Deploy Securely

Deploy Securely

Home
Notes
Services
Case studies
Topics
About

Compliance and regulation

Managing intellectual property risk with AI
A realistic set of principles.
 • 
Walter Haydock
ISO 42001 vs. HITRUST AI security certification: data management requirements
Comparing requirements from two emerging AI standards.
 • 
Walter Haydock
ISO 42001 vs. HITRUST AI security certification
The former is very broad and the latter quite narrow.
 • 
Walter Haydock
New York State Department of Financial Services guidance on AI security and governance
What a key regulator is focused on.
 • 
Walter Haydock
3 ways ISO 42001 can help AI-powered companies comply with California's training data transparency bill (AB-2013)
California asserts global jurisdiction over AI.
 • 
Walter Haydock
Navigate Obamacare nondiscrimination regulations for healthcare AI customers with ISO 42001
Last week an AI-powered health-tech startup founder flagged this HUGE compliance issue:
 • 
Walter Haydock
I read (and gave feedback on) the entire HITRUST AI Security Specification so you don't have to
A highly-focused cybersecurity certification for those developing AI systems.
 • 
Walter Haydock
EU AI Risk Categorizations
The law creates a lot of new terminology...and requirements.
 • 
Walter Haydock
ISO 42001 and U.S state/local AI regulations
Not a silver bullet, but the best chance for comprehensive compliance.
 • 
Walter Haydock
How NOT to write an AI policy
You might be better off not having one than doing this.
 • 
Walter Haydock
3 AI governance frameworks business leaders can use to accelerate sales and avoid regulatory fines
NIST AI RMF, EU AI Act, and ISO 42001
 • 
Walter Haydock
Compliance and AI: 3 quick observations
How to win with AI while keeping regulators and auditors happy
 • 
Walter Haydock
© 2025 StackAware
Substack
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great culture