ISO 42001August 27, 2026Preparing for ISO 42001 Without Overbuilding the AI Management SystemMost organizations approaching ISO/IEC 42001 for the first time either bolt AI governance onto an existing ISMS as an afterthought, or build a second management system nobody has the resourcing to run twice.ZZelarTrust Cyber Governance PracticeCISOaaS advisory and delivery team
Aug 13, 2026NIST AI RMFUsing the NIST AI RMF as a Map, Not a ChecklistThe framework's four functions read like a checklist an auditor can tick. Treated that way, an organization can complete every one of them and still not know whether a specific AI system is safe to deploy.
Jul 30, 2026AI SecurityThe Model Supply Chain Most Security Reviews MissA security review that stops at the application layer never asks where the model came from, what it was trained on, or what changed the last time it was fine-tuned.
Jul 16, 2026Responsible AIResponsible AI Starts With Who Can Say No to a DeploymentA responsible-AI principles document with no one empowered to block a launch is a statement of values, not a control.
Jun 25, 2026AI GRC WorkflowsWhere AI Governance Actually Belongs in a GRC ProgrammeStanding up a separate AI governance committee is the easy part. Connecting its decisions to the risk register everyone else already reports against is the part that determines whether it matters.
Jun 11, 2026ISO 42001The AI Use-Case Inventory an Audit Will Actually Ask ForAn AI management system audited against an inventory that only covers the initiatives IT formally approved will miss most of what the organization is actually running.
May 28, 2026NIST AI RMFGovern, Map, Measure, Manage: What the Four Functions Actually Ask ForEach function sounds self-explanatory until a specific AI system needs to move through all four, and the questions turn out to be harder than the labels suggest.
