This is where the working notes go: what changes and from when, how it is configured step by step and on what grounds to decide. Shorter and more specific than a blog article, with the official source always linked.
From the community, for the community
A regulatory change can be told in thirty seconds, turned into a procedure you apply on Monday, or argued through in depth to decide what to do. Each category does one of those three things.
What changes, in half a minute
Retirement dates for a product, a change in a regulation, a vendor advisory. Just enough to know whether it affects you and what to look at next, without going round in circles.
How it is done, step by step
Practical cybersecurity and AI governance guides: steps, examples, editable templates and evidence to check the result.
How an email travels, what each protocol checks and how to roll them out without losing legitimate mail. With diagrams, a six-scenario simulator, provider notes, Gmail and Microsoft requirements and what RFC 9989 changes.
Read guide → Artificial IntelligenceA joint ACBSEC × USOARIT guide. What the Spanish DPA warned about, what the GDPR requires today, what the AI Act brings in 2027 and which controls a company screening applications with AI needs. With a downloadable checklist.
Read guide → Microsoft SecurityAn enabled policy can still leave important accounts, applications or devices outside its scope. Learn how to assess Microsoft 365 coverage, review exceptions and turn findings into an improvement plan.
Read guide →Draft, approve and review your AI policy with practical steps, examples and an editable Word template. Connect clauses 5.2, A.2 and B.2 of ISO/IEC 42001.
Read the guide and get the template →The blog explains a whole topic for someone arriving from scratch. Insights assumes you are already in the middle of it: less context, more detail and the exact reference you need to get on with the work.
Long-form articles that open a topic and explain it from the beginning. When an Insights entry needs that context, it links to the blog article that provides it.
Self-assessments and checklists that calculate something in your browser. Several entries will lean on them to move from reading to checking.
When what needs doing outgrows your hands or your calendar, that is where I come in. The entries say when it is worth delegating.