AI Governance and Policy
The obligations AI systems must meet and the people accountable for them. The EU AI Act, NIST AI RMF, ISO/IEC 42001, assurance and audit, and the security roles inside the organisation.
-
One AI Incident, Four Reporting Regimes, and the Carve-Outs That Decide Which Apply
Cyber Resilience Act reporting starts 11 September 2026, joining three other European regimes. The AI Act already limits its own…
Read More » -
The AI Act’s GPAI Security Chapter Is a Weight Security Mandate
Article 55(1)(d) requires an adequate level of cybersecurity for a frontier model and its physical infrastructure, and the Commission-endorsed Code…
Read More » -
The EU AI Act for Security Teams
The first enforcement step under the EU AI Act was a demand for security evidence. What the Digital Omnibus deferred…
Read More » -
Measuring AI in the SOC: Outcomes, Baselines and the MTTR Trap
AI can make a security team faster while its backlog grows. Measuring an AI workflow properly means pairing every speed…
Read More » -
AI Literacy for Security Teams Is Measured by the Errors They Catch
Since July 2026 the AI Act requires measures that support AI literacy but no guaranteed level. For a security team,…
Read More » -
Closing the Gap Between AI Principles and AI Reality
In pursuit of AI systems that are ethical and robust we are seeing the emergence of an, ironically, ethical challenge:…
Read More » -
Addressing the Full Stack of AI Concerns: Responsible AI, Trustworthy AI, Secure AI and Safe AI Explained
As AI continues to evolve and integrate deeper into societal frameworks, the strategies for its governance, alignment, and security must…
Read More » -
Why We Need a Chief AI Security Officer (CAISO)
With AI’s breakneck expansion, the distinctions between ‘cybersecurity’ and ‘AI security’ are becoming increasingly pronounced. While both disciplines aim to…
Read More »
