<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://matthewcarr.com/</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/about</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/talks</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/press</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/advisory</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/contact</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/book</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.95</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/research</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.95</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/insights</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.95</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/briefing</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.95</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/news</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/news/category/ai-security</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/news/category/ai-cyber-attacks</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/news/category/ai-governance</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/news/category/ai-compliance</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/news/category/ai-safety-escapes</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/topic/ot-security</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.92</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/topic/board-governance</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.92</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/topic/ai-governance</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.92</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/topic/private-equity</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.92</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/topic/incident-response</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.92</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/insights/cybersecurity-due-diligence-private-equity</loc>
    <lastmod>2026-05-04</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/insights/ot-security-for-boards</loc>
    <lastmod>2026-05-03</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/research/defcon-ics-killswitch</loc>
    <lastmod>2018-08-11</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/research/moveit-transfer-disclosure</loc>
    <lastmod>2024-01-01</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/research/n-able-workgroup-security-risk</loc>
    <lastmod>2023-01-01</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/research/scada-physical-attack-2018</loc>
    <lastmod>2018-06-18</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/research/zoho-desk-disclosure</loc>
    <lastmod>2024-01-01</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://matthewcarr.com/briefing/2026-05-03-the-governance-gap</loc>
    <lastmod>2026-05-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.85</priority>
  </url>
</urlset>
