Who Owns AI Governance
A practical guide to assigning ownership and decision authority for AI governance; the six operating models, how to choose among them, where compliance enters the process, and why a committee without authority is the most common failure.
Establishing Enterprise AI Governance
A practical guide to building one coherent AI governance program from many sources; combining ISO/IEC 42001, the NIST AI RMF, and regulatory obligations over a single inventory and a single body of evidence, instead of running disconnected programs.
Board Reporting on AI & Cybersecurity Risk
A practical guide to reporting security and AI risk to boards and executive leadership; what regulators now require, what directors actually need, and how to replace activity metrics with a posture the board can govern.
Agentic AI Controls
A practical guide to governing AI agents; systems that hold credentials, use tools, and execute actions rather than merely generating text, and why the control model built for chatbots does not survive contact with them.
The First 90 Days with a vCISO
A practical guide to fractional security leadership; when a virtual CISO is the right model, what the first ninety days should produce, and how to evaluate whether the engagement is working.
AI Governance Readiness
A practical guide to the AI regulatory landscape as it stands in mid-2026; what the EU AI Act, NIST AI RMF, ISO/IEC 42001, and U.S. state law actually require, where governance programs fail, and how to build one that holds up.
Vendor AI Risk
A practical guide to evaluating the artificial intelligence your vendors are embedding in the products you already use; where the exposure sits, what to require contractually, and how to assess it without stalling procurement
Across the Industry Brief – Issue 17
The European Commission has unveiled crucial transparency guidelines for AI providers and deployers, set to take effect on August 2, 2026. These guidelines mandate that users be informed when interacting with AI systems, including chatbots and content generators. Meanwhile, Hawaii has enacted new laws focusing on chatbot safety, particularly for minors, reflecting a growing trend in state-level AI regulation. In the tech industry, Google faces delays with its Gemini 3.5 Pro model due to performance issues, while Anthropic expands its Project Glasswing initiative to enhance cybersecurity across critical infrastructure. Discover the latest developments shaping the AI landscape!
You’re Doing the Same Work Twice
Most organizations do not have a compliance problem; they have a coordination problem that manifests as compliance issues. As new frameworks like CMMC and the EU AI Act emerge, separate teams tackle overlapping requirements independently, leading to duplicated efforts and costly gaps. This fragmentation not only inflates costs but also creates inconsistencies that can jeopardize compliance. The solution lies in unifying these efforts under a single control foundation, allowing organizations to implement controls once and demonstrate compliance across multiple frameworks. Discover how to streamline your compliance processes and eliminate unnecessary duplication in your organization.