Across the Industry Brief – Issue 32

Microsoft is taking a bold step in the education sector by offering US school districts enforceable AI privacy protections in contracts, addressing growing concerns over student data usage. Meanwhile, Colorado is advancing its AI regulations with formal rulemaking on automated decision-making and chatbots, setting a precedent for other states. In the financial realm, banks are blocking AI agents from accessing accounts as the stalled US open banking rule leaves access governed by private policies. These developments highlight the evolving landscape of AI governance and the urgent need for organizations to adapt to new compliance expectations. Read more to stay informed!
One Program, Not Four: Why ARISE Framework® v2.1 Is a Governance Operating System

Most organizations face a coordination problem rather than a governance capability issue. With multiple programs running in silos—security, privacy, legal, and now AI—gaps in oversight create risks. The newly released ARISE Framework® v2.1 acts as a governance operating system, unifying these functions under one comprehensive structure. By organizing 128 controls across seven domains, ARISE simplifies compliance with evolving regulations like the EU AI Act and GDPR. This innovative approach allows organizations to absorb new statutes seamlessly, transforming governance from a fragmented effort into a cohesive strategy. Discover how ARISE can streamline your governance and enhance your risk management.
Across the Industry Brief – Issue 31

In the latest issue of Across the Industry Brief, significant developments unfold in AI policy and regulation. The Department of Homeland Security has barred federal agencies from using DeepSeek, a Chinese AI product, citing national security risks. Meanwhile, Anthropic faces backlash over its draft AEGIS safety bill, highlighting the challenges of shaping federal AI legislation. Additionally, NIST and CISA are collaborating on guidance for AI agent training incidents, marking a crucial step in federal cybersecurity. As organizations navigate these changes, understanding the implications for compliance and vendor risk becomes essential. Dive into the full report for more insights!
Across the Industry Brief – Issue 30

Regulators on both sides of the Atlantic are ramping up enforcement against leading AI labs, with the FTC issuing civil investigative demands to OpenAI and Anthropic, while the EU opens its first AI Act probes. This unprecedented convergence of federal, international, and state actions highlights the urgent need for organizations to bolster their AI security and compliance measures. As California mandates independent verification and kill switches for AI, and Anthropic proposes a controversial federal safety bill, the landscape of AI governance is rapidly evolving. Discover how these developments could impact your organization and the future of AI regulation.
Across the Industry Brief – Issue 29

The EU AI Act’s transparency rules are reshaping how AI vendors operate, with OpenAI implementing invisible watermarks on ChatGPT outputs in Europe. This marks a significant compliance response to the Act’s requirements, highlighting the challenges of marking AI-generated text. Meanwhile, in the U.S., a new Senate bill proposes mandatory pre-release reviews for frontier models, raising questions about security and intellectual property. As India consults on its AI regulation roadmap, the global landscape of AI governance continues to diverge, leaving organizations navigating complex compliance obligations. Discover how these developments impact the future of AI and regulatory frameworks.
Across the Industry Brief – Issue 28

In a significant move, President Trump and leaders from major AI companies, including OpenAI and Google, signed a voluntary safety accord aimed at enhancing AI system safety. However, just a day later, the FTC launched an investigation into these companies, highlighting a fragmented regulatory landscape. Meanwhile, California’s Attorney General issued a subpoena to OpenAI over cybersecurity incidents, signaling intensified scrutiny at both state and federal levels. As the UN calls for mandatory AI safeguards, organizations must navigate this evolving landscape, balancing innovation with compliance and risk management. Discover how these developments could impact your organization and the future of AI governance.
Across the Industry Brief – Issue 27

In a significant shift, President Trump has rejected new AI regulations, proposing instead an “AI czar” and an “AI Force” to enforce existing laws. This move contrasts sharply with state-level efforts, particularly California’s Governor Newsom’s push for new oversight mechanisms, including a “kill switch” for AI systems. Meanwhile, OpenAI and Anthropic’s CEOs have called for international coordination on AI safety at the UN Security Council, highlighting the growing recognition of AI as a national security concern. As the landscape evolves, organizations must navigate a fragmented regulatory environment and anticipate the implications of these developments on AI governance.
Across the Industry Brief – Issue 26

The US House of Representatives has adjourned without passing any AI legislation, pushing federal action on AI governance past the midterm elections. This decision comes amid growing calls from AI executives for regulation, following alarming warnings about the potential risks of AI technology. Meanwhile, the cybersecurity community is raising concerns that AI labs are not adequately consulting them on safety measures against AI-enabled hacking. In Europe, new measures are being introduced to protect minors from the dangers of social apps and AI chatbots, highlighting a global shift towards stricter regulations in the AI landscape. Read more to stay informed!
Across the Industry Brief – Issue 25

California has taken a bold step by enacting AI-auditor laws, establishing a state audit regime for automated decision systems. This significant shift from mere disclosure to rigorous auditing sets a new compliance standard that other states may follow. Meanwhile, Anthropic has published its most extensive misuse report, revealing alarming cases of AI models being exploited for cyber and military purposes. As the AI landscape evolves, organizations must adapt to these developments, ensuring their systems meet heightened governance and reliability expectations. Dive into the latest insights on AI policy, regulation, and industry dynamics shaping the future of technology.
Across the Industry Brief – Issue 24

The United States is advocating for the “Carolina Principles” at the G20 innovation ministerial, pushing back against technology-specific AI regulations while the EU continues its risk-based AI Act. This divergence in regulatory approaches is reshaping the global AI landscape, creating distinct compliance obligations for organizations operating internationally. Meanwhile, Booz Allen’s Cyber Weapon Index reveals alarming advancements in AI-driven cyber capabilities, urging critical infrastructure to bolster defenses. As OpenAI rolls out its groundbreaking GPT-6 Astra, capable of developing exploits autonomously, organizations must navigate these evolving challenges to ensure robust security and compliance. Read more to stay informed on these pivotal developments!