Insights
Notes on governance, risk, and AI.
Practical writing for SMEs navigating compliance, risk, and AI governance — no jargon, no padding.
AI Risk & Governance
AI Governance Just Went Live — And Most Boards Weren't Watching
Since August 2026, the EU, China and a patchwork of US states have moved AI governance from paperwork to active enforcement — what actually changed, and what got quietly deferred.
Risk Assessment
The Risk Register Nobody Reads (And How to Fix It)
Why most risk registers get built once and never opened again — and how to build one people actually use.
AI & Application Security
Your Chatbot Has an Attack Surface Too
Prompt injection, data leakage, and what happens once your AI assistant can actually take action.
Risk Assessment
Zero Trust Is Not a Product You Buy
Why the vendor pitching you a "Zero Trust box" is missing the point — and where an SME actually starts.
AI Risk & Governance
ISO 42001 in Plain English
What an AI management system actually requires — and why it matters more for SMEs than the ISO branding suggests.