Insights on AI security & governance
Practical thinking on shadow AI, data governance, AI safety, and building AI systems you can actually trust.
Governance articles
Page 1 of 3 · 21 posts
ISO 42001 explained for UK SMEs (without the jargon)
What ISO 42001 actually is, why buyers ask about it, and how a small UK firm can be ready in weeks rather than months.
EU AI Act, August 2026 — a 90-day playbook for UK firms
GPAI duties bite in August 2026, and they catch UK firms that sell into the EU. Here is the four-document, 90-day plan to be ready.
UK AI Regulation in 2026: What Your Practice Needs to Know
A plain-English 2026 overview — the Data (Use and Access) Act 2025, the UK Ai Bill, ICO guidance, sector regulators, and EU Ai Act cross-border effects.
SRA Guidance on AI for UK Solicitors (2026): What Your Firm Actually Needs
A plain-English guide to how SRA Principles apply to AI in your practice — Principle 7 confidentiality, Code of Conduct obligations, and what COLP evidence actually looks like.
ICAEW + AI: What QAD Reviewers Are Now Asking Accountancy Firms
ICAEW QAD reviewers are starting to ask about AI use in audit and practice reviews. Here is what the questions look like and how to answer them confidently.
FCA SYSC 9 Meets AI: The Record-Keeping Gap Your Firm Is Probably Missing
FCA SYSC 9 requires firms to keep records that let them reconstruct any piece of advice. AI makes this harder — unless the tool is built for it. Here is what good looks like.
Do You Need a DPIA for AI Tools? A 10-Question Checklist
Most UK SMEs introducing AI tools need a DPIA under UK GDPR Article 35. Here is a 10-question checklist to decide, and what to put in yours.
CV Shortlisting with AI without Breaking GDPR Article 22
GDPR Article 22 restricts "solely automated" decisions in recruitment. Here is how to use AI for CV shortlisting in a way that stays compliant and reduces bias.
RICS Rules of Conduct Rule 3 and AI-Assisted Reports
RICS Rule of Conduct 3 requires proper enquiries — every survey report needs source evidence. Here is how chartered surveyors use AI while keeping the audit chain Rule 3-ready.