Tag: GRC
All the articles with the tag "GRC".
-
Your First Security Hire at an AI Startup: The First 90 Days, With Receipts
Published: at 10:20 AMA long, opinionated 90-day plan for the first security and compliance hire at an AI-native company. Built from real incidents, the 2026 breach data and the frameworks people actually use, with a worked threat model and a prompt you can paste into your own agent.
-
SOC 2 for AI Products: What Auditors Will Ask About Your LLM Features (Late 2026 Edition)
Published: at 10:10 AMHow SOC 2 applies to products with LLM features as of November 2026: what the criteria say, what the AICPA published this autumn about AI, how LLM providers are treated, how ISO 42001, the NIST AI RMF and the EU AI Act fit, and a prompt you can paste into your own agent.