Publications
AI governance
ISO 42001, AI risk and how to put an AI feature through compliance before it ships.
AI governance
ISO 42001 is becoming the SOC 2 of AI companies
Why enterprise buyers now ask AI vendors for ISO/IEC 42001, how it relates to ISO 27001, and what a small AI company should build first.
· 4 min readRead AI governanceCan AI answer security questionnaires? Yes. Should it sign them? No.
How AI security questionnaire tools work, where they go wrong, why answers become contractual commitments, and a safe workflow for using them.
· 4 min readRead AI governanceAI compliance by design: why reviewing your AI feature before launch is too late
Why compliance reviews of AI features fail when they happen just before launch, and the six questions to ask at design review under DPDP, GDPR and ISO 42001.
· 4 min readRead