7 Risk Management Rules Every CIO Should Follow

/

7 Risk Management Rules for CIOs:
1. Establish risk appetite for alignment with IT strategy.
2. Maintain a comprehensive application inventory to mitigate risks.
3. Adopt a proactive cybersecurity culture and measures.
4. Formalize risk management in daily operations for clarity.
5. Assess risk strategies against real-world incidents.
6. Focus on system resiliency and recovery capabilities.
7. Align IT risk management with business objectives for better resource allocation.

https://www.cio.com/article/3954997/7-risk-management-rules-every-cio-should-follow.html

Can the EU’s Dual Strategy of Regulation and Investment Redefine AI Leadership?

/ ,

EU's dual strategy on AI, combining regulation and investment, aims to establish global leadership and tech sovereignty. Deregulating large AI firms won't solve Europe's tech ecosystem issues; instead, robust regulation ensures trust, safety, and legal certainty, crucial for downstream companies. Europe must address structural barriers, such as fragmented markets and migration laws, instead of attributing tech dependency on regulation. A strong regulatory framework can foster innovation and public trust, positioning the EU to compete effectively with the US and China in AI development.

https://www.techpolicy.press/can-the-eus-dual-strategy-of-regulation-and-investment-redefine-ai-leadership/

Lessons for the Modern CISO With Tim Ramsay and Sam Rehman

/

Podcast discusses modern CISO challenges amid tech complexities. Tim Ramsay and Sam Rehman highlight the importance of communication, trust, and integrating security early in project planning. Security isn't about limiting innovation but facilitating it securely. Strong executive relationships and proactive risk discussions improve security outcomes.

https://www.epam.com/insights/podcasts/silo-busting-70-lessons-for-the-modern-ciso-with-tim-ramsay-and-sam-rehman

How CIOs Can Course-correct Data Strategies With AI Goals in Mind

/ ,

CIOs must assess current data practices to improve data strategies aligned with AI goals. Despite a heightened focus, many organizations still lack adequate data management for AI. Experts recommend identifying gaps and engaging leadership to create a strategic path forward. Key issues include ensuring data quality, diversity, and lineage to avoid bias and support effective AI outcomes. Implementing good practices and considering AI's role in data management can help organizations build a robust data foundation essential for AI success.

https://www.ciodive.com/news/AI-ready-data-strategy-CIO-approach-tips/744513/

PCI DSS 4.0.1: a Cybersecurity Blueprint by the Industry, for the Industry

/

PCI DSS 4.0.1 enhances cybersecurity through industry collaboration, focusing on “what” to secure rather than “how.” It emphasizes self-regulation within the payment industry, avoiding government-overcomplications. Key updates include expanded MFA requirements, stronger encryption standards, and a cautious approach to integrating AI. While the standard improves security for regulated entities handling card data, it does not enforce user behavior nor guarantee compliance with laws like GDPR. Overall, it offers a valuable framework for organizations to enhance security while maintaining flexibility in implementation methods.

https://www.securityweek.com/pci-dss-4-0-1-a-cybersecurity-blueprint-by-the-industry-for-the-industry/

EU AI Office Publishes Third Draft of EU AI Act-Related General-Purpose AI Code of Practice: Key Copyright Issues

/ , ,

EU AI Office's third draft of the General-Purpose AI Code of Practice outlines commitments for GPAI model providers regarding copyright compliance under the AI Act, effective August 2025. Key obligations include adhering to training data copyright laws, respecting opt-out requests from content creators, and limiting web crawling practices. The streamlined draft emphasizes transparency and governance measures, with a focus on mitigating copyright infringement risks. Differences in US and EU copyright practices, such as the lack of a “fair use” doctrine, are noted, highlighting the complexities of navigating AI copyright law in Europe. Finalization expected May 2025.

https://www.morganlewis.com/pubs/2025/04/eu-ai-office-publishes-third-draft-of-eu-ai-act-related-general-purpose-ai-code-of-practice-key-copyright-issues

EU’s Community of Practice Publishes Updated AI Model Contractual Clauses

/ , ,

EU's Community of Practice on AI has released updated non-binding Model Contractual Clauses (MCC-AI) for public procurement of AI systems. Two templates address “high-risk” and “non-high-risk” AI systems, aligned with the EU AI Act. This guidance aims to assist public organizations but may also benefit private companies. Stakeholders are encouraged to report their use of MCC-AI, enhancing AI procurement practices in the public sector.

https://www.insideprivacy.com/artificial-intelligence/eus-community-of-practice-publishes-updated-ai-model-contractual-clauses/

Scroll to Top