Board Reporting on AI & Cybersecurity Risk
A practical guide to reporting security and AI risk to boards and executive leadership; what regulators now require, what directors actually need, and how to replace activity metrics with a posture the board can govern.
Agentic AI Controls
A practical guide to governing AI agents; systems that hold credentials, use tools, and execute actions rather than merely generating text, and why the control model built for chatbots does not survive contact with them.
The First 90 Days with a vCISO
A practical guide to fractional security leadership; when a virtual CISO is the right model, what the first ninety days should produce, and how to evaluate whether the engagement is working.
AI Governance Readiness
A practical guide to the AI regulatory landscape as it stands in mid-2026; what the EU AI Act, NIST AI RMF, ISO/IEC 42001, and U.S. state law actually require, where governance programs fail, and how to build one that holds up.
Vendor AI Risk
A practical guide to evaluating the artificial intelligence your vendors are embedding in the products you already use; where the exposure sits, what to require contractually, and how to assess it without stalling procurement
Across the Industry Brief – Issue 17
The European Commission has unveiled crucial transparency guidelines for AI providers and deployers, set to take effect on August 2, 2026. These guidelines mandate that users be informed when interacting with AI systems, including chatbots and content generators. Meanwhile, Hawaii has enacted new laws focusing on chatbot safety, particularly for minors, reflecting a growing trend in state-level AI regulation. In the tech industry, Google faces delays with its Gemini 3.5 Pro model due to performance issues, while Anthropic expands its Project Glasswing initiative to enhance cybersecurity across critical infrastructure. Discover the latest developments shaping the AI landscape!
Assessed Signal – July 2026
Illinois has taken a groundbreaking step by enacting the first state law mandating independent third-party audits of frontier AI models, shifting oversight from developer self-attestation to external verification. As organizations prepare for a compliance deadline of January 1, 2027, the landscape of AI security is evolving. The FBI has raised alarms about Russian intelligence stealing Signal backup recovery keys, while Google’s researchers have documented alarming trends in AI weaponization. With generative AI pilots struggling to reach production, the gap between AI adoption and assurance widens. Discover how organizations can navigate these challenges and position themselves for success in the AI landscape.
Across the Industry Brief – Issue 16
Illinois Governor JB Pritzker recently signed the Artificial Intelligence Safety Measures Act, making Illinois the third state to regulate frontier model developers, following California and New York. This legislation aims to establish a state-driven national framework in response to federal inaction. Meanwhile, the FTC is seeking public comment on a proposed policy that could assert federal preemption over state AI laws, particularly those affecting model outputs. Additionally, the UN convened a Global Dialogue on AI Governance, highlighting the urgent need for international cooperation in managing AI risks. Discover the implications of these developments for organizations navigating the evolving AI landscape.
Across the Industry Brief – Issue 15
In a significant policy shift, the US Commerce Department has lifted export controls on Anthropic’s Claude Fable 5 and Mythos 5 models after an 18-day suspension, highlighting the government’s proactive stance on national security in AI. Meanwhile, the EU has finalized the AI Act simplification package, deferring high-risk obligations to 2027 and 2028, providing organizations with much-needed clarity. As AI legislation evolves, states like California and New Jersey are enacting measures to ensure human oversight in education and enhance child safety online. Discover how these developments impact the AI landscape and what organizations need to know to stay compliant.
Shadow AI at the Edge of Governance: The CB Financial Services Disclosure
The first Form 8-K to attribute a material cybersecurity incident to shadow AI, mapped to the ARISE Framework™ controls whose absence allowed customer identity data to leave organizational control.