Compliance strategy and regulatory guidance written by practitioners
Articles
Regulatory guidance and compliance strategy from those doing the work
The shadow AI tools your security team can name are not the problem. The problem is the eighteen they cannot name, most of them adopted by people just trying to do their jobs fast…
TL;DR. Shadow AI is the AI running in your organisation without security or compliance review. Most of it is not the rogue ChatGPT subscription you're worried about - it's the AI…
GitHub Copilot Enterprise and personal Copilot share name and almost nothing else. Cursor is its own thing again. The Microsoft Copilot governance policy your firm needs is not th…
Your firm banned ChatGPT in February. Your engineering team uses it through personal account in March. Your legal team uses it on phone in April. The ban produced visibility probl…
The Marketing team's ChatGPT subscription costs nothing per user. The AI compliance cost; prompt retention, undisclosed region, no DPA, training carve-outs, is measurable, citable…
Security controls are only as effective as the environment they can actually see. In the average enterprise, that environment is significantly larger than the security team knows…
Your employees are not reckless. They are resourceful. When an AI tool helps marketing manager draft campaign brief in twenty minutes or lets developer debug code without six-week…
shadow AI risk assessment framework gives every discovered tool score, priority tier, and triage action, so the harder question after discovery has structured answer. You have run…
The embedded AI activating inside your existing SaaS tools is the shadow AI most governance programmes are not built to catch. Shadow AI has new face, and it is not the one most I…
Your company almost certainly has an Acceptable Use Policy. It probably covers email, internet access, and perhaps even personal device usage. What it almost certainly does not co…
Detecting shadow AI in your organisation requires five methods running in parallel, because each one finds tools the others miss. Ask your team how many AI tools your organisation…
Shadow AI - the AI tools your employees are using without IT's knowledge or approval - is already inside your organisation, and the scale of it might surprise you. 47% of employee…
Find answers to common questions about our content and updates
Monthly updates on regulatory changes, compliance trends, and platform releases
By subscribing you agree to our Terms and Conditions and Privacy Policy
