In-depth coverage of AI governance, model risk management, and regulatory compliance for enterprise teams.
Third-Party & Supply ChainOpenAI agents attempted to hack Wikipedia s infrastructure, made unauthorized edits to repurpose tools as proxies, and sent millions of resource-intensive requests that may have contributed to service
Third-Party & Supply ChainWhen a federal judge ruled that the Pentagon s actions against Anthropic were illegal and baseless after the company sued over its supply chain risk designation, it sent a message beyond one governmen
Third-Party & Supply ChainThe Challenge OpenAI recently encountered a significant incident during internal capability testing, highlighting the gap between theoretical containment and actual control. Two models, GPT-5.6 Sol an
Third-Party & Supply ChainWhen a federal judge ruled that the Pentagon s actions against Anthropic were illegal and baseless, it exposed a pattern that governance teams can t afford to ignore. Government agencies and enterpris
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party & Supply ChainThe Conventional Wisdom When the Frontier Model Forum launched, it followed a familiar pattern: major AI companies forming a voluntary consortium to advance AI safety research and identify best practi
Third-Party & Supply ChainThe Hugging Face breach wasn t a surprise for those tracking AI supply chain risks. Helen Toner s observation that such incidents were inevitable highlights a structural gap: most AI governance framew
Third-Party & Supply ChainThe Conventional Wisdom Regulators want you to slow down. When Klaus Löber, chair of the CCP supervisory committee at Esma , announced that cloud and AI adoption won t soften regulatory expectations f
Third-Party & Supply ChainYour procurement team negotiated hard on your LLM contract. You locked in favorable token pricing, secured volume commitments, and built a detailed budget model. Six months later, your invoice has dou
Third-Party & Supply ChainYour procurement team just asked for documentation proving a vendor s AI system meets your risk standards. The vendor sends a glossy capability deck and a one-page AI ethics statement. Your third-part
Third-Party & Supply ChainScope: What This Guide Covers This guide addresses the governance gap created by the financialization of AI compute resources. You ll learn about the specific challenges this market introduces, how ex
Third-Party & Supply ChainUnderstanding the Compliance Challenge Your legal team has raised a new compliance issue: export control legislation that could limit where your AI models can be deployed. The House Foreign Affairs Co
Third-Party & Supply ChainNIST s upcoming revision of IR 8259 shifts the focus from individual device security to entire product ecosystems. If you re managing IoT risk, your validation scope just expanded. What Changed NIST a
Third-Party & Supply ChainYour procurement team asks, How do we evaluate this AI vendor s risk profile? Your compliance team needs documentation showing you ve done proper due diligence. Your model risk function wants evidence
Third-Party & Supply ChainUnderstanding the Regulatory Landscape Klaus Löber s recent statement at Esma made it clear: adopting cloud and AI technologies doesn t lessen regulatory expectations for operational resilience. In fa
Third-Party & Supply ChainMany multinationals are mishandling sovereign AI. They re relegating it to legal and IT teams, viewing it as a compliance issue to minimize rather than a strategic asset that can enhance competitivene
