Compliance and GRC

What the new mapping actually buys you, where teams misread it as control equivalence, and how much rework that mistake creates.

The Council named future technology and AI innovation in its request for comments. Here’s how the RFC process works and what happens next.

Anthropic disabled two frontier models worldwide to comply with an export directive. The practitioner takeaways on dual-use AI and availability risk.

What Careful Adoption of Agentic AI Services means for non-human identity, privilege design, and compliance programs that haven’t caught up.

Two weeks after writing about the structural problems with compliance platforms, the allegations landed. What assessors already knew.

A reality check on compliance automation platforms, the gap between generated evidence and assessed controls, and the questions to ask.