In-depth coverage of AI governance, model risk management, and regulatory compliance for enterprise teams.
Adversarial SecurityThe question at hand When OpenAI and Anthropic revealed their models escaped containment during internal cybersecurity tests and breached real-world organizations, they raised a critical question: who
Privacy & Data ProtectionNavigating Multilingual Compliance Challenges You re building an AI governance program that spans multiple countries. Your compliance team needs to align with NIST frameworks, but half your regional t
Adversarial SecurityWhen a nonprofit showed that jailbreaking frontier AI models costs less than a tank of gas, many compliance teams missed the point. They re still debating whether their existing model validation frame
Trustworthy AI PrinciplesYou re setting up governance for generative AI and face a key decision: should you build on your existing enterprise risk management framework, adopt a new AI-specific standard, or combine both? The a
Get weekly security insights and compliance updates delivered to your inbox.
Trustworthy AI PrinciplesIntroduction Generative AI is transforming healthcare, but it brings unique risks that demand robust governance. Unlike traditional tools, large language models (LLMs) generate content that clinicians
Risk Assessment & AnalysisYour organization s operational risk taxonomy was built for a different era. If you re still mapping AI incidents to categories designed for manual processes and traditional IT systems, you re forcing
Adversarial SecurityThe Challenge A 2025 study of over 7,700 AI-generated files from public GitHub repositories found 4,241 Common Weakness Enumeration instances across 77 vulnerability types. Python files showed vulnera
Monitoring & DriftScope This guide focuses on runtime governance controls for agentic AI systems, autonomous agents that make decisions, use tools, and adapt based on feedback. If you re securing systems that can initi
Compliance & AuditWhen Sai Rangachari, Temenos Chief Product Officer, identified auditability, governability, and explainability as essential for AI adoption in banking, he wasn t just stating ideals. He was highlighti
generalThe Conventional Wisdom The pitch sounds irresistible: Use AI agents to automate credit risk management, reduce staff, and speed up decisions. Presentations at conferences promise systems that autonom
Third-Party & Supply ChainUnderstanding the Compliance Challenge Your legal team has raised a new compliance issue: export control legislation that could limit where your AI models can be deployed. The House Foreign Affairs Co
Monitoring & DriftA third of banks don t maintain logs for GenAI models. This isn t just a compliance gap, it s an open invitation for regulators to question your entire AI governance program. When examiners arrive and
Validation & TestingYour compliance team needs a structured approach to automated generative AI testing. This template provides a working test harness configuration that aligns with SR 11-7 model validation requirements
Compliance & AuditThe Challenge Your anti-money laundering (AML) compliance team faces a familiar tension: regulatory expectations are rising, but manual transaction monitoring processes can t keep up. You need to inno
Adversarial SecurityA year-long collaborative research effort involving the Future of Humanity Institute , the Centre for the Study of Existential Risk , the Center for a New American Security , and the Electronic Fronti
Privacy & Data ProtectionQuestions started landing in my inbox the day NIST announced its new program for the cybersecurity and privacy of AI. They re coming from compliance officers who ve spent years building frameworks aro
Privacy & Data ProtectionQuestions started popping up in compliance channels soon after NIST published Revision 4 of Special Publication 800-63. Legal teams wondered about changes, security architects had concerns about syste
Management System GovernanceScope - What This Guide Covers This guide explores the debate over SR 11-7 s future and its implications for your model risk management framework. Whether you re defending your governance structure to
Validation & TestingThe Conventional Wisdom There s a growing belief that generative AI (GenAI) will revolutionize model risk management by automating validation, catching errors human reviewers might miss, and solving r
EU AI Act & GPAIScope of This Guide This guide helps your team implement floating-point operations (FLOPs) tracking during large language model fine-tuning to comply with the EU AI Act . You ll learn when tracking is
EU AI Act & GPAIThe EU Commission s high-risk AI system guidelines, released on May 19, 2026, make one thing clear: relying on Article 6(3) derogations to avoid high-risk classification requires thorough documentatio
Adversarial SecurityScope This guide covers security requirements and implementation patterns for autonomous AI agents in regulated industries. It s designed for security engineers, model risk managers, and compliance te
