How I Became an AI Governance Lawyer: From Contracts to AI Risk Management
People often ask me why I call myself an AI First Fractional General Counsel. The answer did not begin with AI. It began with contracts. Looking back, I realise that contracts became my gateway into AI Governance. That journey eventually changed not just what I do, but how I think about practising law. The Question […]
ISO 27001 Certification Path for Information Security Professionals
US information security teams are under more regulatory pressure than at any point in the last decade. Between CMMC 2.0 enforcement timelines, NIST CSF 2.0 adoption, and the growing expectation from enterprise clients that vendors hold verifiable security credentials, the question is no longer whether professionals should pursue ISO 27001 certification it is which credential […]
ISO 27001 Certification Path for GRC and Compliance Professionals
Federal contractors are scrambling. With CMMC 2.0 enforcement now underway and NIST CSF 2.0 reshaping how organizations document risk, compliance teams across the US are realizing that a checklist-based approach to information security no longer holds. ISO 27001:2022 certification has moved from “nice to have” to a credible differentiator and for GRC and compliance professionals, […]
ISO 27001 Internal Auditor Certification for Internal Audit Teams
US organizations certified or pursuing ISO/IEC 27001:2022 face a requirement that often catches audit teams off-guard: internal audits must be conducted by competent, impartial auditors, and Clause 9.2 explicitly makes that a compliance condition, not a recommendation. For information security and GRC professionals already managing NIST CSF, CMMC, and HIPAA obligations, adding a structured ISMS […]
ISO 42001 vs IEEE 7000: Understanding Two Key Standards for Responsible AI Governance
The U.S. federal government issued more than 50 AI-related executive orders and policy directives between 2021 and 2025. Enterprises that waited for regulatory clarity found themselves racing to catch up. Two standards have emerged as anchors for organizations serious about responsible AI governance: ISO/IEC 42001, the internationally recognized AI Management System standard, and IEEE 7000, […]
ISO/IEC 42001 for Startups: A Roadmap to Responsible AI
Sixty-two percent of startup investors now conduct AI ethics due diligence before committing capital a figure that barely registered two years ago. ISO/IEC 42001, the world’s first international standard for AI management systems, has become the benchmark those investors reference. For startups building AI-powered products, the question is no longer whether to adopt a governance […]
What ISO 42001 Solves and Why It Matters for U.S. Organizations in 2026
The first wave of U.S. enterprise AI deployments has produced something most boards did not expect: a quiet, expensive backlog of unanswered questions. Whose model is making which decision? What data trained it? Who signs off when it changes? In a January 2026 announcement, CrowdStrike became one of the first cybersecurity vendors to certify under […]
Documentation Required Under ISO/IEC 42001: Building Trustworthy AI
A single RFP can now ask for ISO/IEC 42001 evidence in the same breath as SOC 2 and HIPAA. That shift, happening quietly across US enterprise procurement through late 2025 and into 2026, is the real reason AI governance leads are suddenly knee-deep in documentation. The standard itself runs to roughly 40 pages, but the […]
AIGP vs ISO 42001: Which Should Lawyers Choose?
By mid-2026, the EU AI Act will hit full enforcement for high-risk systems, Colorado’s AI Act takes effect on February 1, 2026, and Texas, California, and New York already have AI-specific laws on the books. For lawyers in the United States, this is no longer a theoretical governance problem. Clients are asking hard questions about […]