Which AI rules apply to you, and what do you need to do about them? A practical guide to the EU AI Act, ISO/IEC 42001, NIST AI RMF and U.S. state AI laws, mapped from requirement to action, owner, and evidence.
AI Compliance Guide: EU AI Act, ISO 42001, NIST AI RMF and U.S. AI Laws Read More »
A step-by-step AI audit procedure, from scoping and information requests to testing, sampling, and writing findings, with specific guidance for chatbots, RAG, agents, predictive ML, and foundation models.
How to Audit an AI System: A Practical Guide. Read More »
Practical guide · Build · Version 1.0, October 2026 An AI governance framework is the set of roles, policies, processes, and controls an organization uses to decide which AI it uses, how that AI is built or bought, and how its risks are managed over time. A good one is not a document. It is
AI Governance Framework: A Practical Guide Read More »
AI Governance Brief · 04 U.S. AI Policy · Frontier Models AI Assurance Published 29 Sep 2026 Insights · U.S. AI Policy The White House AI accord is a control framework. Now prove it works. President Trump and frontier AI leaders signed a voluntary accord on 29 September built on internal controls, oversight teams, external
The White House AI Accord Is a Control Framework. Now Prove It Works. Read More »
AI Governance Brief 03: Trump and tech CEOs meet on AI. Who sets the guardrails?”
AI Governance Brief · 03 EU AI Act · Regulation (EU) 2026/1744 Provider & Deployer Roles Updated 20 Sep 2026 Insights · EU AI Act Readiness The Act doesn’t ask who you are. It asks what you did. Provider and deployer are not company types. They are roles assigned per system, and an organization can
EU AI Act: Provider vs Deployer Obligations Explained Read More »
AI Governance Brief · 02 EO N-9-26 · SB 813 · AB 1405 AI Assurance Published 18 Sep 2026 Insights · AI Assurance California just accelerated its AI auditor framework. Executive Order N-9-26 moves the SB 813 and AB 1405 implementation deadlines forward by up to 13 months — and asks experts to examine a
California Moves AI Auditor Deadlines to 2027: EO N-9-26 Read More »
AI Governance Brief · 03 Model Misalignment Disclosure GDPR · HIPAA · CUI Updated 17 Sep 2026 Insights · Incident Reporting OpenAI disclosed six incidents. None had to be reported. The framework published on 16 September is a real step, and it is entirely self-administered. The more useful question for anyone buying these systems is
ChatGPT Maker’s Misalignment Report: The Compliance Gap Read More »
The UN’s first global scientific assessment of AI warns that governance is outpacing evidence. Here is what that means for enterprise AI assurance.
UN AI Report: AI Governance Has an Evidence Gap – A CISO’s Perspective Read More »
California’s ADMT requirements bind on 1 January 2027, and they reach employees and applicants, not just customers. The organizations that miss it won’t miss it for lack of a policy — they’ll miss it because they started by asking which products contain AI. A scoping test, a readiness sequence, and the evidence an assessor will ask for.