Field notes on AI in business
Practical writing on AI, automation and the day-to-day work of running a business. From the team that builds and runs AI systems.
AI compliance
The Vendor Security Questionnaire That Actually Catches AI Risk
The Vendor Security Questionnaire That Actually Catches AI Risk If you have sent out a SIG questionnaire in the last twelve months and felt confident it covered your AI vendor exposure, I have some...
Basel IsmailMay 31, 2026
AI compliance
Why Your Compliance Calendar for 2026 Is Already Behind
Why Your Compliance Calendar for 2026 Is Already Behind If your compliance calendar for 2026 still looks like a lightly edited copy of 2025, you have a problem. The regulatory landscape shifting...
Basel IsmailMay 31, 2026
AI compliance
Learning Management Systems With AI and the Vendor Due Diligence Update
Learning Management Systems With AI and the Vendor Due Diligence Update Every major LMS vendor shipped AI features in 2023 and 2024. Canvas added AI-assisted rubric generation and a student-facing...
Basel IsmailMay 30, 2026
AI compliance
Higher Education Vendor Risk Management for AI Tools: A 2026 Framework
Higher Education Vendor Risk Management for AI Tools: A 2026 Framework Universities are adopting AI tools at a pace that their governance structures were never designed to handle. A 2024 EDUCAUSE...
Basel IsmailMay 30, 2026
AI compliance
Community Colleges and the Resource Constrained AI Compliance Posture
Community Colleges and the Resource Constrained AI Compliance Posture Community colleges serve roughly 6.8 million students across the United States, according to the American Association of...
Basel IsmailMay 30, 2026
AI compliance
Research University CMMC Programs and the Federal Research Compliance Picture
Research University CMMC Programs and the Federal Research Compliance Picture CMMC compliance is hard enough for defense contractors with relatively contained IT environments. Now apply those same...
Basel IsmailMay 30, 2026
Get the next article by email
One short email when something new goes up. Practical, no fluff, written by the people who build.
Free. Unsubscribe any time. Privacy policy
AI compliance
SOC 2 Type II for AI Vendors: What Buyers Should Demand to See
SOC 2 Type II for AI Vendors: What Buyers Should Demand to See You are evaluating an AI vendor. They hand you a SOC 2 Type II report and smile like they just passed the bar exam. You flip through it,...
Basel IsmailMay 30, 2026
AI compliance
ISO 27001 and ISO 42001: The AI Information Security Management Standard Pair
ISO 27001 and ISO 42001: The AI Information Security Management Standard Pair ISO 42001 was published in December 2023, and it filled a gap that had been widening for years. Organizations deploying...
Basel IsmailMay 30, 2026
AI compliance
International Student Data, GDPR, and the AI Cross-Border Question
International Student Data, GDPR, and the AI Cross-Border Question U.S. universities enrolled roughly 1.1 million international students in the 2023-2024 academic year, according to the Institute of...
Basel IsmailMay 29, 2026
AI compliance
AI in Admissions and the Disparate Impact Question
AI in Admissions and the Disparate Impact Question Universities have been using algorithmic tools in admissions for longer than most people realize. Predictive models that estimate enrollment...
Basel IsmailMay 29, 2026
AI compliance
Faculty Research Data, IRB Approval, and AI Processing
Faculty Research Data, IRB Approval, and AI Processing If you work at a research university, you already know that Institutional Review Boards exist to protect human subjects. What you might not have...
Basel IsmailMay 29, 2026
AI compliance
Student Health Centers, FERPA-HIPAA Boundary, and AI Tools
Student Health Centers, the FERPA-HIPAA Boundary, and AI Tools University student health centers sit in one of the most genuinely confusing regulatory overlaps in U.S. data privacy law. The records...
Basel IsmailMay 29, 2026
1,319 articles