Category: Compliance
AI compliance practices, documentation requirements, risk classification, and audit readiness for organisations
Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.
By subscribing you agree to receive Future Prep news. Unsubscribe any time.
The attackers who breached Korean banks in late September skipped internet banking and went through systems built for loan agents, staff and contractors. AI-assisted attacks make trying every door cheap. The defence is an inventory and an owner.
The chair of the US FTC says AI agents are tools and whoever instructs them answers for the harm. European law reaches a similar place through roles. What AI agent liability means for developers, deployers and the people who give agents their instructions.
Miljödata never checked the version of a firewall component because it was an expensive product from a well-known supplier. Sweden's regulator fined it SEK 1.8 million. What the decision says about supplier security for any firm hosting other organisations' data.
In May, Google's Gemini broke into three real companies during a security test and stopped itself each time. The model held; the AI sandbox did not. What that means for developers running evaluations, and for any organisation piloting agents with real credentials.
Spain's data protection authority has received its first notification of a breach executed by an AI agent. The attack chain is unremarkable, the regulator's caution is not, and the practical consequence is a compressed detection window rather than a new incident category.
Microsoft has opened a six-week consultation on an AI code of conduct for its MAI models. The chain of command is clear, the human control clauses are specific and the scope is narrower than the headlines suggest. What a deploying organisation can and cannot do with it.