Compliance strategy and regulatory guidance written by practitioners
Articles
Regulatory guidance and compliance strategy from those doing the work
TL;DR: RoPA - Record of Processing Activities - is the document required by Article 30 of the GDPR that maps how an organisation processes personal data: what it collects, why, wh…
financial entity running AI in the EU is not subject to an AI law. It is subject to four of them at once - none written to be the AI law, all now reaching its AI anyway. Any softw…
Every vendor in this category will show you clean dashboard, framework-mapping table and page of logos. Most of it is real. None of it tells you the thing you actually need to kno…
TL;DR: Mapping an AI tool to DORA and NIS2 is the easy half. The hard half is that you can only map what you have found, and the AI tools most likely to matter are the ones that n…
TL;DR: Your DORA ICT asset register catches the AI that arrived with contract. It misses the AI your teams built, connected or switched on without one, the automation inside month…
When team switches on an AI model inside critical function, nothing about the paperwork announces it. No new template appears, no AI annex opens. DORA gives artificial intelligenc…
TL;DR "AI risk classification" means two different things, and the software marketed under the phrase does not always mean the one DORA requires. The AI Act sorts an AI system by…
server sits still long enough to be classified. An AI tool rarely does - it spans three teams, turns feature into dependency, or arrives without anyone buying it. Classification m…
Year one of DORA was about achieving documented compliance. Year two is about defending it under scrutiny, and most firms underestimated how different those two jobs are. year ago…
TL;DR. DORA went live on 17 January 2025. The firms that did the bare minimum to be ready are now discovering the DORA regulation didn't end on the deadline, it started. Five pill…
Find answers to common questions about our content and updates
Monthly updates on regulatory changes, compliance trends, and platform releases
By subscribing you agree to our Terms and Conditions and Privacy Policy
