Three Regulators, Three Continents, One 72-Hour Deadline Nobody Is Ready For
Three regulators, on three different continents, converged on almost the same number this year, entirely independently. Washington set 72 hours.
September 2026
93% Have Been Breached by Vulnerable AI Code. 30% Still Ship It Anyway.
Seventy per cent of developers believe AI-generated code carries more vulnerabilities than the code they write themselves. Thirty per cent
SAP Told Its Customers Which AI to Use. Three Per Cent Listened.
By February 2026, DSAG’s own Investment Report had already surfaced the gap SAP would spend the rest of the year
Your AI Steering Committee Meets Monthly. Your AI Ships Weekly.
Most AI governance committees meet on a monthly or quarterly cadence. Most AI systems do not wait for them. Anthropic’s
EU Cyber Resilience Act – Reporting Duty Begins on an Unfinished Platform
On 11 September 2026, the European Union’s Cyber Resilience Act began requiring manufacturers of products with digital elements to report
The Difference Between an AI Pilot and an AI Programme Is Who Gets Blamed When It Fails.
A pilot has no name attached to its failure. A programme does. That is the entire distinction, and almost nobody
A Tenfold Attack Surge in London, a Governance Mandate in Abu Dhabi
In January to May 2026, UK healthcare providers logged 264,000 attack events, against 27,000 for the whole of 2025. That
Pre-Mortem: The UN’s Global Dialogue on AI Governance
On 6 July 2026, the United Nations opened its first General Assembly-mandated forum on AI governance in Geneva. All 193
Patience Is Not Passive. It Is the Hardest Active Choice Most People Never Make
Patience gets treated as the absence of action: the thing you’re doing while you wait for something else to happen.
Governance Fatigue Is Real, and It’s Killing the Governance That Matters
Every governance failure gets the same response: add a committee. Nobody ever asks which of the five committees already in