Compliance strategy and regulatory guidance written by practitioners
Articles
Regulatory guidance and compliance strategy from those doing the work
Boards do not approve AI governance investment because the regulator might fine you. They approve it because the inventory work is already happening, in spreadsheets, in part-time…
Standard vendor questionnaires miss eight AI-specific questions - on model providers, prompt logging, inference location, and fine-tuning carve-outs, that matter more than most of…
TL;DR. AI governance is the operational discipline of knowing which AI systems your organisation uses, classifying each one by risk, applying the controls that risk warrants, and…
Governance spend is justifiable to any board when it passes four tests - countability, scaling logic, displacement accounting, and auditability. AI governance investment passes al…
EU AI governance programmes are being built on foundation that does not exist yet. The inventory. Without knowing what AI is running in your organisation, every AI governance fram…
Enterprise risk management has always evolved alongside the technologies that create new exposure. Cloud computing forced rethink of perimeter security. Algorithmic trading requir…
Ask compliance team whether they have an AI inventory and most will say yes. Ask them how many of those inventoried systems have been correctly classified against the EU AI Act, G…
Most enterprises today can point to an AI policy document. Far fewer can point to functioning, enterprise-wide system that actually ensures AI is deployed responsibly, monitored c…
AI governance is business imperative in 2026 not primarily because of regulatory risk, but because ungoverned AI is one of the largest sources of unmanaged financial exposure in t…
Most enterprises have an AI compliance policy. Far fewer have functioning AI compliance management programme. This guide focuses on the gap between the two, and how to close it be…
AI governance is no longer voluntary framework. It is legal obligation, one that most European enterprises have not yet operationalised, with the primary enforcement deadline four…
AI governance programmes fail not when rule is broken, but when decision arrives and nobody can move without asking permission first. The boundary exists. It has been written, rev…
Find answers to common questions about our content and updates
Monthly updates on regulatory changes, compliance trends, and platform releases
By subscribing you agree to our Terms and Conditions and Privacy Policy
