AI Supply Chain Security: Models, Datasets and the AI-BOM
AI supply chain security explained: model trojans, unsafe model files, provenance, signed artefacts, supplier contracts and the AI-BOM,…
Read More
EU AI Act Article 15: Meeting the Cybersecurity Requirement
EU AI Act Article 15 explained: what each paragraph requires, how its AI attack classes map to ISO…
Read More
AI Agent Security: Least Privilege for Systems That Act
AI agent security is a privilege problem. The ISO 27090 least-privilege model, controls for API and computer-use agents,…
Read More
Membership Inference and Model Inversion: Keeping Training Data Private
A membership inference attack reveals who was in your training data. How it and model inversion work, how…
Read More
Data Poisoning Attacks: Detection and Defence Under ISO 27090
A data poisoning attack changes what a model learns. How poisoned data gets in, why it is hard…
Read More
Prompt Injection Prevention: The ISO 27090 Approach
Prompt injection prevention explained: direct vs indirect injection, why filters fall short, the ISO 27090 controls, and how…
Read More
ISO 27090 vs ISO 42001 (and Where ISO 27001 Fits)
ISO 27090 vs ISO 42001 compared: what each standard covers, which one certifies, how they map control by…
Read More
ISO 27090: What the New AI Security Standard Asks You to Do
ISO 27090 explained: what the ISO/IEC AI security standard asks of you, the 12 threats it covers, how…
Read More
Is ISO 27701 Worth It? The Complete 2026 Cost-Benefit Case
Is ISO 27701 worth it in 2026? A standalone PIMS runs $10,000-$35,000 in year one, or $6,000-$20,000 added…
Read More
AS9100 vs AS9120: The Complete 2026 Decision Guide
AS9100 vs AS9120: AS9100D Rev D covers manufacturers, AS9120B Rev B covers distributors. Compare scope, clauses, audit days…
Read More
ISO 9001 Stage 1 Audit: The Complete 2026 Readiness Guide
The ISO 9001 stage 1 audit decides whether stage 2 goes ahead. What the auditor checks, the 8…
Read More
CMMC Gap Analysis: The Complete 2026 Step-by-Step Guide
A CMMC gap analysis scores all 110 Level 2 requirements before a C3PAO does. The six-step method, the…
Read More