AI Governance
AI Acceptable Use Policies That Survive Deployment Pressure
Written rules fail without technical enforcement, monitoring, and audit-ready logs.
DeShawn Calloway
· 8 min read
AI Governance Quarterly
AI-Specific Gaps in Traditional GRC Platform Coverage
Traditional GRC platforms cannot detect AI behavior changes between audits.
Priya Nandakumar
Access Control Audit Trails as Compliance Infrastructure for AI
Audit trails must record authorization decisions, not just activity, to prove AI compliance.
Priya Nandakumar
SOC 2 Trust Services Criteria Applied to AI Agent Systems
Organizations must map AI agents to SOC 2 controls and prove those controls actually work.
Lieselotte Baumann
FedRAMP Authorization Challenges for AI-Enabled Cloud Services
FedRAMP's framework struggles to keep pace with federal AI deployment demands.
DeShawn Calloway
Compliance Evidence Generation for AI Systems Under Audit
Auditors now demand runtime logs, not policies, to verify AI systems met compliance rules.
Lieselotte Baumann
GDPR Accountability Obligations for Automated AI Decision-Making
Organizations must document AI decisions before regulators demand proof of compliance.
Priya Nandakumar
HIPAA Compliance Gaps Created by AI Agents Accessing PHI
AI agents' autonomous data access and persistent memory undermine HIPAA's human-centered safeguards.
Priya Nandakumar