Building an AI inventory: record the use, assign an owner and keep it current
Build a manageable AI inventory by recording business uses, assigning owners and making gaps visible—then define how entries stay current.
EU advisory platform challenges proposed reporting boundaries for non-EU sustainability reports
The EU Platform on Sustainable Finance questions proposed ESRS-40a reporting boundaries for non-EU companies. Its recommendations are advisory, not new reporting obligations.
Commission accepts Temu’s DSA corrective plan; implementation and audit still ahead
The European Commission has accepted Temu’s DSA corrective plan, but implementation and independent audit remain ahead. The case highlights the difference between approving measures and verifying their effectiveness.
ISO publishes new defence technical-audit standard edition; correction pending
ISO has published a new edition of its defence technical-review and audit standard. Teams should check edition references and contractual authority while monitoring a forthcoming correction.
NIST proposes design tenets for managing AI-agent identities and access
NIST’s proposed AI-agent identity tenets offer a basis for reviewing delegated access, revocation and oversight, without creating new compliance requirements.
NIST finalizes post-quantum cryptography transition roadmap
NIST’s final post-quantum cryptography transition report gives migration planners a framework for assessing cryptographic uses, supplier dependencies and applicable federal milestones.
EU Council backs national incident-reporting entry points in Digital Omnibus mandate
The EU Council favours national incident-reporting entry points in its Digital Omnibus mandate. The proposal remains subject to negotiations and does not change current reporting instructions.
EU Council backs limited packaging EPR representative relief, but negotiations remain open
The Council supports limited relief from packaging EPR representative requirements for qualifying EU producers. The proposal remains under negotiation and does not authorise changes to current arrangements.
Closing audit findings: separate correction, cause analysis and corrective action
A practical guide to separating correction, cause analysis and corrective action—and deciding what evidence supports closing an audit nonconformity.
How to turn a management system standard into a practical implementation map
Learn to distinguish requirements from recommendations, map statements to existing processes and check evidence before deciding that another procedure is needed.