Notes
Short articles on questions that come up in our client work, written for people making decisions. Published when we have something useful to say.
An AI inventory: the practical foundation for a workable policy
An AI policy can be drafted while the inventory is being built. The problem begins when it is treated as complete before the company knows which uses, data, and decisions it needs to govern.
Read the NoteThreat modeling for corporate security
A threat model helps a company decide where to invest in security. Start with the operation: which information and systems sustain the business, how they could be compromised and what the consequences would be. That map guides controls, priorities and responsibilities.
Read the NoteWhere data lives: a security and governance decision
Data location is an architecture and governance decision. It covers systems, flows, copies, access and processing, together with contractual responsibilities and operational requirements. Recording these dimensions helps assess suppliers and support business continuity.
Read the Note