Articles
Plan the evaluation route before healthcare AI scales
Trace the shared dependency behind every AI fallback
Put a decision gate on live AI testing
Shared responsibility starts at the AI service boundary
An AI log you cannot retrieve is not an audit trail
An AI-drafted control profile describes your documents, not your controls
Keep clinical purpose and confirmation in change control
The ICO's agentic AI timetable moved. The design work remains.
Check citation as well as publication of an AI Act standard
What the EU AI Act actually asks of a retrieval system
Not every AI system needs the same governance
Someone else's capital cycle is your renewal risk
Who is the provider? The question that decides your obligations
Two governance blocs, one supplier list
Prepare for the ICO code against current duties
Reporting a serious AI incident starts long before the incident
Five decisions, not two: how an assessment should end
Use NIST’s draft overlays to sharpen the AI security review
ISO/IEC 42001 is a management system, not a badge
Shadow AI is a measurement problem before it is a policy problem
Verify payment authority beyond a familiar face
Set the authority boundary for customer-facing answers
Next step