Insights

Standards & assurance

AI Governance Worldwide: Laws, Ethics, Frameworks and Standards

A worldwide map of legal, ethical and technical instruments, explaining what each contributes and what it cannot establish alone. Five language editions, 31 pages each.

AI governance

Ethical Foundations of AI Impact Assessment: Before the Template

Five principles and a practical test for whether an assessment challenged a proposal and influenced an accountable decision.

Standards & assurance

AI Governance Has No Master Standard

Reviews the contribution and limits of AI laws, ethics frameworks, standards and assurance, alongside the multilingual worldwide reference paper.

AI governance

When Responsibility Outlives Control

Examines autonomous replication, irreversible release decisions and the limits of institutional control once AI capability spreads.

AI governance

The Sapolsky Perspective

Applies Robert Sapolsky’s contextual approach to behavior to the judgments AI systems make about applicants, workers and learners.

Standards & assurance

ISO/IEC 27090 and the wider spectrum of AI risk

Examines the contribution of ISO/IEC 27090 to AI security and the wider evidence needed for responsible organizational use.

AI & security

When the Developer Calls It Unprecedented

Examines the gap between statements of AI governance intent and enforceable, evidenced controls on consequential deployments.

Republished newsletter edition; the original company article was published on 9 April 2026.

AI governance

The Assessment That Could Change the Decision

Asks what an impact assessment learned that changed a proposed deployment, using workplace and community surveillance examples.

AI governance

Taking AI Impact Assessment Seriously

Introduces ethical questions about necessity, proportionality, dignity, oversight and the effects of AI on affected people.

Competence

The Decision Nobody Made

Examines how assumptions embedded in AI-generated software can turn training records into unsupported claims of competence.

Leadership

ROI Expectations as a Hidden AI Governance Risk

Explores how expected savings and business incentives can weaken oversight when investment and risk decisions are considered separately.

Competence

The Spectrum of AI Competence

Defines AI competence in relation to industry, application, operating conditions and assigned responsibility.

AI governance

The Comfort of System-Centric AI Governance

Examines the limits of governing models and infrastructure without accounting for institutional consequences and named human responsibility.

Republished newsletter edition; the original company article was published on 19 May 2026.

Competence

Building the Architecture of AI Competence

Connects assigned AI responsibilities with defined readiness, role-specific competence and evidence of practical capability.

Standards & assurance

The Record That Answers

Examines the records an organization needs to explain decisions, controls and responses when AI-related consequences arise.

Leadership

Where Exposure Is Created

Traces how design, training, deployment and configuration decisions create exposure across an AI delivery chain.

Leadership

One Incident, Many Consequences

Examines how one AI incident can produce criminal, civil, regulatory, contractual, insurance, market and operational consequences.

Leadership

Consequences Do Not Wait for Legislation

Introduces a series on how decisions about AI create exposure before new legislation becomes applicable.

Competence

The AI Competence Crisis: Literacy Is Necessary. It Is Not Enough.

Examines why inventories, named owners and literacy training need to be supported by evidence of competence for actual responsibilities.

Competence

AI Will Change the Organization Before It Changes the Organization Chart

Explores how AI changes the capability attached to roles before its effects appear in formal organizational structures.

Competence

The Organization Chart Is the Last Thing to Move

Introduces the competence series by examining changes in work that precede visible organizational restructuring.

AI governance

AI Governance Has Been Looking at the Wrong Unit

Argues for examining consequential encounters between people, institutions and AI systems as a distinct object of governance.

Republished newsletter edition; the original company article was published on 11 May 2026.

AI governance

The Internet of Agents Is Being Designed for Strangers

Explores how portable agent authority across organizations can become separated from the evidence and assumptions supporting reliance on it.

AI & security

The Authorization That Outlived Its Premises

Examines continuing authorization, changing assumptions and enterprise responsibilities through the OpenAI and Hugging Face incident.

AI governance

Who Owns the Decision?

Examines the information, time, authority and independence required for meaningful human review of AI-assisted decisions.

Standards & assurance

"We Tested It a Hundred Times."

Explains what repeated clean test runs can establish, their statistical limits and the conditions under which findings apply.

Standards & assurance

The Evidence of a Single Run

Examines what a single AI output can support as evidence and how variability affects claims about reliability.

AI governance

Governing What Cannot Disobey

Examines harmful outcomes that arise while an AI system follows an approved objective and breaks no explicit rule.

AI governance

Beyond the AI Register

Develops a practitioner view of the relationships among models, agents, use cases, obligations, ownership and evidence.

