---
title: "Articles | Cobalt Shields"
description: "Writing on information security, AI governance, third-party risk and technology leadership from Cobalt Shields."
url: https://www.cobaltshields.com/articles
source: "Converted from https://www.cobaltshields.com/articles at build time."
---

# Articles

Notes on security, AI governance, third-party risk and running technology well.

-   ## [AI and Third-Party Risk](https://www.cobaltshields.com/post/ai-and-third-party-risk)

    January 10, 2025 · Sam DeLucia

    Third-party risk management for AI, framed around how organizations actually use it — as providers, as deployers, or somewhere in between.

-   ## [Navigating the Landscape of AI Governance: Strategic, Tactical, and Operational Control Categories](https://www.cobaltshields.com/post/navigating-the-landscape-of-ai-governance-strategic-tactical-and-operational-control-categories)

    July 25, 2024 · Sam DeLucia

    AI governance in three layers of control — strategic, tactical and operational — and what each one is actually responsible for.

-   ## [Artificial Intelligence Governance: Why Are There So Few Usable Control Frameworks for AI Governance?](https://www.cobaltshields.com/post/artificial-intelligence-governance-why-are-there-so-few-usable-control-frameworks-for-ai-governance)

    June 28, 2024 · Sam DeLucia

    Why AI governance frameworks stay scarce and hard to use: the technology moves faster than the rulemaking, and AI is too varied for one set of controls.

-   ## [Artificial Intelligence Governance Series: AI Governance Challenges with External Systems and Data](https://www.cobaltshields.com/post/artificial-intelligence-governance-series-ai-governance-challenges-with-external-systems-and-data)

    May 7, 2024 · Sam DeLucia

    Governing AI when the data or the outputs sit outside your organization: vendor due diligence, contract and SLA terms, and real data controls.

-   ## [Artificial Intelligence: Understanding the Risks](https://www.cobaltshields.com/post/artificial-intelligence-understanding-the-risks)

    April 21, 2024 · Sam DeLucia

    The risks that come with AI adoption — data bias, privacy exposure, and security vulnerabilities that are unusually hard to detect.

-   ## [Data Governance: A Strategic Imperative](https://www.cobaltshields.com/post/data-governance-a-strategic-imperative)

    April 14, 2024 · Sam DeLucia

    Data governance is the framework that keeps data accurate, secure and usable — and quality, privacy and usability cannot be fixed one at a time.

-   ## [Security Questionnaires: Time Consuming, Challenging, and Necessary](https://www.cobaltshields.com/post/security-questionnaires-time-consuming-challenging-and-necessary)

    March 25, 2024 · Sam DeLucia

    What security questionnaires are for, why they take so long, and how completing one accurately helps both the vendor and the customer.

-   ## [Maximizing Technology Investments for Nonprofit Organizations](https://www.cobaltshields.com/post/maximizing-technology-investments-for-nonprofit-organizations)

    February 21, 2024 · Steve Fabiani

    How nonprofits can plan and manage technology well on limited resources, starting with a clear read on the organization's needs and goals.

-   ## [Strategic Planning for a Secure and Reliable Technology Environment](https://www.cobaltshields.com/post/strategic-planning-for-a-secure-and-reliable-technology-environment)

    February 21, 2024 · Steve Fabiani

    What goes into planning a technology environment that stays secure and reliable, and when interim senior leadership is the right way to get there.

-   ## [The Importance of Information Security in Today's Digital Landscape](https://www.cobaltshields.com/post/the-importance-of-information-security-in-today-s-digital-landscape)

    February 21, 2024 · Steve Fabiani

    Why information security matters for organizations and individuals alike, and the practical steps that protect personal and business data.