California’s ADMT requirements bind on 1 January 2027, and they reach employees and applicants, not just customers. The organizations that miss it won’t miss it for lack of a policy — they’ll miss it because they started by asking which products contain AI. A scoping test, a readiness sequence, and the evidence an assessor will ask for.
California’s SB 813 and AB 1405 create the legal infrastructure for independent AI assurance: verification organizations and a registry of AI auditors. No audit is mandatory yet, which is exactly why organizations should start preparing now.
California SB 813 & AB 1405: The AI Auditor Framework Read More »
The question arrives from sales, not compliance. A prospect’s vendor questionnaire has a line item — “Is your organization certified to ISO/IEC 42001?” — and the deal is large enough that someone forwards it upward with a note asking how quickly we can get that. That framing is the right one, and almost nobody uses
ISO 42001 certification Read More »
A customer asks whether you’re a provider or a deployer under the EU AI Act, and nobody in the company can answer. That question is the whole compliance analysis in one line. Where the Act reaches, how to classify without over-classifying, the four facts that decide your role, and what the revised 2027 high-risk dates change.
EU AI Act: what applies to you and when. Read More »
AI governance, explained: what it means, what it doesn’t, and what actually goes in a program Education Series · 01 AI Governance Fundamentals Updated 1 Sep 2026 Insights · AI Governance AI governance, explained: what it means, what it doesn’t, and what actually goes in a program Most organizations adopting AI have no one formally
What is AI Governance? Read More »
On 27 August 2026, University College London Hospitals disclosed that neurosurgeons at the National Hospital for Neurology and Neurosurgery had removed a pituitary tumor with real-time AI assistance. The operation took place in May. The details were held back while the patient, 48-year-old Rhys Hibbert, recovered. He kept his sight, and he was walking unaided
The First AI-Assisted Brain Surgery Just Happened. Read More »
On 25 August 2026, Gartner published the results of its Quarterly Emerging Risks Report for the second quarter of the year. For the first time in the history of that series, AI-enabled discovery of cyber vulnerabilities took the top spot. The finding comes from a survey of 316 senior executives, risk managers, and auditors conducted across sectors and
Gartner: AI Vulnerability Discovery Is Top Risk Read More »
Level 3 · Regulated — Reading time: 12 minutes Last reviewed: August 2026 The request rarely arrives with much warning. A customer’s procurement team sends a questionnaire with an AI section that did not exist last year. A notified body asks for the technical documentation. A regulator opens an inquiry about a specific decision your
Prove It to a Regulator: The Evidence an AI Audit Read More »
Education Series · 01 AI Governance Fundamentals EU AI Act · NIST AI RMF · ISO/IEC 42001 Updated 17 Sep 2026 Foundations · AI Governance What AI governance actually is — and what it isn’t. Most organizations adopting AI have nobody formally accountable for governing it. The gap is rarely unwillingness — it is that
What AI Governance Actually Is?(And How It Differs From the Risk You Already Manage) Read More »
AI Governance Guide · 01 NIST AI RMF · ISO/IEC 42001 · EU AI Act AI System Inventory Updated 13 Sep 2026 Learn · AI Inventory What AI are we actually running? Six words that stall most governance programs. How to build an AI system inventory that survives past the first quarter — where to
How to Build an AI System Inventory Read More »