AI governance

What Exactly Is AI?

Compares ways to classify AI and examines the relationships a governance model must retain beyond a simple inventory.

AI governance

You Cannot Stop What Was Never Constituted

Examines the prior decisions about identity, authorization and revocation needed to make a stop instruction operational.

AI governance

You Cannot Pace What You Cannot Stop

Explores the institutional and technical capacity needed to restrict AI activity before attempts to pace capability can be effective.

Standards & assurance

The Omnibus Admission

Examines what delayed obligations and the development of compliance infrastructure reveal about organizational readiness.

AI & security

One Control Failed. The Other Never Existed.

Compares failures of technical containment with the absence of authorization for actions affecting external organizations.

Standards & assurance

The Same Witness Twice

Examines the limits of treating a system’s explanation of itself as independent evidence of its behavior.

AI & security

AI Has No Packet

Questions what AI security infrastructure needs to observe and carry to support assurance across organizational boundaries.

Standards & assurance

Building the Gauge Changer

Explores infrastructure for preserving governance meaning and evidence when information crosses framework boundaries.

Standards & assurance

The Taxonomic Break of Gauge

Uses the railway break-of-gauge analogy to examine information lost when AI risks are reclassified across frameworks.

Standards & assurance

One Architecture, Multiple Conformity Claims

Examines how one management architecture can support distinct conformity claims while retaining their separate criteria and evidence.

AI governance

When AI Stops Talking

Examines latent coordination among AI agents and the resulting limits of human-readable oversight and forensic evidence.

Republished newsletter edition; the original standalone article was published on 13 July 2026.

AI governance

Quis Custodiet Ipsos Custodes?

Explores oversight when AI agents coordinate through representations that are not expressed in ordinary language.

Republished newsletter edition; the original standalone article was published on 10 July 2026.

Standards & assurance

AIUC-1 Isn't Really a Governance Standard — It's Financial Infrastructure

Examines AIUC-1 through the relationship among assurance, certification and the underwriting of AI risk.

AI governance

Anyone Home?

Explores the detection, exception-handling and accountability functions lost when operations become AI-only.

Republished newsletter edition; the original company article was published on 27 May 2026.

Standards & assurance

Assurance Follows the Instance

Examines control and assurance at the level of an executing AI instance and its changing operating conditions.

AI & security

The Objective Was Authorized. The Behavior Was Not.

Distinguishes an authorized objective from the unauthorized means an agent may select while pursuing it.

AI governance

Autonomous Governance of Autonomous Systems

Examines accountability and evidence when autonomous AI systems are themselves overseen by agents.

AI governance

Anyone Home?

Examines how removing human oversight changes failure detection, exception handling, and accountability in AI operations.

AI governance

The Comfort of System-Centric AI Governance

Questions whether system-level governance adequately addresses how institutions recognize and classify people.

AI governance

AI Governance Has Been Looking at the Wrong Unit

Makes the case for examining the encounter between a person, an institution, and an AI classifier.

AI & security

Provenance is the New Privacy: Four Gaps Exposed by DeepSeek V4

Examines model provenance, hosting, deployment, and jurisdiction as questions for AI governance.

AI governance

Moving Faster Won't Save Your AI Governance Program

Introduces the Agentic Inflection Point and Control Bandwidth as ways to examine governance capacity.

AI & security

When the Developer Calls It Unprecedented

Considers the gap between AI policy and enforceable controls as model capabilities advance.

Leadership

Agentic AI and the New Governance Frontier

Explores the responsibilities of boards and executives as autonomous systems take on organizational decisions.

Leadership

AI Risk as a Governance Priority: Moving Beyond IT

Argues for cross-functional oversight of AI risk at board and executive level.

Leadership

The AI Governance Imperative: Your Playbook for the New Era of Leadership

Introduces a leadership series on governing AI and connecting oversight to organizational strategy.

Professional practice

Transforming Construction Safety: How AI is Revolutionizing Hazard Detection

Looks at AI applications in construction hazard detection and workplace safety.

Professional practice

Preparedness Redefined: AI’s Role in Emergency and Disaster Management

Explores AI applications in disaster prediction, preparedness, resource allocation, and response.

Standards & assurance

Maximizing the Impact of ISO 42001: Integrating Key ISO Standards for Effective AI Governance

Examines how related ISO standards can support a coordinated approach to AI management.

Standards & assurance

Improving AI Impact Assessments: Enhancing ISO 42001 with ISO 22989 and ISO 42005

Explores the relationship between AI terminology, impact assessment, and management-system practice.

