blog
Notes on compliance, security, and AI.
Practical writing on getting audit-ready, governing AI, and keeping your posture current.
AI governance
ISO 42001, explained for teams shipping AI
ISO 42001 is the first management-system standard for AI. Here is what it asks for and how to adopt it without slowing down your roadmap.
October 5, 2026 · 6 min
ComplianceContinuous monitoring beats the annual scramble
A once-a-year audit tells you almost nothing about the other 51 weeks. Here is why continuous monitoring is the better model.
September 21, 2026 · 5 min
SecurityMake pentest findings do something
A penetration test that ends in a PDF is half a test. Findings should become tracked work and feed your evidence.
September 7, 2026 · 4 min