Articles
Notes on security, AI governance, third-party risk and running technology well.
-
AI and Third-Party Risk
Third-party risk management for AI, framed around how organizations actually use it — as providers, as deployers, or somewhere in between.
-
Navigating the Landscape of AI Governance: Strategic, Tactical, and Operational Control Categories
AI governance in three layers of control — strategic, tactical and operational — and what each one is actually responsible for.
-
Artificial Intelligence Governance: Why Are There So Few Usable Control Frameworks for AI Governance?
Why AI governance frameworks stay scarce and hard to use: the technology moves faster than the rulemaking, and AI is too varied for one set of controls.
-
Artificial Intelligence Governance Series: AI Governance Challenges with External Systems and Data
Governing AI when the data or the outputs sit outside your organization: vendor due diligence, contract and SLA terms, and real data controls.
-
Artificial Intelligence: Understanding the Risks
The risks that come with AI adoption — data bias, privacy exposure, and security vulnerabilities that are unusually hard to detect.
-
Data Governance: A Strategic Imperative
Data governance is the framework that keeps data accurate, secure and usable — and quality, privacy and usability cannot be fixed one at a time.
-
Security Questionnaires: Time Consuming, Challenging, and Necessary
What security questionnaires are for, why they take so long, and how completing one accurately helps both the vendor and the customer.
-
Maximizing Technology Investments for Nonprofit Organizations
How nonprofits can plan and manage technology well on limited resources, starting with a clear read on the organization's needs and goals.
-
Strategic Planning for a Secure and Reliable Technology Environment
What goes into planning a technology environment that stays secure and reliable, and when interim senior leadership is the right way to get there.
-
The Importance of Information Security in Today's Digital Landscape
Why information security matters for organizations and individuals alike, and the practical steps that protect personal and business data.