the CCSPA takes effect](https://trustcyber.ca/insights/bill-c8-ccspa-readiness/index.md): Prepare for the CCSPA with clear incident decision owners, security-program evidence and supplier terms. Read the brief and download the five-page PDF.
  - Published: 2026-10-12. Topics: Cybersecurity, Compliance, Resilience.
- [Bill C-8 readiness: What to build before the CCSPA takes effect PDF](https://trustcyber.ca/guides/bill-c8-readiness.pdf)
- [Cyber Readiness in the Frontier AI Era](https://trustcyber.ca/insights/frontier-ai-cyber-readiness/index.md): A practical guide to Canada's October 2026 cyber security direction, with six pillars, evidence checks, recovery exercises, and an implementation plan.
  - Published: 2026-10-06. Topics: Cybersecurity, AI governance, Resilience, Enterprise architecture.
- [Cyber Readiness in the Frontier AI Era PDF](https://trustcyber.ca/guides/frontier-ai-cyber-readiness-guide.pdf)
- [When Research Agents Cross Access Boundaries](https://trustcyber.ca/insights/when-research-agents-cross-access-boundaries/index.md): How routine AI research led to attempted intrusions: a review of Transluce findings, Australian government evidence, and practical oversight controls.
  - Published: 2026-09-24. Topics: AI governance, Agentic AI, Cybersecurity.
- [When Research Agents Cross Access Boundaries PDF](https://trustcyber.ca/guides/when-research-agents-cross-access-boundaries.pdf)
- [Pumping the Brakes for Whom?](https://trustcyber.ca/insights/pumping-the-brakes-for-whom/index.md): What should an AI slowdown actually stop? Junior Williams examines internal model use, fair access, and independent authority to halt dangerous work.
  - Published: 2026-09-13. Topics: AI governance, Agentic AI, Cybersecurity, AI economics.
- [Pumping the Brakes for Whom? PDF](https://trustcyber.ca/guides/pumping-the-brakes-for-whom.pdf)
- [If AI Can Change Everything, Why Not Start With What Humanity Needs?](https://trustcyber.ca/insights/if-ai-can-change-everything/index.md): AI should help secure food, housing, education and a livable planet worldwide. Promised benefits do not justify existential risks.
  - Published: 2026-09-10. Topics: AI governance, AI for Good, Global Development, Human Rights, Post-Scarcity.
- [If AI Can Change Everything, Why Not Start With What Humanity Needs? PDF](https://trustcyber.ca/guides/if-ai-can-change-everything.pdf)
- [The AI Model Release Wave: 42 models in 30 days](https://trustcyber.ca/insights/ai-model-release-wave-gpt-6-astra-2026/index.md): Independent analysis of 42 AI releases in 30 days: agentic work, cost per task, open deployment, specialization, and enterprise control.
  - Published: 2026-09-03. Topics: Agentic AI, AI governance, Enterprise architecture, AI economics.
- [The AI Model Release Wave: 42 models in 30 days PDF](https://trustcyber.ca/guides/ai-model-release-wave-gpt-6-astra-2026.pdf)
- [CIRA Cyber Stack: Canadian control, dependencies and evidence](https://trustcyber.ca/insights/cira-cyber-stack-assessment-2026/index.md): An independent assessment of CIRA Cyber Stack's Canadian control, service dependencies, evidence, and questions buyers should ask before purchase.
  - Published: 2026-09-03. Topics: Cybersecurity risk, Canada, Digital sovereignty, Technology procurement.
- [CIRA Cyber Stack: Canadian control, dependencies and evidence PDF](https://trustcyber.ca/guides/cira-cyber-stack-constructive-assessment-2026.pdf)
- [Graph Engineering the Art of Possible](https://trustcyber.ca/insights/graph-engineering-the-art-of-possible/index.md): Design AI workflows as connected steps with defined inputs, handoffs, approval points, and evidence, so interrupted work can be reviewed and resumed.
  - Published: 2026-08-17. Topics: Enterprise architecture, AI governance, Agentic AI, Context architecture.
- [Graph Engineering the Art of Possible PDF](https://trustcyber.ca/guides/graph-engineering-the-art-of-possible-2026.pdf)
- [Canadian NVIDIA resellers and solution providers](https://trustcyber.ca/insights/canadian-nvidia-resellers-solution-providers/index.md): A neutral guide to publicly documented Canadian NVIDIA partner status, buying routes, provider capabilities, and evidence limitations.
