Turning Compliance Automation into a Defensible Management System The high profile, compliance platforms have transformed the way organisations prepare for standards including ISO 27001 and SOC 2. By automating evidence collection, monitoring technical controls and organising compliance activity in one place, they can remove a considerable amount of manual work. However, technology is only one part of an effective compliance programme. The strongest results come when the platform is...

We have been hearing so many reports recently about “rogue” AI which is adding to the fear and definitely should make every organisation’s board members and leadership teams pause, think and review the controls they have in place, aka Governance! These reported incidents are unlikely to be the last, sadly, and they demonstrate what can happen when powerful AI encounters gaps in permissions, controls and containment. In once incident, an AI coding agent reportedly delete a company’s production...

The EU AI Act is not yet fully operational as it is being introduced in phases, with some provisions already in force and others only becoming applicable in August 2026. As a result, we can assess whether it is influencing behaviour, but not whether it is achieving all of its intended outcomes. There are some benefits: It has forced AI governance onto the boardroom/ C Suite agenda. AI inventories, risk classifications, impact assessments, and governance reviews are all key to managing the use...