Deploy Securely

This month, Steve and I talked about: - Tripadvisor's AI Telling Vacationers That Gruesome Horror Grottos Are Wonderful Holiday Retreats: https://futurism.com/artificial-intelligence/ai-whitewashing-bad-reviews-holiday-resorts - Illinois' new law SB 315: https://blog.stackaware.com/p/illinois-sb-315-iso-42001-internal-audit-ai-hyperscaler - Using Claude to analyze the human genome (and the privacy...

For the Aware AI Brief's June 2026 edition, Cameron and AI talked about: AI governance theater Levels of human-in-the-loop NSPM-11, EO 14409, and SB26-189

Steve and I talked about: - AI "​Psychosis​": https://techcrunch.com/2026/05/27/tech-ceos-are-apparently-suffering-from-ai-psychosis/ - A new White House ​EO​ on AI security: https://www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-artificial-intelligence-innovation-and-security/ - Meta's AI customer support chatbot ​failure​: https://futurism.com/future-society/meta-ai-support-b...

Cameron and I tackled these topics as well as: The EU AI Act AI-powered phishing Scoping ISO 42001 engagements

Steve and I connected on: - AI backlash: https://www.the74million.org/article/gen-z-increasingly-skeptical-of-and-angry-about-artificial-intelligence/ Federal AI Safety discussions: -- https://www.politico.com/news/2026/05/07/white-house-ai-oversight-00910837 -- https://www.linkedin.com/posts/allinpod_david-sacks-fda-for-ai-is-fake-news-but-activity-7459311154281103360-atOK -- https://thehill.com/...

Cameron and I talked about: - How large does a company have to be to recommend ISO 42001? - How do you avoid constant turnover of your AI inventory (you don't)? - What minimum documentation is needed per AI use case? (or before bringing on an AI system or vendor?) - What’s a realistic training and awareness program about AI for non-technical staff? - Are the following over- / under- / properly-hyp...

I talked with David Forman, CEO of Mastermind. The company is the only pure-play ISO certification body in the U.S. and was the first worldwide to issue an ISO 42001 certificate. We discussed: - Misconceptions (and reality) about the standard - How to scope the AIMS (and audit) - Traveling the world as a founder - Surveillance pricing (side quest)

I spoke with Danny Manimbo, Managing Principal at Schellman, who leads the firm’s AI governance and ISO assurance services. Danny and I talked about: What firms miss when preparing for ISO 42001 audits. How they continually improve and what metrics they track. The role that ultra-marathon running played in Danny’s personal and professional life.

Cameron Gaudet and I chatted on the Aware AI Brief about : How do you determine "high-risk"? (Additionally WHO determines a "high-risk" AI system?) What does "AI Bias" actually mean? What is being evaluated and measured? Is vibe coding "good"? Here is the reference database we discussed: https://reference.stackaware.com/

To kick off March 2026, Steve and I talked: - Anthropic's big moves when it comes to: -- ​Claude Code Security​: https://www.anthropic.com/news/claude-code-security -- Facing ​off​ against the Department of War: https://www.anthropic.com/news/statement-comments-secretary-war - The emergence of "​AI;DR​" as a phrase: https://futurism.com/artificial-intelligence/aidr-meaning - Citrini Research's doo...

I spoke with Kujtim Kryeziu, Co-Founder and CEO of Sentry Security, about: - How companies can tackle the biggest risks in their AI applications - What he sees as the biggest blind spots in heavily-regulated spaces - The future of AI red-teaming and the role for human experts Here's the AI Risk Readiness Kit we discussed: https://kit.stackaware.com/ And here's the Sentry Security Research Blog: ht...

I spoke with Oliver Patel, Head of Enterprise AI Governance at AstraZeneca, about how to run AI governance at global scale. We will cover: - How he builds AI governance that works across teams, tools, and regions - The EU AI Act, in plain language, and what enterprises must do next - Practical controls for AI risk, from model intake to ongoing monitoring - How compliance, legal, and business leade...

This month Steve and I talked about: - Clawdbot/Moltbot/OpenClaw security considerations: https://openclaw.ai/ - Rent-a-Human: https://rentahuman.ai - Nvidia's imperiled $100B investment in OpenAI: https://www.wsj.com/tech/ai/the-100-billion-megadeal-between-openai-and-nvidia-is-on-ice-aa3025e3 - Svedka's AI Super Bowl Ad: https://www.mashed.com/2091485/svedka-super-bowl-ad-2026-ai-hellscape/

In this inaugural episode of the Aware AI Brief, Cameron talks with Walter Haydock, founder of StackAware, about the practical aspects of AI governance. This series aims to bridge the gap between theoretical AI governance discussions and actionable, real-world practices. They discuss the importance of understanding a client's business objectives before implementing AI governance, identifying key s...

