Insights · 1 publication

White Papers

Long-form publications for teams making a program-level decision. Printable, referenced and written to be circulated.

White paperOctober 15, 2026 · 18 min read

ISO/IEC 42001, the NIST AI RMF and the EU AI Act: a practitioner’s comparison

A management-system standard, a voluntary risk framework and a binding regulation. This white paper compares what each requires, where they overlap and where they diverge, and sets out how to build one AI governance program that serves all three.

Read

Where this thinking is applied.

More analysis.

All insights

Regulatory analysis10 min read

FedRAMP 20x: what changes for cloud providers, and what stays hard

Regulatory analysis9 min read

The EU AI Act after the Digital Omnibus: what moved, and what did not

Analysis11 min read

Payment-page scripts after PCI DSS 6.4.3 and 11.6.1: what assessors now expect

Speak with an expert

Talk to the people who wrote it.

Tell us what you are preparing for. A senior practitioner who has done this work will reply within one business day.

Speak With an Expert Request an Assessment