INSIGHTS · 01

The thinking behind the advisory, in public.

Source-checked writing on the AI governance and cybersecurity developments that move regulated businesses, each tied to a live framework: EU AI Act, NIST AI RMF, ISO 42001, Saudi NCA, UAE. Open to read, nothing gated.

THE WEEKLY BRIEFING

Three to four real developments a week, each with the source and the takeaway.

02 · LATEST

30 JUL 2026FRIDAY DIGESTEU AI ACT

EU AI Act transparency guidance lands, and the supply chain gets the spotlight

The European Commission updated its Article 50 transparency guidance; the AI-agent security debate moved from theory to containment after an Artifactory zero-day; CISA and partners published 2026 SBOM minimum elements. What each means for a regulated AI program.

Read the briefing

03 · ALL BRIEFINGS

Every edition checked against primary reporting, one source per claim, one takeaway per story.

  1. 30 JUL 2026EU AI ACT

    EU AI Act transparency guidance lands, and the supply chain gets the spotlight

    Article 50 transparency guidance, AI-agent containment after an Artifactory zero-day, and 2026 SBOM minimum elements.

  2. 17 JUL 2026AI REGULATION

    The first AI-agent regulation, a US state safety-audit law, and a heavy Patch Tuesday

    China brought AI agents into a formal regulatory category, Illinois mandated independent frontier-model safety audits, and Microsoft shipped fixes for roughly 570 flaws including two exploited zero-days.

  3. 10 JUL 2026EU AI ACT

    Europe’s cyber-and-AI action plan, and a breach wave that rewards the prepared

    The EU set out a joint action plan on cybersecurity and AI, the ShinyHunters campaign against Oracle PeopleSoft widened, and a flaw in an enterprise AI writing tool showed why AI features now sit inside your attack surface.

Want this read against your own program instead of the market’s? Run the readiness assessment, or subscribe below to get each briefing by email.

04 · WHAT WE TRACK

The frameworks behind every piece.

We write about regulation that is live and binding, or close to it, across the US, Europe, and the Gulf. No speculation, no vendor hype.

UNITED STATES & INTERNATIONAL

  • EU AI ACT
  • NIST AI RMF
  • ISO/IEC 42001
  • NIST CSF
  • SBOM / SUPPLY CHAIN

GCC

  • NCA (SAUDI)
  • SDAIA (SAUDI)
  • UAE IA
  • UAE AI CHARTER
  • UAE PDPL

05 · WHAT WE PUBLISH

Three formats, one standard.

Every piece is sourced, fact-checked, and written to be useful to someone who carries real risk. The Friday Digest is live weekly; the other two roll out alongside it.

PUBLISHING WEEKLY

Friday Digest

The weekly round-up of AI governance and cybersecurity developments, each with a source and a takeaway.

FIRST EDITION

Board Brief

A short, plain-language note on one governance question for the people who answer for it.

FIRST EDITION

Kill the Jargon

One term at a time, explained without the acronyms, so the conversation stays honest.

06 · THE WEEKLY BRIEFING

Get each briefing in your inbox.

Three to four real developments a week, each with the source and the takeaway for a regulated business. Written for CISOs, CTOs, and boards.

BEYOND THE READING

Want this applied to your own program?

Run the free check to see where your gaps are, or book a call with a principal.

Run the readiness check Book an advisory call
Run the readiness check