Insights
Governance & Risk
Articles on governance & risk.
Governance & Risk
Ask AI vendors for lists, not assurances
Third parties were involved in 48 percent of breaches this year. The standard AI vendor questionnaire now runs to 247 controls and still misses what went wrong.
September 8, 2026 · 15 min read
Governance & RiskThe ML tools your data team installed are on CISA's exploited list
CISA added four AI platform tools to its actively exploited catalog this year. The warning time ranged from 264 days down to none at all.
August 24, 2026 · 10 min read