In-depth coverage of AI governance, model risk management, and regulatory compliance for enterprise teams.
Monitoring & DriftA third of banks don t maintain logs for GenAI models. This isn t just a compliance gap, it s an open invitation for regulators to question your entire AI governance program. When examiners arrive and
Validation & TestingYour compliance team needs a structured approach to automated generative AI testing. This template provides a working test harness configuration that aligns with SR 11-7 model validation requirements
Compliance & AuditThe Challenge Your anti-money laundering (AML) compliance team faces a familiar tension: regulatory expectations are rising, but manual transaction monitoring processes can t keep up. You need to inno
Adversarial SecurityA year-long collaborative research effort involving the Future of Humanity Institute , the Centre for the Study of Existential Risk , the Center for a New American Security , and the Electronic Fronti
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data ProtectionQuestions started landing in my inbox the day NIST announced its new program for the cybersecurity and privacy of AI. They re coming from compliance officers who ve spent years building frameworks aro
Privacy & Data ProtectionQuestions started popping up in compliance channels soon after NIST published Revision 4 of Special Publication 800-63. Legal teams wondered about changes, security architects had concerns about syste
Management System GovernanceScope - What This Guide Covers This guide explores the debate over SR 11-7 s future and its implications for your model risk management framework. Whether you re defending your governance structure to
Validation & TestingThe Conventional Wisdom There s a growing belief that generative AI (GenAI) will revolutionize model risk management by automating validation, catching errors human reviewers might miss, and solving r
EU AI Act & GPAIScope of This Guide This guide helps your team implement floating-point operations (FLOPs) tracking during large language model fine-tuning to comply with the EU AI Act . You ll learn when tracking is
EU AI Act & GPAIThe EU Commission s high-risk AI system guidelines, released on May 19, 2026, make one thing clear: relying on Article 6(3) derogations to avoid high-risk classification requires thorough documentatio
Adversarial SecurityScope This guide covers security requirements and implementation patterns for autonomous AI agents in regulated industries. It s designed for security engineers, model risk managers, and compliance te
Privacy & Data ProtectionAfter the Amadeus decision hit the news, questions flooded my inbox. Legal teams alerted product managers, and compliance officers were suddenly in meetings about that travel data thing. Everyone want
Compliance & AuditOpenAI s recent proposal introduces reverse federalism as a governance model for AI safety, where state-level regulations shape federal policy. For your compliance team managing AI systems across mult
EU AI Act & GPAIThe Conventional Wisdom When a dominant platform like Google refuses to share data with competitors, regulators often think forcing them to open up will level the playing field. The European Commissio
Privacy & Data ProtectionRhode Island s Use of Artificial Intelligence by Healthcare Providers Notification Act took effect on June 16, 2026, and it s notable for its brevity. At just 43 words, Section 23-106-3 of the Rhode I
Compliance & AuditFinancial institutions are spreading misconceptions about the UK s AI Adoption Plan 2026. Some see it as a distant deadline with no need for immediate action. Others believe their current model risk f
Incident & RemediationThe $2.25 million consent order issued to Delta Dental by the NYDFS in April 2026 for violations related to the 2023 MOVEit incident isn t just another enforcement headline. It serves as a warning for
