Briefings for people who have to decide
We publish practitioner notes rather than commentary. The first briefings are being prepared and will appear here under the categories below.
What we will publish
Regulatory briefings
Short, practical notes on DORA, NIS2, GDPR, the EU AI Act and payment regulation, written for executives who have to decide something.
Cyber and digital risk
Control design, risk quantification, resilience testing and third party assurance, from the perspective of people who run these programmes.
AI governance
Operating models, control frameworks and readiness for organisations adopting automated and generative systems.
Payments and fraud
PCI DSS, payment security, fraud control design and digital risk in payments, EMI and PSP environments.
Nothing is published yet, and we would rather say that plainly than fill the page. If a specific regulatory question is pressing, ask us directly and we will answer it properly.