The UK regulator of the audit profession, the Financial Reporting Council (FRC), has published guidance on the use of AI by the audit profession. Highlighting the risks, mitigations, and examples. The FRC’s guidance highlights that AI tools “pose risks to…
Everyone has a new approach to governance, risk and compliance when they don’t comply to the models and frameworks that are already demonstrated to work. Governance theory is easy, its governance practice that’s hard. Getting boards to understand and manage…
A perspective on CMMC compliance that highlights why CMMC and cybersecurity compliance require organisational discipline, it requires leadership, and it requires governance. As with all compliance programs, CMMC compliance is not a point-in-time. In fact, for many covered companies, compliance…
The US president issued the National AI policy, setting out the guidelines for AI policy to be developed by the White House over the coming months and years. The seven pillars include 1. Protecting Children and Empowering Parents 2. Safeguarding…
All it took was a single and what would be an ordinary day at the gym, to expose the location of a 40,000-ton aircraft carrier with 2,000 personnel heading towards the Gulf region. It is widely reported that a sailor…
The first is to take fiduciary responsibility for cyber and AI risk management. The second is to demonstrate governance, oversight and assurance. The third is to manage shareholder value. Just ask the board of Stryker, Marks and Spencer and UnitedHealth…
Welcome to the brave new world of Hybrid warfare and the important role that cyber plays in nation-state cyber tradecraft. A world that has no boundaries, no face, is indiscriminate and has an impact equally as devastating as kinetic warfare.…
To insure or not to insure. AI is creating new professional liability exposure and risks that boards and insurers are struggling to understand and price. AI is creating a broad range of risks. AI is raising concerns about data ownership…
AI is for good and for bad, and AI can be persuaded to do both if you ask it nicely and in the right way. The best thing is that the average 15-year-old can use it, and with the average…
The pace of technological change, the complexity of digital products and services, the lack of skilled board members and leaders to interpret AI and cyber risk, and the lack of appropriate governance, oversight, and assurance of AI and cyber risk…
