// Blog
AI security and AI governance, explained
Plain-English guides to how AI systems get attacked and how AI is regulated, for the teams who have to deal with both.
All articlesAI SecurityAI Governance
-
What Is AI Governance? A Plain-English Guide for Businesses
AI governance is how an organisation decides which AI it uses, who is accountable for it, and how its risks are controlled. Here’s what it covers…
-
The EU AI Act Explained: What Businesses Need to Know
The EU AI Act regulates AI by risk level and applies to companies outside the EU too. Here’s who it covers, the key dates, the obligations…
-
EU AI Act Risk Categories Explained, With Examples
Unacceptable, high, transparency and minimal risk: how the EU AI Act sorts AI systems, with real examples of each and how to work out where yours…
-
EU AI Act Prohibited Practices: The 8 Banned Uses of AI (10 From December 2026)
Since February 2025, eight AI practices are banned in the EU, with two more from December 2026, and fines up to €35 million or 7% of…
-
The EU AI Act AI Literacy Requirement (Article 4): What It Means for Your Company
Since February 2025, companies that use AI must take steps to build their staff’s AI literacy. The 2026 Digital Omnibus softened the wording but kept the…
-
Provider vs Deployer Under the EU AI Act: Which One Are You?
Your obligations under the EU AI Act depend on your role. Here’s the difference between a provider and a deployer, with examples and the cases where…
-
NIST AI Risk Management Framework (AI RMF) Explained
The NIST AI RMF is a free, voluntary framework for managing AI risk, built around four functions: Govern, Map, Measure and Manage. Here’s how it works…
-
ISO/IEC 42001 Explained: The AI Management System Standard
ISO/IEC 42001 is the first certifiable international standard for managing AI. Here’s what an AI management system is, what the standard requires and whether certification is…
-
How to Write an AI Acceptable Use Policy (With a Simple Outline)
An AI acceptable use policy tells staff which AI tools they may use, what data they must never share and who to ask. Here’s what to…
-
How to Build an AI Inventory (Step by Step)
An AI inventory is a list of every AI system you build, buy or use. It’s the first step of AI governance and EU AI Act…
-
What Is AI Security? The Key Risks Explained
AI security means protecting AI systems from attack and misuse, and protecting your organisation from the new risks AI brings. Here are the main threats and…
-
What Is Prompt Injection? Direct vs Indirect Attacks Explained
Prompt injection tricks an AI system into ignoring its instructions. Here’s how direct and indirect prompt injection work, real-world scenarios, and how to reduce the risk.
-
OWASP Top 10 for LLM Applications Explained
The OWASP Top 10 for LLM Applications lists the most critical security risks in apps built on large language models. Here’s each risk in plain English,…
-
AI Chatbot Data Leakage: How It Happens and How to Prevent It
Sensitive data leaks through AI chatbots in two directions: staff pasting it in, and chatbots giving it out. Here are the common leak paths and practical…
-
What Is an LLM Jailbreak? What Security Teams Should Know
A jailbreak tricks a large language model into ignoring its safety rules. Here’s how jailbreaks work, how they differ from prompt injection, and how to limit…
-
Data Poisoning Explained: How Attackers Corrupt AI Models
Data poisoning manipulates the data an AI model learns from, to plant backdoors, biases or errors. Here’s how it works, where it happens in practice and…
-
AI Supply Chain Risks: Models, Datasets, Packages and Vendors
Most AI is built from third-party parts: pre-trained models, datasets, libraries, plugins and APIs. Here are the supply chain risks in each layer and how to…
-
AI Agent Security: The Risks of Giving AI Tools and Permissions
AI agents don’t just answer questions. They read email, browse, call APIs and take actions. Here are the security risks that creates and how to deploy…
-
Shadow AI: What It Is and How to Manage It
Shadow AI is staff using AI tools the organisation hasn’t approved or doesn’t know about. Here’s why it happens, the risks it creates and how to…
-
How to Red Team an AI Chatbot: A Beginner’s Guide
Red teaming tests your AI chatbot the way a determined user or attacker would, before launch. Here’s a practical, beginner-friendly process: scope, test areas, scoring and…