Software Analyst Cyber Research (SACR) published the AI and Agentic Risk Management and Control Framework (ARMCF) in July, outlining six governance domains—GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, …
AI governance is the set of processes, standards, and guardrails that ensure AI systems are safe, ethical, and aligned with human-defined objectives, according to a guide on operationalizing it in the…
Perforce and the Puppet team outlined their approach to responsible use of AI in open source development, emphasizing that all contributions—whether human-written or AI-generated—are held to the same …
Enterprise AI safety certificates such as SOC 2 Type II and ISO 42001 are worthless at runtime because they treat safety as a static design-time product rather than a live execution problem, according…
The Cloud Security Alliance (CSA) released AI Controls Matrix (AICM) v1.1, expanding to 247 control objectives across 18 domains with a dedicated Model Security domain and mappings to major AI governa…
A developer detailed how to build an audit trail for autonomous AI agents, addressing challenges like non-deterministic behavior, causality tracking, and compliance with regulations such as the EU AI …
The security industry is deploying autonomous AI agents for tasks like triage and investigation, but governance frameworks lag behind capabilities. Regulations such as ISO 42001, DORA, NIS2, and the E…
Radware announced on July 7, 2026 that its Agentic AI Protection product now supports developer-hosted agents like Claude Code, adding compliance reporting and visibility into agent activity. The upda…
A new compliance evidence and audit-trail agent automates evidence collection for regulated environments by observing events, mapping them to a user-supplied control catalog, and sealing results into …
A developer's platform for structured compliance-training programmes repeatedly failed internal quality checks on an ISO 42001 Lead Auditor course due to subtle drift into other standards. Investigati…
Enterprises deploying autonomous AI agents face five novel failure modes—goal misgeneralization, action amplification, tool chain exploitation, instruction injection, and silent drift—that traditional…
Colorado replaced its AI law SB 24-205 with SB 26-189 after a constitutional challenge by xAI and the DOJ. The new law removes requirements for risk management programs, impact assessments, and algori…
Suhana Sayyad, an MSc Cybersecurity student at TUS Athlone, built a free, open-source interactive tool that maps 30 EU AI Act obligations to their equivalents in NIST AI RMF and ISO 42001. The tool pr…
Alation launched Alation AI Governance, a system that registers AI models, agents, and tools into a single inventory and maps them to applicable regulations to help enterprises comply with the EU AI A…