Insights

AI governance

Anyone Home?

Examines how removing human oversight changes failure detection, exception handling, and accountability in AI operations.

AI governance

The Comfort of System-Centric AI Governance

Questions whether system-level governance adequately addresses how institutions recognize and classify people.

AI governance

AI Governance Has Been Looking at the Wrong Unit

Makes the case for examining the encounter between a person, an institution, and an AI classifier.

AI & security

Provenance is the New Privacy: Four Gaps Exposed by DeepSeek V4

Examines model provenance, hosting, deployment, and jurisdiction as questions for AI governance.

AI governance

Moving Faster Won't Save Your AI Governance Program

Introduces the Agentic Inflection Point and Control Bandwidth as ways to examine governance capacity.

AI & security

When the Developer Calls It Unprecedented

Considers the gap between AI policy and enforceable controls as model capabilities advance.

Leadership

Agentic AI and the New Governance Frontier

Explores the responsibilities of boards and executives as autonomous systems take on organizational decisions.

Leadership

AI Risk as a Governance Priority: Moving Beyond IT

Argues for cross-functional oversight of AI risk at board and executive level.

Leadership

The AI Governance Imperative: Your Playbook for the New Era of Leadership

Introduces a leadership series on governing AI and connecting oversight to organizational strategy.

Professional practice

Transforming Construction Safety: How AI is Revolutionizing Hazard Detection

Looks at AI applications in construction hazard detection and workplace safety.

Professional practice

Preparedness Redefined: AI’s Role in Emergency and Disaster Management

Explores AI applications in disaster prediction, preparedness, resource allocation, and response.

Standards & assurance

Maximizing the Impact of ISO 42001: Integrating Key ISO Standards for Effective AI Governance

Examines how related ISO standards can support a coordinated approach to AI management.

Standards & assurance

Improving AI Impact Assessments: Enhancing ISO 42001 with ISO 22989 and ISO 42005

Explores the relationship between AI terminology, impact assessment, and management-system practice.

Standards & assurance

Understanding the Limitations of ISO 42001: What You Need to Know

Examines the scope and limitations of ISO 42001 as an approach to AI management.

Standards & assurance

Integrating ISO/IEC 42001:2023, ISO/IEC 23894:2023 and ISO/IEC 27002 Control 5.7 into AI Management Systems: A Comprehensive Guide

Connects AI risk management and threat intelligence with an AI management system.

Standards & assurance

Auditing AI in Healthcare: Key Considerations for an ISO 42001 Audit

Discusses questions for internal auditors examining the use of AI in healthcare.

Standards & assurance

Integrating ISO/IEC 42001 and ISO/IEC 27001: Benefits, Synergies, and Advantages

Explores connections between AI management and information-security management systems.

Professional practice

Harnessing the Power of AI: How ISO Standards Can Benefit Industries Poised for AI-Driven Growth

Considers the role of ISO standards in industries adopting AI.

Professional practice

One Size Does Not Fit All: Tailoring State-Specific Casino Risk Frameworks

Examines why casino risk frameworks need to account for differences between jurisdictions.

AI & security

Transforming Cybersecurity Through Data Lakes and AI: Enhancing Data Security and Threat Detection

Explores data lakes and AI in data protection, storage, and threat detection.

AI & security

The Hidden Risks of Data Poisoning in AI: Navigating the Challenges in Language Models and Image Generators

Examines data poisoning risks in language models and image generators.

Leadership

When Will AI Replace the Chief Information Security Officer?

Considers how AI may change the CISO role and the relationship between automation and human leadership.

Standards & assurance

Achieving Integration Excellence: Uniting ISO 27001 and ISO 42001 Management Systems

Explores shared documentation, processes, and risk management across ISO 27001 and ISO 42001.

AI & security

Safeguarding Enterprise AI: Comprehensive Strategies Against AI Hallucinations

Discusses safeguards against false or unsupported outputs from enterprise AI systems.

AI governance

Navigating the Future of AI Governance: The Imperative of Robust Models in an Era of Unprecedented Innovation

Examines how governance frameworks can respond to changing AI capabilities and risks.

AI governance

OpenAI Gets Proactive on EU Privacy Compliance

A January 2024 commentary on OpenAI’s approach to European privacy responsibilities.

AI & security

Mitigation Tactics for AI-Driven Cybersecurity Risks

Discusses detection, training, and other approaches to AI-related cybersecurity risks.

AI & security

Collaboration between AI Developers and Cybersecurity Experts: A Crucial Partnership

Explores collaboration between AI developers and cybersecurity specialists.

AI & security

The Emergence of AI and the Growing Cybersecurity Risks

A 2023 perspective on generative AI, phishing, and evolving cybersecurity risks.

Standards & assurance

Exciting times

A December 2023 reflection on the arrival of ISO/IEC 42001 and its management-system approach.

Standards & assurance

Final Version of the ISO 42001:2023 Information technology — Artificial intelligence — Management system

A December 2023 article discussing the final AI management-system standard.

Standards & assurance

Navigating the New Frontier: Mitigating Information Risks in Generative AI with ISO/IEC Standards

Explores the use of ISO/IEC standards to address information risks in generative AI.

Standards & assurance

Introduction to the ISO 42001

An introduction to the role of ISO 42001 in AI management.

AI governance

#AIRevolution: The Critical Need for Standardized AI Governance Frameworks

Makes the case for shared governance frameworks for responsible AI use.

Standards & assurance

The ISO 42001 for AI Governance and Safety is set to be released in 2023.

A May 2023 preview of the then-forthcoming AI management-system standard.

Professional practice

Getting Started with AI: A Guide to Managing and Analyzing Your Organization's Security and Regulatory Obligations with Koru

An archival guide to using Koru for organizational security and regulatory obligations.

Professional practice

Monforte Security and Koru Compliance to create and deploy specialized Artificial Intelligence Compliance APIs and integration services.

A June 2022 announcement concerning Monforte Security and Koru Compliance.

Competence

Building the Architecture of AI Competence

Connecting the work people perform to the capability their responsibilities require.

AI governance

The Internet of Agents Is Being Designed for Strangers

AI governance

The Authorization That Outlived Its Premises

Standards & assurance

Designing AI systems for evidence others can test

A short post on designing AI records so an independent party can reconstruct and test what happened.

Competence

AI Will Change the Organization Before It Changes the Organization Chart

Competence

The AI Competence Crisis: Literacy Is Necessary. It Is Not Enough.