Updated weekly
AI news, read through a compliance lens.
Regulatory moves, enforcement actions, and standards updates — each with the one line that matters: what you have to do about it.
-
What AI Governance Actually Is (And How It Differs From the Risk You Already Manage)
Level 1 · Foundations — Reading time: 11 minutes Last reviewed: August 2026 Somewhere in the first month of every AI governance program, a security or risk leader says a version of this: “We already do vendor risk. We already do a DPIA. We already have a change management process. What is actually new here?”…
-
How to Build an AI System Inventory
Most AI governance programs stall in the same place. Someone senior asks a reasonable question — “what AI are we actually running?” — and nobody can answer it in under three weeks. That question is the whole job compressed into six words. You cannot classify systems you have not found. You cannot assess risk on…
-
Is AI Use a CMMC Violation? What’s Law Now — and What’s Coming
Picture this: an employee pastes Controlled Unclassified Information (CUI) into ChatGPT to “clean up a report.” No new AI law was needed for that to become a compliance problem — under CMMC and DFARS, it may already be one. So when defense contractors ask “is there an AI law we need to follow?”, the honest…
-
How to Conduct an AI Security Risk Assessment: A Practical Guide for Organizations
AI security isn’t about replacing your existing cybersecurity program. It’s about extending governance, risk management, and security practices to address the unique risks introduced by artificial intelligence. Over the past few years, nearly every conversation I’ve had with organizations about AI adoption eventually lands on the same question: how do we actually know our AI…
-
What Can We Learn from OpenAI, Anthropic, and Google’s Approach to AI Governance?
Over the last year, I’ve noticed something interesting. Whether I’m speaking with executives, board members, cybersecurity professionals, or risk teams, the conversation eventually comes back to the same question: How do we govern AI without slowing down innovation? Everyone wants to take advantage of AI. Organizations see the opportunities. They see the productivity gains, the…
-
Will China Win The Physical AI Race?
Nabiha Sofia Herradi Law Degree • CISM • CISA| CIPP/E • CIPP/US • CMMC-CCPBased in the United States. Serving clients globally I’ve been thinking a lot about this lately. Everyone talks about the AI race in terms of ChatGPT, Gemini, or whatever the latest model is , but there’s a whole other side to this…
-
Trump’s AI Executive Order Explained: What’s Next for AI Policy & Cybersecurity?
ttps://www.youtube.com/watch?v=D8ouYa2QUvA What Is Trump’s AI Executive Order? President Trump’s AI Executive Order marks a significant turning point in U.S. AI policy. Unlike previous administrations that focused heavily on AI restrictions and oversight, this order prioritizes American AI leadership, innovation, and national security above all. The order directs federal agencies to remove unnecessary regulatory barriers, accelerate AI adoption across government…
-
Will China Win the Physical AI Race?
Physical AI is no longer a concept , it is already here. We are talking about AI that moves, builds, delivers, and operates in the real world. Robots on factory floors. Autonomous vehicles. Smart logistics systems. Machines that don’t just think, they act. And China is moving fast. China’s manufacturing scale gives it a real advantage. More robots, more…
Weekly briefing
The regulatory week in five minutes.
One email, Fridays. What changed, what it means, and what to put on next week’s agenda.
No sales sequences. Unsubscribe in one click.