AI governance insights, filed as they land.

LATEST

August 31, 2026
AI GOVERNANCE · DEFENSE AI

CMMC's Phase 2 Pause Froze the Audit, Not the CUI Boundary — and AI Already Crossed It

The Pentagon paused CMMC's third-party audit, but the obligation to protect controlled unclassified information never moved — and AI tools are now the CUI boundary nobody is governing.

READ →

2026-08-29 AI GOVERNANCE · COMPLIANCE The EU AI Act Deadline Shifted to December 2027. The Evidence Question Didn't. 2026-08-29 AI GOVERNANCE · DEFENSE NIST Just Asked Who's Responsible for Your AI's Decisions. DoD Primes Should Have an Answer. 2026-08-28 AI GOVERNANCE · DEFENSE AI Data Became Code: AI Agents Installed Unowned Packages Inside Fortune 500s 2026-08-27 DEFENSE AI · AGENT SECURITY Trail of Bits: VMs Won't Contain Cyber-Capable Agents 2026-08-24 DEFENSE · AI GOVERNANCE NIST Is Writing SP 800-53 Overlays for AI Agents — the Gap Before They Land Is a Defense Problem 2026-08-21 DEFENSE · AI GOVERNANCE The Pentagon Has Two New AI Mandates Due This Fall. Here's the Gap Neither GRC Tool Closes. 2026-08-18 AI GOVERNANCE · AGENT SECURITY The AI Containment-Failure Ledger: Six Agent Breaches, One Root Cause 2026-08-17 DEFENSE AI · AI GOVERNANCE The Pentagon Approved Agentic AI at IL5. 'Guardrails Built In' Is Not an Authorization Boundary. 2026-08-14 AI GOVERNANCE · DEFENSE AI State of Agent Governance — Edition 1: Two Regulatory Clocks Are Now Enforced 2026-08-12 AI GOVERNANCE · DEFENSE EU AI Act Gave Defense 16 More Months. The Architecture Question Didn't Move. 2026-08-11 AI GOVERNANCE · DEFENSE Drata Ships AI Agent Governance. The MCP Proxy Still Can't Stop a Browser Tab. 2026-08-10 COMPLIANCE · DEFENSE EU AI Act Enforcement Is Live — What Defense Primes Need to Know Now 2026-08-10 DEFENSE · AGENTIC AI GOVERNANCE Inglis Was Right About the Open Gate: AI Accountability Needs a Fence, Not a Leash 2026-08-08 DEFENSE AI · AI GOVERNANCE America's First Cyber Director Invokes Asimov. He's Right — and Defense AI Governance Is Why 2026-08-05 AI GOVERNANCE · DEFENSE When Your AI Agent Goes Rogue, Who Pays? Legal Scholars Say the Law Has No Clean Answer 2026-08-05 AI GOVERNANCE · COMPETITIVE ANALYSIS Drata Launched AI Agent Governance. Here's the Gap It Doesn't Close. 2026-08-04 AI GOVERNANCE · DEFENSE EU AI Act High-Risk Enforcement Lands December 2027. What Defense and Critical-Infrastructure Operators Should Build Now. 2026-08-03 DEFENSE · COMPLIANCE NDAA FY2026 Section 1513: CMMC Is Coming for Your AI Stack 2026-08-03 AI GOVERNANCE · DEFENSE When an AI Agent Escapes Containment, the First Question Is 'Who Authorized It?' 2026-08-03 AI GOVERNANCE · AGENTIC AI Why Probabilistic Guardrails Fail — and What Deterministic Containment Looks Like 2026-08-03 AI GOVERNANCE · DEFENSE Vanta Just Launched 'AI Governance.' Here's What It Still Can't Do. 2026-08-01 AI GOVERNANCE · AGENTIC AI OpenAI Found Evidence of AI Agents Escaping Containment. Containment Is Our Whole Company. 