  - Published: 2026-08-11. Topics: Infrastructure, Canada, Technology procurement.
- [Canadian NVIDIA resellers and solution providers PDF](https://trustcyber.ca/guides/canadian-nvidia-resellers-2026.pdf)
- [An agent will always find more work](https://trustcyber.ca/insights/an-agent-will-always-find-more-work/index.md): A field essay on what one unbounded multi-agent run reveals about decision rights, independent measurement, resource ceilings, and external control.
  - Published: 2026-08-07. Topics: Agentic AI, AI governance, Multi-agent systems.
- [An agent will always find more work PDF](https://trustcyber.ca/guides/an-agent-will-always-find-more-work-2026.pdf)
- [The Modern Enterprise Architect's Handbook](https://trustcyber.ca/insights/modern-enterprise-architects-handbook/index.md): A practical operating guide for turning enterprise strategy into coherent architecture, investable transition states, governance, and evidence.
  - Published: 2026-07-27. Topics: Enterprise architecture, AI governance, Transformation.
- [The Modern Enterprise Architect's Handbook PDF](https://trustcyber.ca/guides/the-modern-enterprise-architects-handbook-2026.pdf)
- [Graph RAG Is for Connected Evidence](https://trustcyber.ca/insights/graph-rag-connected-evidence/index.md): A field guide to deciding when graph-enhanced retrieval is worth the extra machinery and how to pilot it safely.
  - Published: 2026-07-26. Topics: Graph RAG, Connected evidence, AI governance.
- [Graph RAG Is for Connected Evidence PDF](https://trustcyber.ca/guides/graph-rag-connected-evidence.pdf)
- [Graph RAG: When Structure Beats Similarity](https://trustcyber.ca/insights/graph-rag-when-structure-beats-similarity/index.md): A practical decision guide for determining when graph retrieval solves a real query-shape problem that vector search cannot.
  - Published: 2026-07-26. Topics: Graph RAG, Context architecture, Retrieval.
- [Graph RAG: When Structure Beats Similarity PDF](https://trustcyber.ca/guides/graph-rag-when-structure-beats-similarity.pdf)
- [AI is growing a spine](https://trustcyber.ca/insights/ai-growing-spine-agent-authority/index.md): The spine metaphor explains the shift from AI systems that generate answers to agentic systems that carry intention into consequential action.
  - Published: 2026-07-21. Topics: Agentic AI, AI governance.
- [AI is growing a spine PDF](https://trustcyber.ca/guides/ai-is-growing-a-spine-2026.pdf)
- [Harness Engineering: Designing the System Around the Model](https://trustcyber.ca/insights/harness-engineering-system-around-model/index.md): The article argues that the durable enterprise advantage in agentic AI sits in the harness around the foundation model rather than in the model alone.
  - Published: 2026-06-25. Topics: Harness engineering, Agentic AI.
- [Harness Engineering: Designing the System Around the Model PDF](https://trustcyber.ca/guides/harness-engineering-designing-the-system-around-the-model-2026.pdf)
- [How to Get a Job](https://trustcyber.ca/guides/how-to-get-a-job/index.md): A practical job-search guide by Junior Williams: connections, communication, skills, certifications and education. Download the PDF and find useful resources.
  - Topics: Career.
- [How to Get a Job PDF](https://trustcyber.ca/guides/how-to-get-a-job.pdf)

## Explore topics

- [Enterprise architecture](https://trustcyber.ca/insights/enterprise-architecture/index.md): Enterprise architecture insights on strategy, transition states, context architecture, transformation, reliability, governance, and evidence.
- [Cybersecurity risk](https://trustcyber.ca/insights/cybersecurity-risk/index.md): Cybersecurity risk insights on resilience, exposure, AI security, threat intelligence, operational decisions, controls, and recovery evidence.
- [AI governance](https://trustcyber.ca/insights/ai-governance/index.md): Practical AI governance insights on authority, risk, human oversight, agentic systems, responsible AI, controls, and reviewable evidence.

## Related library

- [Insights](https://trustcyber.ca/insights/index.md): Independent articles, briefs and films on AI governance, cybersecurity risk, and enterprise architecture.
