Agentic AI Controls
A practical guide to governing AI agents; systems that hold credentials, use tools, and execute actions rather than merely generating text, and why the control model built for chatbots does not survive contact with them.
The First 90 Days with a vCISO
A practical guide to fractional security leadership; when a virtual CISO is the right model, what the first ninety days should produce, and how to evaluate whether the engagement is working.
AI Governance Readiness
A practical guide to the AI regulatory landscape as it stands in mid-2026; what the EU AI Act, NIST AI RMF, ISO/IEC 42001, and U.S. state law actually require, where governance programs fail, and how to build one that holds up.
Vendor AI Risk
A practical guide to evaluating the artificial intelligence your vendors are embedding in the products you already use; where the exposure sits, what to require contractually, and how to assess it without stalling procurement
Across the Industry Brief – Issue 17
The European Commission has unveiled crucial transparency guidelines for AI providers and deployers, set to take effect on August 2, 2026. These guidelines mandate that users be informed when interacting with AI systems, including chatbots and content generators. Meanwhile, Hawaii has enacted new laws focusing on chatbot safety, particularly for minors, reflecting a growing trend in state-level AI regulation. In the tech industry, Google faces delays with its Gemini 3.5 Pro model due to performance issues, while Anthropic expands its Project Glasswing initiative to enhance cybersecurity across critical infrastructure. Discover the latest developments shaping the AI landscape!
Assessed Signal – July 2026
Illinois enacted the first state law in the country requiring independent third-party audits of frontier AI models, moving oversight from developer self-attestation to external verification and giving covered organizations a firm compliance date of January 1, 2027. The FBI warned that Russian intelligence services are now stealing Signal backup recovery keys to reconstruct target accounts, confirming that attackers have shifted past the application to the recovery layer most security programs do not monitor. Google’s threat researchers documented the first case of an AI model being used to weaponize a vulnerability and produce working malware, while Anthropic found that the share of tracked malicious actors rated medium risk or higher rose from 33 percent to 56 percent in a single year. Current research shows that most generative AI pilots still fail to reach production and that most leaders cannot demonstrate they would pass an AI governance audit, exposing a widening distance between AI adoption and AI assurance. Organizations treating governance as verifiable evidence are positioned to deploy AI at scale, while others remain stalled by the risks they cannot measure.
Across the Industry Brief – Issue 16
Illinois Governor JB Pritzker recently signed the Artificial Intelligence Safety Measures Act, making Illinois the third state to regulate frontier model developers, following California and New York. This legislation aims to establish a state-driven national framework in response to federal inaction. Meanwhile, the FTC is seeking public comment on a proposed policy that could assert federal preemption over state AI laws, particularly those affecting model outputs. Additionally, the UN convened a Global Dialogue on AI Governance, highlighting the urgent need for international cooperation in managing AI risks. Discover the implications of these developments for organizations navigating the evolving AI landscape.
Across the Industry Brief – Issue 15
In a significant policy shift, the US Commerce Department has lifted export controls on Anthropic’s Claude Fable 5 and Mythos 5 models after an 18-day suspension, highlighting the government’s proactive stance on national security in AI. Meanwhile, the EU has finalized the AI Act simplification package, deferring high-risk obligations to 2027 and 2028, providing organizations with much-needed clarity. As AI legislation evolves, states like California and New Jersey are enacting measures to ensure human oversight in education and enhance child safety online. Discover how these developments impact the AI landscape and what organizations need to know to stay compliant.
Shadow AI at the Edge of Governance: The CB Financial Services Disclosure
The first Form 8-K to attribute a material cybersecurity incident to shadow AI, mapped to the ARISE Framework® controls whose absence allowed customer identity data to leave organizational control.
Across the Industry Brief – Issue 14
Arizona Governor Katie Hobbs recently vetoed all three AI bills passed by the state legislature, marking a significant divergence from the regulatory trends in neighboring states like California and Rhode Island. This decision highlights the growing patchwork of state-level AI policies, with over 600 bills introduced nationwide in 2026 alone. As organizations navigate this complex landscape, understanding the implications of these legislative changes is crucial. From California’s proposed ban on AI public school teachers to Colorado’s revised AI Act, the evolving regulatory environment demands close attention from businesses operating across multiple jurisdictions. Read more to stay informed!