2026-08-01 AI GOVERNANCE · AGENTIC AI What the OpenAI, Hugging Face, and Anthropic Incidents Reveal About Frontier Agent Control 2026-07-30 AI GOVERNANCE · DEFENSE MIT Technology Review Says LLMs Have a Fundamental Flaw. Defense Can't Ignore It. 2026-07-29 AI GOVERNANCE · DEFENSE The EU AI Omnibus Just Entered Into Force. Here's What the July Cybersecurity Action Plan Means for Defense AI. 2026-07-27 NATSEC · AI GOVERNANCE The NSA Already Wrote the Rulebook for Governing the AI Boundary. It's Called Raise the Bar. 2026-07-24 AI GOVERNANCE · ENTERPRISE AI Anthropic's Record a Skill Just Made Every Employee an Automation Author. Who Reviews the Skill? 2026-07-22 AI GOVERNANCE · COMPLIANCE The EU AI Act Transparency Guidelines Just Dropped. Here's What Defense Deployers Must Do Before August 2. 2026-07-20 NATSEC · AI GOVERNANCE The Pentagon Ordered AI to the Edge on a 30-Day Model Clock. The Governance Boundary Has to Move With It. 2026-07-20 COMPLIANCE · DEFENSE 13 Days: What Defense Primes Need to Know Before the EU AI Act Transparency Deadline 2026-07-19 AI GOVERNANCE · AGENTIC AI The self-driving company needs an enforcement layer 2026-07-18 FEDRAMP · DEFENSE AI FedRAMP CR26 Is Live. What Defense Primes Need to Know Before July 28. 2026-07-16 AI GOVERNANCE · INDUSTRY STANDARDS FIDO is solving how agents log in. Enforcement is the other half. 2026-07-16 AI GOVERNANCE · INDUSTRY STANDARDS Four positions on NIST's AI Agent Standards Initiative 2026-07-16 DEFENSE · AI GOVERNANCE Vanta Just Got FedRAMP 20x Moderate — Here's the Gap It Doesn't Close for Defense AI 2026-07-15 REGULATORY · DEFENSE EU AI Act Article 50 Transparency Deadline: What Defense Deployers Must Do Before August 2, 2026 2026-07-13 AGENTIC AI · NATSEC The Pentagon Is Wiring AI Agents Into the Kill Chain. The Five Eyes Just Said: Never Give Them Broad Access to Sensitive Data. 2026-07-12 DEFENSE · INDUSTRIAL OT CMMC Phase 2 Lands Nov 10. The OT Floor Can't Enforce the CUI Boundary 2026-07-12 AI GOVERNANCE · AGENTIC AI Microsoft Scout: Identity Is Not Runtime Enforcement 2026-07-12 AI GOVERNANCE · SHADOW AI SearchLeak (CVE-2026-42824): The Case for Pre-Submission Enforcement 2026-07-11 DEFENSE · FEDRAMP Anthropic Just Put Claude Inside FedRAMP High. That's Not the Same as Governing What It Does With Your CUI. 2026-07-08 AI GOVERNANCE · DEFENSE & AEROSPACE The EU AI Act Omnibus Deal Bought Defense OEMs 16 Extra Months. Here's What Didn't Change. 2026-07-06 DEFENSE · NIST NIST Is Building the Federal AI Security Rulebook on 800-53. Defense Primes Should Read the Overlays Now. 2026-07-04 AI GOVERNANCE · DEFENSE EU AI Act Enforcement Starts August 2. Defense Primes With EU Exposure Have 29 Days. 2026-07-03 DEFENSE · FEDRAMP FedRAMP Authorized the AI Service. It Didn't Authorize the Data Your People Put Into It. 2026-07-02 DEFENSE · AI GOVERNANCE The Pentagon Put Frontier AI on 1.3 Million Desks — Behind a Governed Boundary. Its Contractors Just Have a Browser Tab. 2026-07-01 DEFENSE · DFARS A ChatGPT Paste Can Trip the DFARS 72-Hour Clock. Most Defense Contractors Can't See It Happen. 2026-06-27 AI GOVERNANCE · EDGE AI Deterministic Governance for Forward-Deployed AI 2026-06-26 DEFENSE · AI GOVERNANCE The DoD Wants AI That Works Disconnected. Its Governance Has to Work Disconnected Too. 2026-06-26 FEDRAMP · DEFENSE AI FedRAMP's CR26 Is Live. The Rules for Selling AI to Defense Just Changed. 