ISO/IEC 42001 in Plain English: What It Asks, and What It Costs You to Prove
The explainer that turns a standard into a project plan: what the clauses actually require, and which of your existing SOC 2 evidence already satisfies them.
Insights
Plain-Language Analysis of the Rules That Are Arriving
What ISO/IEC 42001 actually asks for. What the EU AI Act means if you’re a US company with European customers. What carriers now ask about AI at renewal. Written by the people who do the assessments, for the people who have to answer for them.
Featured
CYBER INSURANCE9 MIN READ
AI and Your Cyber Insurance: What Carriers Are about to Start Asking
Underwriters are adding AI questions to renewal submissions faster than most policyholders can answer them. Here’s what they’re asking, why, and what a good answer looks like, from the firm that trains them.
Read the analysis →
All insights
Browse by What You’re Facing
✓ AllAI governanceFrameworksCyber insuranceHealthcareFinancial servicesPrivacyIncident readiness
Shadow AI: How to Find the AI Already Running inside Your Company
A practical sweep you can run in a week, procurement records, browser telemetry, SaaS admin consoles, and the four questions that surface the rest.
Attacks Using AI, Attacks against AI, and Governing Your Own
Three different problems that buyers and vendors keep merging into one. A taxonomy you can take into a board meeting.
AI in a HIPAA Environment: What Changes and What Doesn’t
Where the Security Rule already covers you, where it doesn’t, and what belongs in a business associate agreement that mentions AI.
The NAIC Model Bulletin: What Insurers Have to Show an Examiner
What an AI Systems Program contains, what a market-conduct exam asks for, and the documentation gap most carriers still have.
Three More in the First Six Weeks
The index should never look abandoned. Three pieces at launch, three inside six weeks, then monthly.
New Analysis, Roughly Monthly
One email when something is worth reading. No sequences, no drip campaign, no “just circling back.”
you@company.com