About

Governments are mandating AI oversight. Enterprises are stalling.

Two very different maturity curves. Federal civilian agencies are being pushed by executive mandate to embed governance into every AI deployment. Enterprises are still treating governance as a compliance task, and progress has flattened since 2024. This is what the divide looks like in 2026.   (Note:  you can download this factsheet – no registration required.  The link is in the toolbar inside the document window.  On the right hand side, look for the “PDF” Read more

Schools have guidance, not AI regulation. Every institution is on its own.

Unlike healthcare or financial services, post-secondary education has no dedicated AI regulator with enforcement powers.  What exists is a growing library of voluntary principles and departmental letters. The consequence is that every campus is writing its own rulebook, and every faculty of law, medicine, and education is grading it in real time.     (Note:  you can download this factsheet – no registration required.  The link is in the toolbar inside the document window.  On Read more

Trust is not a message. It is an AI architecture.

EY’s Trust as Architecture study finds that resilient enterprises stop treating trust as brand narrative and start engineering it into how AI is built, procured, and operated. This is what the stack looks like when it works; this is Ethosure’s position: policy as code, trust as architecture. Some statistics to support trust as code: $10.2M – Average data breach cost 49,000 –  Vulnerabilities disclosed in 2024 <29 min – Fastest recorded breakout time from access Read more

Healthcare has 1,451 AI devices and one shifting rulebook.

The FDA has authorized more AI-enabled medical devices than any other regulator in the world. The rules governing how they are updated, disclosed, and monitored are being rewritten in real time, and not always in the direction of stronger oversight. 1,451: FDA-authorized AI/ML devices, cumulative through Dec 2025 76%: Share concentrated in radiology imaging 295: New authorizations in calendar year 2025, a record 0: Generative-AI or LLM-powered devices authorized to date (Note:  you can download Read more

What every regulated bank, credit union, and insurer needs in place for AI Governance

A six-layer view of the controls, roles, and reporting lines that a Canadian federally regulated financial institution (FRFI) will be expected to demonstrate under OSFI Guideline E-23, with parallel obligations from the CFPB, NYDFS, and the EU AI Act for cross-border activity.  Proper AI governance demands this. (Note:  you can download this factsheet – no registration required.  The link is in the toolbar inside the document window.  On the right hand side, look for the Read more

Power Grids are Getting Rewired for AI and You Are Paying the Bill

Federal reliability regulators have just made data centres, cryptocurrency mines, and other computational loads a directly registered class under Section 215 of the Federal Power Act. State utility commissions are still catching up. Ratepayers are being asked to fund AI-driven capital plans without a governance layer that says what the AI is doing. (Note:  you can download this factsheet – no registration required.  The link is in the toolbar inside the document window.  On the Read more

Enterprise AI spend is doubling year over year. Only 28% of use cases hit their ROI targets, and 42% of 2025 initiatives were scrapped. Governance is now the fastest-growing line item in the AI budget – and the deciding factor between agents that pay back and agents that burn.

Unmanaged AI Agents Burn Budget.

Enterprise AI spend is doubling year over year. Only 28% of use cases hit their ROI targets, and 42% of 2025 initiatives were scrapped. Governance is now the fastest-growing line item in the AI budget – and the deciding factor between agents that pay back and agents that burn. (Note:  you can download this factsheet – no registration required.  The link is in the toolbar inside the document window.  On the right hand side, look Read more

The CISO’s Guide to AI Control

A control problem, not a model problem. Agentic AI has crossed the threshold from experiment to operational dependency. Gartner projects that 33% of enterprise applications will embed agentic AI by 2028, up from less than 1% in 2024, and that 15% of day-to-day work decisions will be made autonomously by 2028 (Gartner, June 25, 2025). At the same time, IBM’s 2025 Cost of a Data Breach report finds that 13% of organizations already had a Read more