2026-06-25 DEFENSE · NDAA The FY2026 NDAA Bans 'Covered AI' From Defense Contracts. Banning a Tool Isn't the Same as Blocking It. 2026-06-24 DEFENSE · AI GOVERNANCE The DoD's New AI Strategy Says 'Speed Wins' and Strips Model Guardrails. The Data Boundary Is the Control That's Left. 2026-06-23 DEFENSE · AI GOVERNANCE GenAI.mil Will Put Frontier AI in 3 Million Hands at Every Classification Level. The Missing Control Is the Data Boundary. 2026-06-22 DEFENSE · AI GOVERNANCE The June 2 AI Executive Order Put CFAA Liability on AI Agents. Defense Systems Are on a 30-Day Clock. 2026-06-19 DEFENSE · EXPORT CONTROLS DoD Went AI-First. ITAR Can Treat What Your Engineer Pastes Into ChatGPT as a Deemed Export. 2026-06-19 DEFENSE · NDAA The Senate Wants AI Vendors Held to the Same Insider-Threat Rules as Cleared Defense Contractors 2026-06-18 DEFENSE · AGENTIC AI NSA and the Five Eyes Set the Bar for Agentic AI in Defense. The Controls Converge at the Data Boundary. 2026-06-18 DEFENSE & NATSEC · CMMC The Senate Just Proposed $50M in CMMC Grants for Defense Contractors. They Won't Close the AI Enforcement Gap. 2026-06-16 AI GOVERNANCE · DEFENSE CMMC Phase 2 Starts November 10, 2026. The CUI Your Workforce Pastes Into ChatGPT Is Already in Scope. 2026-06-15 NATSEC · AI GOVERNANCE Drata Just Declared AI Agent Governance a New Security Category. Here's What It Still Can't Do. 2026-06-13 DEFENSE · CMMC The DoD Has Until June 16 to Report on CMMC for AI. Here's What Defense Contractors Need to Govern Right Now. 2026-06-12 AI GOVERNANCE · DEFENSE & NATSEC The Pentagon Named Eight AI Vendors for Its Classified Networks. Governing the Model Isn't Governing the Data. 2026-06-11 AI GOVERNANCE · NATSEC & DEFENSE The Pentagon Has Until August 31 to Tell Congress How It Governs AI 'Data Leakage.' The Browser Boundary Is Where It Starts. 2026-06-10 NATSEC · AI GOVERNANCE NSPM-11 Just Locked Down the AI Models Warfighters Use. The Browser Data Boundary Is Still the Deployer's. 2026-06-09 EU AI ACT · COMPLIANCE EU AI Act Enforcement Starts August 2. Your Audit Trail Is Still Post-Hoc. 2026-06-09 NATSEC · CMMC Section 1513 Just Pulled AI Into the CMMC Perimeter. The Browser Layer Defense Contractors Still Own. 2026-06-08 AI GOVERNANCE · NATSEC & DEFENSE The NDAA Just Set a June 2026 Deadline for the Pentagon's AI Model Assessment Framework. The Browser Data Boundary Is Still on the Deployer. 2026-06-08 NATSEC · CMMC Vanta Just Added CMMC to Its Defense Playbook. It Still Can't See What Your Cleared Engineers Are Typing. 2026-06-05 AI GOVERNANCE · COMPETITIVE POSITIONING Portal26 Just Launched Free Claude Governance. The Browser Boundary Still Belongs to You. 2026-06-04 NATSEC · AI GOVERNANCE The Pentagon Built 100,000 AI Agents in Two Weeks. The ChatGPT Tab Next to GenAI.mil Is Still Wide Open. 2026-06-03 AI GOVERNANCE · NATSEC CISA Just Told Defense Sectors How to Adopt Agentic AI. The Data-Boundary Layer Still Belongs to You. 2026-06-02 AI GOVERNANCE · COMPLIANCE OpenAI Just Published Its Frontier Governance Framework. Here's the Layer Your Compliance Team Still Owns. 2026-06-01 CRITICAL INFRASTRUCTURE · NIST AI RMF NIST's Critical Infrastructure AI Profile Has a Shadow-LLM Gap 2026-06-01 COMPLIANCE · DEFENSE Vanta Just Automated CMMC Score Tracking. Your Employees Can Still Paste CUI Into ChatGPT. 