risk management

Before You Scale: a Risk Management Framework for AI Systems

/ ,

As AI systems transition from pilot phases to full-scale production, organizations often face hidden risks in governance, data management, operations, and change management that can hinder sustainable growth. EisnerAmper outlines a six-pillar risk management framework—covering governance, business strategy, cybersecurity and data privacy, technology and cloud infrastructure, people and change, and data practices—that helps organizations identify and address potential friction points early, ensuring responsible and scalable AI adoption aligned with established standards like NIST and ISO. Early assessment under this framework is critical for sustaining effective AI systems as usage expands.

https://www.eisneramper.com/insights/artificial-intelligence-insights/ai-risk-management-framework-for-scaling-0326/

14 Risk Oversight Principles You Haven’t Heard Before

/ , ,

Protiviti’s Jim DeLoach presents 14 lesser-known principles of risk oversight aimed at enhancing enterprise risk management (ERM) effectiveness, emphasizing continuous improvement in risk reporting, integration of risk processes into business operations, and adapting to digital transformation. He stresses the importance of balancing risk and opportunity, fostering collaboration across organizational levels, making timely decisions with imperfect information, and cultivating a culture of open risk discussions, all to better prepare organizations for uncertainty and align risk management with strategic goals.

https://www.corporatecomplianceinsights.com/14-risk-oversight-principles-you-have-not-heard-before/

Back to Basics: 14 Risk Oversight Rules You Know (But May Be Ignoring)

/ , ,

Jim DeLoach outlines 14 fundamental risk oversight principles that remain crucial despite advances in digital tools, emphasizing that risk management must be aligned with strategy and adapt continuously to a rapidly changing environment. He highlights the importance of understanding calculated risks, vigilance against cognitive biases, preparation for contingencies, and maintaining strong culture and communication to effectively manage critical enterprise risks and ensure organizational resilience.

https://www.corporatecomplianceinsights.com/risk-oversight-rules-you-know/

EUDR in Practice: How to Correctly Set Up Due Diligence in the Supply Chain

/ , , ,

The EU Deforestation Regulation (EUDR) establishes new due diligence requirements for companies dealing with certain commodities, mandating proof that products comply with EUDR and are deforestation-free before entering or leaving the EU market. Companies must collect detailed supply chain information, assess risks, implement mitigation measures if necessary, submit a Due Diligence Statement, maintain an internal due diligence system, and retain documentation for inspections.

https://www.grantthornton.cz/en/news/eudr-in-practice-how-to-correctly-set-up-due-diligence-in-the-supply-chain/

CISO’s Perspectives – The 4 Recommendations to Sleep Without a Worry

/ , ,

Paul Bayle, Group CSO at Atos, discusses key recommendations for CISOs to manage cybersecurity effectively and maintain peace of mind despite evolving threats. Emphasizing the importance of thorough IT system mapping, investing in multiple security technologies, fostering strong governance involving cross-department collaboration, and engaging with expert ecosystems, he highlights the challenges posed by “unknown unknowns” and the need for continuous awareness, training, and management support to mitigate risks across the organization.

https://atos.net/en/lp/cybershield/cisos-perspectives-the-4-recommendations-to-sleep-without-a-worry

How CISOs Can Survive the Era of Geopolitical Cyberattacks

/ ,

Geopolitical cyberattacks, particularly destructive Iranian wiper campaigns, are increasingly targeting critical infrastructure and organizations to cause operational chaos rather than financial gain. These attacks rely on stolen credentials and legitimate administrative tools to move laterally within networks, making containment and strict internal access controls essential for CISOs to limit damage and ensure organizational resilience.

https://www.bleepingcomputer.com/news/security/how-cisos-can-survive-the-era-of-geopolitical-cyberattacks/

We Asked Experts About the Most Responsible Ways to Use AI Tools – Here’s What They Said

/ , ,

Three years after ChatGPT's release, AI use divides people into those who refuse it and those who use it daily. Experts advise using AI as a brainstorming partner, research assistant, and organizer while maintaining personal judgment, cautioning against overreliance and emphasizing the need to verify AI-generated information with credible sources.

https://www.theguardian.com/lifeandstyle/ng-interactive/2026/mar/18/how-to-use-ai-tools-expert-guide

Cisa Urges Endpoint Management System Hardening After Cyberattack Against US Organization

/ , , ,

The Cybersecurity and Infrastructure Security Agency (CISA) issued an alert following a cyberattack on U.S.-based medical technology firm Stryker Corporation targeting their Microsoft environment. CISA urges organizations to harden endpoint management system configurations by implementing Microsoft’s best practices for securing Microsoft Intune, including least privilege administrative roles, phishing-resistant multi-factor authentication, and multi-admin approval policies, to protect against similar malicious activities.

https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization

Shadow AI Has Already Moved Into Your Organization

/ , , ,

The article explains that “shadow AI” is already widespread in organizations, as employees use public or unapproved AI tools to speed up work without going through IT or security review. Because these tools can be accessed instantly in a browser, blocking them is often ineffective, resulting in lost visibility into how company data is used. The article concludes that organizations must shift from trying to prohibit AI use to creating governance frameworks, approved tools, and clear policies that enable productivity while maintaining security and compliance. 

https://www.forbes.com/sites/tonybradley/2026/03/19/shadow-ai-has-already-moved-into-your-organization/

Companies Say the Risks of ‘Open’ Artificial Intelligence Models Are Worth It

/ ,

The article reports that many companies are adopting open or partially open AI models despite security and governance concerns, because they offer lower cost, greater customization, and more control than proprietary systems. Firms say smaller, adaptable models are often better suited for business-specific tasks, and most organizations use a mix of open and closed models depending on the use case. The article concludes that while open models introduce risks such as supply-chain vulnerabilities and potential backdoors, companies believe the flexibility and performance benefits make those risks manageable.

https://www.wsj.com/cio-journal/companies-say-the-risks-of-open-artificial-intelligence-models-are-worth-it-0d3ee664

Scroll to Top