Risk Management and Compliance
Risk registers and assessments
Risk Registers and Assessments
- Accept the Risk or Delay the Launch: Comparing the Options
- How to Track Model and Prompt Changes in Your Risk Register
- How to Write an AI Risk Register for a Small Team
- What to Do When the Review Finds a Risk You Cannot Fix
- A Decision Record Template for Shipping With a Known Gap
- A Model Change Log for Finance: What to Record and Why
- Automating a Risk Review When a Version Is Promoted
- Owners and Review Dates for Every Row in Your AI Risk Register
- All of Risk registers and assessments
Third-party and vendor risk
Third-Party and Vendor Risk
- Dependency Review: A Checklist for Every Upgrade
- Vetting an Inference Provider's SDK Before You Add It
- Automating Dependency Review in CI: Checks, Gates and Failures
- Choosing an Inference Provider for Sensitive Agent Data
- Pinning Versus Floating: A Decision Rule for Production Deps
- Reading a Data Processing Agreement Against Your Feature
- Reading a Vendor SDK's Changelog for Breaking Changes
- Reading a Vendor SDK's Retry and Timeout Defaults Before You Ship
- All of Third-party and vendor risk
Policies and controls
Policies and Controls
- Turning a Compensating Control Into a Test That Fails CI
- Writing a Compensating Control With a Named Owner and Review Date
- Writing the Policy Rule That Catches What the File Missed
- A Lockfile Policy for Projects That Call Models Directly
- Choosing the Trigger That Sends a Feature Back Into Review
- From Checklist to Pipeline: Risk Register to CI Jobs
- How to Write a Compensating Control an Auditor Will Accept
- Keeping Automated Controls Owned Through Staff Changes
- All of Policies and controls
Audit and evidence
Audit and Evidence
- How to Prove Each Control Works: Test Cases for Your Risk Map
- A Change Log Entry That Points to the Exact Model and Prompt
- A Log Line for Every Policy Decision: Fields and Retention
- Control Tests That Report Why They Failed, Not Just Pass or Fail
- Coverage Gaps in Your Control Tests: How to Find and Report Them
- How to Turn a Checklist Item Into a Test That Fails CI
- How to Write a Change Log for an AI Agent
- Setting a Time and Money Budget for Your Control Test Suite
- All of Audit and evidence