Blog
Quebec Law 25 and Generative AI: What to Settle Before Production
Quebec Law 25 applies to every AI system that handles personal information. Seven obligations, and the CAI decisions that show how they are enforced.
Why Use NIST OSCAL? Compliance as Data, Not Documents
What NIST OSCAL is, why machine-readable controls beat Word and spreadsheet compliance, and how to adopt it without stalling your security program.
What Should a Board Ask Before Approving an AI Coding Tool Rollout?
Seven questions directors should ask before approving an AI coding tool rollout: evidence of value, bounded access, accountability, and stop conditions.
Why We Started CODACON
AI is reshaping security — how organizations detect threats, build software, and manage risk. CODACON exists to close the gap between AI capability and security practice.