Standards & assurance

Understanding the Limitations of ISO 42001: What You Need to Know

Examines the scope and limitations of ISO 42001 as an approach to AI management.

Standards & assurance

Integrating ISO/IEC 42001:2023, ISO/IEC 23894:2023 and ISO/IEC 27002 Control 5.7 into AI Management Systems: A Comprehensive Guide

Connects AI risk management and threat intelligence with an AI management system.

Standards & assurance

Auditing AI in Healthcare: Key Considerations for an ISO 42001 Audit

Discusses questions for internal auditors examining the use of AI in healthcare.

Standards & assurance

Integrating ISO/IEC 42001 and ISO/IEC 27001: Benefits, Synergies, and Advantages

Explores connections between AI management and information-security management systems.

Professional practice

Harnessing the Power of AI: How ISO Standards Can Benefit Industries Poised for AI-Driven Growth

Considers the role of ISO standards in industries adopting AI.

Professional practice

One Size Does Not Fit All: Tailoring State-Specific Casino Risk Frameworks

Examines why casino risk frameworks need to account for differences between jurisdictions.

AI & security

Transforming Cybersecurity Through Data Lakes and AI: Enhancing Data Security and Threat Detection

Explores data lakes and AI in data protection, storage, and threat detection.

AI & security

The Hidden Risks of Data Poisoning in AI: Navigating the Challenges in Language Models and Image Generators

Examines data poisoning risks in language models and image generators.

Leadership

When Will AI Replace the Chief Information Security Officer?

Considers how AI may change the CISO role and the relationship between automation and human leadership.

Standards & assurance

Achieving Integration Excellence: Uniting ISO 27001 and ISO 42001 Management Systems

Explores shared documentation, processes, and risk management across ISO 27001 and ISO 42001.

AI & security

Safeguarding Enterprise AI: Comprehensive Strategies Against AI Hallucinations

Discusses safeguards against false or unsupported outputs from enterprise AI systems.

AI governance

Navigating the Future of AI Governance: The Imperative of Robust Models in an Era of Unprecedented Innovation

Examines how governance frameworks can respond to changing AI capabilities and risks.

AI governance

OpenAI Gets Proactive on EU Privacy Compliance

A January 2024 commentary on OpenAI’s approach to European privacy responsibilities.

AI & security

Mitigation Tactics for AI-Driven Cybersecurity Risks

Discusses detection, training, and other approaches to AI-related cybersecurity risks.

AI & security

Collaboration between AI Developers and Cybersecurity Experts: A Crucial Partnership

Explores collaboration between AI developers and cybersecurity specialists.

AI & security

The Emergence of AI and the Growing Cybersecurity Risks

A 2023 perspective on generative AI, phishing, and evolving cybersecurity risks.

Standards & assurance

Exciting times

A December 2023 reflection on the arrival of ISO/IEC 42001 and its management-system approach.

Standards & assurance

Final Version of the ISO 42001:2023 Information technology — Artificial intelligence — Management system

A December 2023 article discussing the final AI management-system standard.

Standards & assurance

Navigating the New Frontier: Mitigating Information Risks in Generative AI with ISO/IEC Standards

Explores the use of ISO/IEC standards to address information risks in generative AI.

Standards & assurance

Introduction to the ISO 42001

An introduction to the role of ISO 42001 in AI management.

AI governance

#AIRevolution: The Critical Need for Standardized AI Governance Frameworks

Makes the case for shared governance frameworks for responsible AI use.

Standards & assurance

The ISO 42001 for AI Governance and Safety is set to be released in 2023.

A May 2023 preview of the then-forthcoming AI management-system standard.

Professional practice

Getting Started with AI: A Guide to Managing and Analyzing Your Organization's Security and Regulatory Obligations with Koru

An archival guide to using Koru for organizational security and regulatory obligations.

Professional practice

Monforte Security and Koru Compliance to create and deploy specialized Artificial Intelligence Compliance APIs and integration services.

A June 2022 announcement concerning Monforte Security and Koru Compliance.

Competence

Building the Architecture of AI Competence

Connecting the work people perform to the capability their responsibilities require.

Standards & assurance

Designing AI systems for evidence others can test

A short post on designing AI records so an independent party can reconstruct and test what happened.

Competence

AI Will Change the Organization Before It Changes the Organization Chart

Competence

The AI Competence Crisis: Literacy Is Necessary. It Is Not Enough.