I talked with David Forman, CEO of Mastermind. The company is the only pure-play ISO certification body in the U.S. and was the first worldwide to issue an ISO 42001 certificate. We discussed:

- Misconceptions (and reality) about the standard

- How to scope the AIMS (and audit)

- Traveling the world as a founder

- Surveillance pricing (side quest)

I spoke with Danny Manimbo, Managing Principal at Schellman, who leads the firm’s AI governance and ISO assurance services. Danny and I talked about:

• What firms miss when preparing for ISO 42001 audits.
• How they continually improve and what metrics they track.
• The role that ultra-marathon running played in Danny’s personal and professional life.

Cameron Gaudet and I chatted on the Aware AI Brief about:

• How do you determine "high-risk"? (Additionally WHO determines a "high-risk" AI system?)

• What does "AI Bias" actually mean? What is being evaluated and measured?
• Is vibe coding "good"?

Here is the reference database we discussed: https://reference.stackaware.com/

To kick off March 2026, Steve and I talked:

- Anthropic's big moves when it comes to:
-- ​Claude Code Security​: https://www.anthropic.com/news/claude-code-security
-- Facing ​off​ against the Department of War: https://www.anthropic.com/news/statement-comments-secretary-war

- The emergence of "​AI;DR​" as a phrase: https://futurism.com/artificial-intelligence/aidr-meaning

- Citrini Research's doomsday ​report​: https://www.citriniresearch.com/p/2028gic

- More AI-generated ​slop: https://futurism.com/artificial-intelligence/ai-film-pulled-from-amc-theaters

I spoke with Kujtim Kryeziu, Co-Founder and CEO of Sentry Security, about:

- How companies can tackle the biggest risks in their AI applications
- What he sees as the biggest blind spots in heavily-regulated spaces
- The future of AI red-teaming and the role for human experts

Here's the AI Risk Readiness Kit we discussed: https://kit.stackaware.com/

And here's the Sentry Security Research Blog: https://blog.sentry.security/

I spoke with Oliver Patel, Head of Enterprise AI Governance at AstraZeneca, about how to run AI governance at global scale.

We will cover:

- How he builds AI governance that works across teams, tools, and regions
- The EU AI Act, in plain language, and what enterprises must do next
- Practical controls for AI risk, from model intake to ongoing monitoring
- How compliance, legal, and business leaders can share one playbook
- What he's learning while writing the book "Fundamentals of AI Governance"

This month Steve and I talked about:

- Clawdbot/Moltbot/OpenClaw security considerations: https://openclaw.ai/

- Rent-a-Human: https://rentahuman.ai

- Nvidia's imperiled $100B investment in OpenAI: https://www.wsj.com/tech/ai/the-100-billion-megadeal-between-openai-and-nvidia-is-on-ice-aa3025e3

- Svedka's AI Super Bowl Ad: https://www.mashed.com/2091485/svedka-super-bowl-ad-2026-ai-hellscape/

In this inaugural episode of the Aware AI Brief, Cameron talks with Walter Haydock, founder of StackAware, about the practical aspects of AI governance.

This series aims to bridge the gap between theoretical AI governance discussions and actionable, real-world practices.

They discuss the importance of understanding a client's business objectives before implementing AI governance, identifying key stakeholders, and managing risks around intellectual property and shadow AI.

00:00 Introduction and Greetings
00:59 Introducing the Aware AI Brief Series
02:02 Starting AI Governance: First Steps
02:33 Understanding Client Needs and Objectives
06:02 Identifying Key Stakeholders
08:38 Intellectual Property and AI
15:51 Managing Shadow AI
22:23 Conclusion and Call for Questions

Blog post about IP risk with AI: https://blog.stackaware.com/p/intellectual-property-risk-compliance-indemnification-copyright-artificial-intelligence-governance

I spoke with Emil Bender Lassen, Standard Lead at the Artificial Intelligence Underwriting Company.

We talked about:

- What AIUC-1 requires from AI agents

- How the standard drives insurance rate

- Technical tips on preventing technical detail release and avoiding IP risk

- The future of AIUC-1 and how it complements ISO 42001, NIST AI RMF, and other frameworks

I had the chance to speak with Patrick Sullivan. Patrick is the Vice President of Strategy and Innovation at A-LIGN. He brings over 25 years of expertise in cybersecurity, compliance, and risk management to the healthcare and life sciences sectors.

We talked about:

- How companies are complying with a web of AI regulation
- Best practices for AI agent security and accountability
- Genomic data security and AI