Loading…
Tag
small-teams
14 posts with this tag.
Other tags:All postsacceptable-useaccess-controlagentic-aiai-acceptable-useai-adoptionai-agentsai-apisai-assistantsai-behaviorai-codingai-coding-toolsai-complianceai-contentai-copyrightai-costai-disclosure
·10 min read
ChatGPT Memory Upgrade (Dreaming V3): What It Means for Business Privacy and Data Governance
OpenAI''s Dreaming V3 memory update stores persistent user profiles across ChatGPT sessions including business plan users. What teams using ChatGPT need to govern, disable, and disclose under GDPR and CCPA.
·9 min read
Anthropic Says AI Could Soon Build Itself: What Recursive Self-Improvement Means for Your AI Governance Policy
Anthropic published research on June 4, 2026 showing Claude now writes 80% of its own codebase, and called for the ability to pause frontier AI development. What recursive self-improvement means for human oversight policies and agentic AI governance.
·10 min read
Shadow AI Policy for Small Teams: 2026 Detection and Governance Guide
Shadow AI adds $670K to breach costs, and small teams have the highest exposure. How to detect unsanctioned AI tools and govern them without an IT team.
·10 min read
California AB 2013 Compliance Guide: What AI Developers Must Disclose About Training Data (2026)
California AB 2013 requires generative AI developers to post 12 categories of training data information on their website before making a system available to Californians. Effective January 1, 2026. What to disclose, who is covered, and the xAI lawsuit that tried and failed to block it.
·10 min read
Miasma Worm and Phantom Gyp: The npm Supply Chain Attack That Bypasses Security Tools (June 2026)
A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.
·10 min read
Amazon KiroRank and Tokenmaxxing: How to Measure AI Adoption Without Creating Perverse Incentives
Amazon shut down its KiroRank AI leaderboard after employees gamed it by running fake tasks to inflate token counts. The right AI adoption metrics measure outcomes, not usage. A practical framework for small teams.
·10 min read
AI Support Chatbots with Account Actions Are a Security Risk: The Meta Instagram Incident and What Your Team Must Govern (2026)
Hackers social-engineered Meta AI into resetting passwords on high-profile Instagram accounts by simply asking. What the attack means for any team deploying an AI chatbot that can take account actions, and the 6 controls that prevent it.
·9 min read
Vetting AI Tools: How to Avoid Fake AI Apps and Malware (7-Step Check, 2026)
Searching for popular AI tools now surfaces fake malware sites and typosquatted packages at the top of results. A 7-step vetting check to confirm an AI tool is the real one before your team installs it.
·10 min read
Reviewing AI-Generated Pull Requests: A Review Policy and 9-Point Checklist (2026)
AI now writes a large share of the pull requests your team reviews. A copy-paste policy and 9-point checklist for reviewing AI-generated PRs, who is accountable, what to require, and where AI code fails review.
·11 min read
AI Spend Governance: 5 Token Budget Controls That Stop Runaway AI Bills (2026)
One company burned $500M on Claude in a month with no usage limits. Five copy-paste controls, usage caps, budget alerts, per-seat limits, a kill switch, and a monthly review, to keep token-based AI billing from blowing up your budget.
·18 min read
AI Governance for Small Teams: The Complete Guide (2026)
Everything a small team needs to govern AI: policy, risk assessment, vendor due diligence, sector compliance, monitoring, and red teaming. With templates and checklists.
·16 min read
EU AI Act Compliance for Small Teams: The Complete Guide (2026)
EU AI Act high-risk provisions (Annex III) are enforceable December 2, 2027 (extended from August 2026 by EU Digital Omnibus). What small teams must do: classify your AI systems, run conformity assessment, implement human oversight, and register high-risk systems.
Showing 12 of 14 posts.