Insights
Practical analysis of the standards and regulations governance, risk and compliance professionals work with.
Mapping ISO/IEC 42001 to EU AI Act obligations
Where an AI management system covers the Act's requirements, where it falls short, and what the Digital Omnibus and the first harmonised standard change.
DORA in practice: what the register of information actually demands
What Article 28(3) and the implementing templates require, where firms struggle, and what a register that stands up to supervisory scrutiny looks like.
Why GRC exams should test judgement, not recall
How scenario-based questions are written, reviewed and set at a pass mark that means the same thing from one exam to the next.