AI Governance
AI risk, AI regulation, and AI-specific governance content — ISO 42001, the EU AI Act, NIST AI RMF.
NIST AI RMF vs. ISO 42001: Two Different Tools for AI Governance
One is a voluntary US risk-management framework; the other is a certifiable international management-system standard. Most serious AI governance programs end up using both.
AI Governance Is Now a Board-Level Question — Here's the 10-Minute Version
Between the EU AI Act, ISO 42001, and enterprise-buyer security questionnaires that now include AI-specific sections, 'we don't have an AI governance program' is no longer a neutral answer.
AI-Generated Phishing Is Measurably Better — What the Research Actually Shows
Large language models remove the grammatical and cultural tells that used to make phishing easy to spot. Security awareness training built around those tells needs to change.
AI Governance Roles Are Being Invented in Real Time — Here's What's Actually Emerging
Titles like 'Head of AI Governance' and 'AI Risk Officer' didn't exist five years ago. The role is still being defined, and it's landing in different places at different companies.