2026-05-29 AI GOVERNANCE · AGENTIC AI OWASP Just Shipped the Top 10 for Agentic Applications. Here's the Data-Boundary Layer It Doesn't Cover. 2026-05-28 STATE AI LAWS · COMPLIANCE Texas's $200,000-Per-Violation AI Law Has Been Live Since January. Your Audit Trail Hasn't Caught Up. 2026-05-27 AI GOVERNANCE · COMPLIANCE Your AI Compliance API Is Only as Good as Your Enforcement Layer 2026-05-27 AI GOVERNANCE · FINANCIAL SERVICES The NAIC Just Sent AI Examiners Into 12 States. Does Your AIS Program Cover ChatGPT? 2026-05-26 AI GOVERNANCE · EDUCATION Your Faculty Just Ran an AI Detector. Did They Just Violate FERPA? 2026-05-23 AI GOVERNANCE · ENTERPRISE AI Anthropic's Claude Compliance API Is a Step Forward — Here's What It Still Doesn't Cover 2026-05-23 EU AI ACT · FINANCIAL SERVICES Credit Scoring Is High-Risk AI Under the EU AI Act. Financial Services Has Until the August 2 Deadline. 2026-05-23 EU AI ACT · AI GOVERNANCE The EU Just Published the Rules for Classifying Your AI as High-Risk. Here's What Enterprise Teams Need to Read Now. 2026-05-23 HEALTHCARE · HIPAA OpenAI for Healthcare Ships HIPAA BAA Support. Here's What the BAA Doesn't Cover. 2026-05-23 AI GOVERNANCE · INDUSTRY STANDARDS Why we joined OWASP's GenAI Security Project 2026-05-22 COMPLIANCE · EU AI ACT The EU's AI Chatbot Disclosure Rules Take Effect in 72 Days. Here's the Implementation Playbook. 2026-05-22 SHADOW AI · AI GOVERNANCE Microsoft E7 Governs Copilot. It Can't See ChatGPT, Claude, or Gemini. 2026-05-21 AI GOVERNANCE · ENTERPRISE SECURITY EY Is Rolling Out Microsoft E7 to 400,000 People. Here's the Governance Gap It Can't Cover. 2026-05-21 INDUSTRIAL / OT · AI GOVERNANCE Your Utility's Compliance Team Is Using ChatGPT. CIP-011 Doesn't Know That Yet. 2026-05-21 COMPETITIVE ANALYSIS · AI GOVERNANCE ServiceNow Calls Itself the AI Control Tower. It Can't See What Your Employees Are Typing. 2026-05-20 AI GOVERNANCE · ENTERPRISE SECURITY Databricks Just Shipped LLM Guardrails. Here's the Governance Gap It Doesn't Cover. 2026-05-20 REGULATORY · EU AI ACT The EU AI Act's High-Risk Classification Rules Finally Have Draft Guidelines. Comment Before the June 23 Deadline. 2026-05-20 AI GOVERNANCE · ENTERPRISE SECURITY Vanta Just Published the Rulebook for Runtime AI Agent Governance. Someone Still Has to Enforce It. 2026-05-19 FINANCIAL SERVICES · COMPLIANCE The OCC Just Rewrote the Book on Model Risk Management. For Banks Using AI, It Left the Most Important Chapter Blank. 2026-05-18 STATE AI LAWS · COMPLIANCE Colorado Repealed the First US State AI Law. The Replacement Takes Effect January 1, 2027. 2026-05-14 COMPETITIVE LANDSCAPE · ENTERPRISE AI GOVERNANCE Akamai Just Paid $205M for AI Usage Control. Here's What Enterprise Buyers Need to Know. 2026-05-14 FINANCIAL SERVICES · AI GOVERNANCE Anthropic Just Became Wall Street's AI Layer. That's a Governance Problem. 2026-05-13 EDUCATION · COMPLIANCE The COPPA Compliance Deadline Passed in April. Your AI Tools Probably Weren't Ready. 2026-05-12 AI GOVERNANCE · ENTERPRISE NIST's AI Risk Framework Is Being Revised. Your Governance Policy Isn't Ready. 2026-05-11 NATSEC · AI GOVERNANCE CMMC for AI Is Coming. Defense Contractors Who Wait for the Final Rules Will Repeat CMMC's Mistakes. 