Deploy Securely

Steve and I talked about:

- Election Day and OpenAI's efforts to control political content: https://openai.com/index/election-safeguards-2026/
- OpenAI's post mid-term lobbying plans: https://www.yahoo.com/news/politics/articles/behind-curtain-openais-post-election-134306408.html
- Anthropic's warning that AI models may soon be capable of self-replication: https://www.reuters.com/business/ai-models-may-soon-self-replicate-without-access-data-centers-anthropic-warns-2026-10-13/
- Amazon's decision to block Muse while promoting its own AI agent: https://www.inc.com/jason-aten/amazon-just-said-ai-agents-dont-hurt-its-ad-business-so-why-did-it-block-muse/91428840
- Anthropic's new AI abuse policy and the debate over AI personhood: https://www.cnet.com/tech/services-and-software/anthropic-cruel-claude-ai-model-abuse/
- Lobbying of the Vatican by Anthropic: https://futurism.com/artificial-intelligence/anthropic-lobbying-vatican
- The release of ISO 27090 and its implications for AI governance and security: https://www.iso.org/standard/27090
- StackAware's AI Governance Database: https://reference.stackaware.com/

Cameron and I talk about:

• How to get executives engaged in management reviews.
• Managing shadow AI when organizations lack full visibility.
• Testing whether autonomous AI agents can access sensitive data.
• Preventing vendors from enabling AI features without prior approval.
• Accepting residual AI risk when uncertainty remains.
• Governing workflows involving multiple AI agents.

Steve and I chat about:

• The “Super Intelligence Force (SIF)”: https://truthsocial.com/@realDonaldTrump/posts/117382616783706638
• The White House Accord on SuperIntelligence: https://d3i6fh83elv35t.cloudfront.net/static/2026/09/accord.pdf - Claude diary and police investigation: https://cybernews.com/ai-news/claude-diary-police/
• OpenAI firing safety researchers: https://www.wsj.com/tech/ai/openai-parts-ways-with-researchers-who-allegedly-shared-confidential-information-aebac528
• A Tennessee woman seeking $10M in damages due to AI error: https://www.yahoo.com/news/us/articles/tennessee-woman-seeks-10m-damages-120400065.html?guccounter=1
• AI fueling healthcare billing and insurance cost battles: https://foxbaltimore.com/news/nation-world/ai-is-fueling-a-new-battle-over-health-care-costs-medical-billing-insurance-premiums-coding-wars

I chatted with Mario Platt, Chief Information Security Officer at LastPass (and a StackAware client) about:

- How to balance AI deployment speed with security and compliance
- Blind spots companies face when using AI
- Adapting to regulatory requirements

and a bunch more!

Here is the LastPass 2026 State of AI and SaaS Security Report that Mario mentioned: https://www.lastpass.com/resources/reports/state-of-ai-and-saas-security-2026

For the September 2026 Aware AI Brief, Cameron and I talked about:

• How to turn AI policies into enforceable controls
• What organizations should log with AI agents
• What should trigger a review their permissions
• What risk thresholds should justify ending a vendor relationship
• Who should have authority to accept residual AI risk
• ​Transparency vs. explainability​
• AI slop chic vs. plain old AI slop

For September's round-up, Steve and I chatted about:

- Iran Integrates Artificial Intelligence into Air Defense Systems: https://wanaen.com/iran-integrates-artificial-intelligence-into-air-defense-systems/
- OpenAI’s call for collective action on cyber defense: https://openai.com/collective-cyberdefense/
- Artificial intelligence making scams harder to detect, experts warn: https://www.msn.com/en-us/news/other/artificial-intelligence-making-scams-harder-to-detect-experts-warn/ar-AA2blFZ1
- OpenAI ending model access for Cursor after acquisition by SpaceX: https://www.cnbc.com/2026/08/29/openai-cursor-spacex-model-access.html
- ‘Superhuman’ AI tool spots heart disease in less than 2 seconds: https://www.theguardian.com/technology/2026/aug/31/superhuman-ai-tool-spots-heart-disease

I recently had the chance to speak with Dan VanBeek, who runs governance, risk, and compliance at MarketAxess, a publicly-traded financial technology firm. It is also a StackAware customer. We chatted about how:

• Managing different AI modalities can create challenges for GRC teams.
• What the best practices are for dealing with tool and system requests.
• When it makes sense to seek help with AI governance.

For the August 2026 Aware AI Brief, Cameron and I talked about:
- What makes an AI inventory useful and current.
- How ISO 42001 works when organizations switch models.
- Governing third-party AI tools you do not fully control.
- AI transparency, disclosures, and defining "trustworthy" AI.
- Which AI risk topics are over-, properly-, or under-rated.

Here are the resources we discussed:
- AI risk readiness kit: https://kit.stackaware.com/
- Security and AI contractual addendum: https://docs.google.com/document/d/1841jerY4QNQ9X0hlXO8XC5kvWfAKeohAUivm_u3h3t0

For our August 2026 roundup, Steve and I chatted about:

- AI-generated fake publicists pitch journalists: https://www.newsbytesapp.com/news/science/movchan-agency-used-ai-generated-fake-publicists-to-pitch-journalists/tldr

- State attorneys’ general demand evidence preservation and end to high-risk testing at OpenAI: https://www.iowaattorneygeneral.gov/media/cms/08_5392C9E17791C.pdf

- Reporting about GPT-5.6 Sol leaving "notes to self": https://www.reuters.com/business/its-ai-agent-spent-days-hacking-company-sources-say-openai-did-not-notice-week-2026-07-24/

- METR pre-release testing of GPT-5.6 Sol gave warnings: https://metr.org/blog/2026-06-26-gpt-5-6-sol/

- Sam Altman's suggestion about using ChatGPT with children, and the backlash: https://x.com/sama/status/2083221585792762171

- NVIDIA on "Open Weights and American AI Leadership": https://images.nvidia.com/pdf/Open-Weights-and-American-AI-Leadership.pdf

- Sheriff's office edits photos of evidence with AI: https://katv.com/news/local/saline-co-sheriffs-office-said-ai-was-used-to-edit-evidence-photo-after-online-backlash-reporter-autumn-foltz-ualr-law-professor-robert-steinbuch-artificial-intelligence-money-drugs-arrest

For the July 2026 version of the Aware AI Brief, Cameron and I talked about:

- Whether defining catastrophic AI risk in measurable terms improves accountability
- Proposals for a FINRA-like standards body to test frontier AI models
- "Principles-based AI governance"

And more!

Resources:

- The Complete ISO 42001 Certification Roadmap For 2026 (FREE AI Governance Course) https://www.youtube.com/watch?v=u_Gg0ie_M4o

- 5-day email course: https://www.managementsystem.ai/

- AI risk readiness kit (top 5 AI system vulnerabilities): https://kit.stackaware.com/