I spoke with Emil Bender Lassen, Standard Lead at the Artificial Intelligence Underwriting Company. We talked about: - What AIUC-1 requires from AI agents - How the standard drives insurance rate - Technical tips on preventing technical detail release and avoiding IP risk - The future of AIUC-1 and how it complements ISO 42001, NIST AI RMF, and other frameworks

I had the chance to speak with Patrick Sullivan. Patrick is the Vice President of Strategy and Innovation at A-LIGN. He brings over 25 years of expertise in cybersecurity, compliance, and risk management to the healthcare and life sciences sectors. We talked about: - How companies are complying with a web of AI regulation - Best practices for AI agent security and accountability - Genomic data sec...

To kick off the new year, Steve Dufour and I chatted about: Steve's expertise in copying and pasting hundreds of lines from the Health Insurance Portability and Accountability Act (HIPAA), because ChatGPT couldn't parse it. The late December 2025 ​Waymo outage​ . Cops Forced to ​Explain​ Why AI Generated Police Report Claimed Officer Transformed Into Frog. Manus AI's ​acquisition​ . AI hampering ​...

Steve Dufour and I had our monthly AI-related discussion, touching on: The Trump Administration EO ​preempting​ state AI regulation NVIDIA's H200 chip ​export​ " ​Brain Rot​ " in Large Language Models Crowdsourced data poisoning [this ​site​ is fake news] Apple's " ​Slow​ " AI Strategy as a positive

I recently spoke with Bezawit Sumner, CISO of CRISP Shared Services about: How to address stakeholder concerns when rolling out AI in sensitive spaces like healthcare Issues related to scoping and definitions being non-trivial for AI governance The evolving AI regulatory landscape and what companies can do to adapt

I was excited to host Rick Doten, a powerhouse in cybersecurity, to discuss: Key insights from his time as CISO at healthcare giant Centene The ethical nuances of AI governance in the space His experiences advising venture capital firms and cybersecurity startupsI was excited to host Rick Doten, a powerhouse in cybersecurity, to discuss: - Key insights from his time as CISO at healthcare giant Cen...

NVIDIA blog on killswitches:  https://blogs.nvidia.com/blog/no-backdoors-no-kill-switches-no-spyware/ Colorado Legislative AI Task Force Report: https://leg.colorado.gov/sites/default/files/images/report_and_recommendations-accessible_1_0.pdf SB-205 opposition: https://gazette.com/government/colorado-mayors-oppose-ai-regulation-law/article_0abe652f-a60a-583e-a138-e73fa45e9a03.html AI Stethoscope:...

Federal AI action plan:  https://www.ai.gov/action-plan Tool-squatting attack paper: https://arxiv.org/pdf/2504.19951 Burning Glass Institute report:  https://static1.squarespace.com/static/6197797102be715f55c0e0a1/t/6889055d25352c5b3f28c202/1753810269213/No+Country+for+Young+Grads+V_Final7.29.25+%281%29.pdf AIUC: https://aiuc.com

Walter kicks off a recurring series with Steve Dufour, talking about: - Trump's "Big Beautiful Bill" moving through the Senate and how a key AI-related provision was just removed. - Some key court decisions related to generative AI training on copyrighted material - ISO/IEC 42005:2025, which gives guidance on AI impact assessments - Ways to (avoid) automating yourself out of a job

The basics of healthcare can often be a nightmare: - Finding the right doctor - Setting up and appointment - Getting simple questions answered While these things might seem like an inconvenience, on the grand scale they cost a lot - of money, and unfortunately, lives. That’s why the Embold Virtual Assistant (EVA) is such a breakthrough. A generative AI-powered chatbot with access to up-to-date doc...

On this episode of the Deploy Securely podcast, I spoke with Kenny Scott, Founder and CEO of Paramify. Paramify gets companies ready for the U.S. government's Federal Risk and Authorization Management Program (FedRAMP). And in this conversation, we talked about: - Paramify "walking the walk" by getting FedRAMP High authorized - How AI is impacting FedRAMP authorizations - The future of AI regulati...