ISO 42001 AI Management System Requirements
The standard certifies governance systems, not model performance or fairness.
Selah Beck
Section
AI Security Governance
12 stories in AI Security Governance.
EU AI Act Obligations for High-Risk LLM Applications
How deployment context, not model choice, determines EU AI compliance obligations.
Marco Quist
Model Cards and AI Transparency Documentation Requirements
Regulators now require detailed AI documentation that most companies still aren't providing.
Selah Beck
Board-Level AI Risk Reporting Metrics and Frameworks
Boards now face legal liability for weak AI oversight, not just reputational risk.
Marco Quist
AI-Specific Gaps in Traditional TPRM Programs
AI systems violate the three core assumptions traditional vendor risk assessment depends on.
Selah Beck
EU AI Act Compliance Requirements for High-Risk AI Systems
Annex III systems must comply by December 2027, while Annex I systems get until August 2028.
Bianca Espinoza
AI Governance Accountability Structures in Enterprises
Companies need named owners for each AI system, not just policies on paper.
Selah Beck
AI Risk Governance Roles and Responsibilities in Large Enterprises
Enterprises fill governance forms while AI systems operate unsupervised—naming owners fixes the gap.
Bianca Espinoza
AI Governance Gaps in SOC 2 and ISO 27001 Audits
Auditing frameworks lack controls designed for AI systems that operate autonomously across vendors.
Marco Quist
NIST AI RMF Implementation for Enterprise AI Systems
NIST's AI framework requires organizational governance before individual system controls can work.
Hugo Dvorak
NIST AI RMF Applied to LLM Deployments
Most organizations document NIST compliance but never run it against live LLM deployments.
Bianca Espinoza
AI Security Controls in Vendor Contracts and SLAs
Contracts must rethink data rights, sub-processor chains, and performance measures for AI vendors.
Marco Quist