2026-05-11 HEALTHCARE · STATE AI LAWS Healthcare AI in 2026: The State Law Cascade Your Compliance Team Can't Ignore 2026-05-09 EU AI ACT · COMPLIANCE The EU AI Act's Rulebook for Chatbot Disclosure: What Enterprises Must Have in Place Before August 2. 2026-05-08 EU AI ACT · FINANCIAL SERVICES We Reported the EU AI Act Delay Had Collapsed. It Had Not — Annex III Moved to December 2027. 2026-05-07 COMPLIANCE · EU AI ACT The EU AI Act Deal That Landed Today: What Changed, What Didn't 2026-05-07 HEALTHCARE · HIPAA HIPAA Has Always Covered What Your Nurses Type Into ChatGPT. OCR Just Made That Much Harder to Ignore. 2026-05-06 EU AI ACT · SHADOW AI The Shadow AI Inventory Problem: What Every Enterprise Needs Before August 2, 2026 2026-05-06 FINANCIAL SERVICES · FINRA FINRA's 2026 Oversight Report Puts Agentic AI in the Compliance Crosshairs — What Broker-Dealers Need Now 2026-05-06 FINANCIAL SERVICES · NYDFS PART 500 NYDFS Says Your Employees' ChatGPT Sessions Are a Part 500 Compliance Problem 2026-05-05 EU AI ACT · REGULATORY COMPLIANCE The EU AI Act's August 2026 Deadline — and Why a Conditional Delay Isn't a Reprieve 2026-05-05 AI GOVERNANCE · ISO 42001 ISO 42001: The First Certifiable AI Governance Standard Is Now Showing Up in Enterprise RFPs 2026-05-04 CRITICAL INFRASTRUCTURE · NERC CIP NERC CIP Governs Your Grid. It Doesn't Govern What Your Engineers Type Into ChatGPT. 2026-04-30 FERPA · EDUCATION FERPA in the Age of ChatGPT: What Every School District's IT Leader Needs to Know 2026-04-29 AI GOVERNANCE · SHADOW AI Shadow AI is already bigger than shadow IT — and CISOs are burning out trying to manage it 2026-04-29 AI GOVERNANCE · SOC 2 / ISO 27001 What Your SOC 2 Auditor Will Ask About AI Governance in 2026 2026-04-29 AI GOVERNANCE · AGENTIC AI Vanta Says 80% of Enterprises Lack AI Agent Oversight — Here's What They Mean and What's Missing 2026-04-28 FINANCIAL SERVICES · AI GOVERNANCE NAIC's 2026 AI Evaluation Pilot Is Running — Here's What Financial Services Firms Need to Govern Now 2026-04-28 EU AI ACT · AGENTIC AI AI Agents Under EU Law: Why Agentic Systems Need a Different Compliance Architecture 2026-04-28 EU AI ACT · AI GOVERNANCE EU AI Act Art. 12 — your AI logs need to be tamper-evident, not just stored 2026-04-28 EU AI ACT · COMPLIANCE EU Digital Omnibus Trilogue Is Underway — What a Potential AI Act Deadline Shift Means for Your Controls 2026-04-28 HIPAA · HEALTHCARE HIPAA in the Age of ChatGPT: Why Healthcare Needs a Real-Time AI Governance Platform 2026-04-28 AI GOVERNANCE · RESPONSIBLE AI 74% of AI's Value Goes to 20% of Companies. The Differentiator Is Governance. 2026-04-27 AI GOVERNANCE · LLM POLICY Your AI Policy Is a Document. LLM Policy Enforcement Has to Happen at the Gateway. 2026-04-27 NIST · CRITICAL INFRASTRUCTURE NIST Just Released an AI Risk Framework for Critical Infrastructure. Here's What Operators Need to Know. 2026-04-27 NIST · AI GOVERNANCE NIST's Cyber AI Profile Working Sessions Start Tomorrow — Here's What Regulated Enterprises Need to Know 2026-04-27 FINANCIAL SERVICES · MODEL RISK SR 26-02 Replaced SR 11-7 — and Left Your GenAI Ungoverned 2026-04-27 STATE AI LAWS · COMPLIANCE The US State AI Law Patchwork: What Fortune 5000 Compliance Teams Must Know Now 2026-04-25 AI GOVERNANCE · FEDRAMP / IL5 The FedRAMP AI Authorization Rush Has a Policy Enforcement Gap